[web] for the freeipa guide - finishing complete first draft; some bug fixing; spellchecking
Ella Lackey
elladeon at fedoraproject.org
Fri Sep 16 18:02:09 UTC 2011
commit 56accd5061c709895097d7144526893479fd13a3
Author: elladeon <dlackey at redhat.com>
Date: Fri Sep 16 14:01:41 2011 -0400
for the freeipa guide - finishing complete first draft; some bug fixing; spellchecking
fedoradocs.db | Bin 595968 -> 595968 bytes
public_html/Sitemap | 50 +-
public_html/as-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/as-IN/opds-Fedora_Core.xml | 2 +-
.../as-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/as-IN/opds.xml | 10 +-
public_html/as-IN/toc.html | 12 +-
public_html/bg-BG/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/bg-BG/opds-Fedora_Core.xml | 2 +-
.../bg-BG/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/bg-BG/opds.xml | 10 +-
public_html/bg-BG/toc.html | 12 +-
public_html/bn-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/bn-IN/opds-Fedora_Core.xml | 2 +-
.../bn-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/bn-IN/opds.xml | 10 +-
public_html/bn-IN/toc.html | 12 +-
public_html/bs-BA/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/bs-BA/opds-Fedora_Core.xml | 2 +-
.../bs-BA/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/bs-BA/opds.xml | 10 +-
public_html/bs-BA/toc.html | 12 +-
public_html/ca-ES/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ca-ES/opds-Fedora_Core.xml | 2 +-
.../ca-ES/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ca-ES/opds.xml | 10 +-
public_html/ca-ES/toc.html | 14 +-
public_html/cs-CZ/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/cs-CZ/opds-Fedora_Core.xml | 2 +-
.../cs-CZ/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/cs-CZ/opds.xml | 10 +-
public_html/cs-CZ/toc.html | 14 +-
public_html/da-DK/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/da-DK/opds-Fedora_Core.xml | 2 +-
.../da-DK/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/da-DK/opds.xml | 10 +-
public_html/da-DK/toc.html | 12 +-
public_html/de-DE/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/de-DE/opds-Fedora_Core.xml | 2 +-
.../de-DE/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/de-DE/opds.xml | 10 +-
public_html/de-DE/toc.html | 14 +-
public_html/el-GR/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/el-GR/opds-Fedora_Core.xml | 2 +-
.../el-GR/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/el-GR/opds.xml | 10 +-
public_html/el-GR/toc.html | 12 +-
.../Fedora-15-FreeIPA_Guide-en-US.epub | Bin 1800704 -> 5290909 bytes
.../FreeIPA_Guide/Common_Content/css/common.css | 52 +-
.../Common_Content/images/watermark-draft.png | Bin 32139 -> 25365 bytes
.../images/IPA_Migration_Initial_State.png | Bin 22582 -> 25753 bytes
.../FreeIPA_Guide/images/automount-breadcrumbs.png | Bin 0 -> 10952 bytes
.../FreeIPA_Guide/images/automount-direct1.png | Bin 0 -> 13869 bytes
.../FreeIPA_Guide/images/automount-direct2.png | Bin 0 -> 13324 bytes
.../FreeIPA_Guide/images/automount-indirect1.png | Bin 0 -> 16417 bytes
.../FreeIPA_Guide/images/automount-key-list.png | Bin 0 -> 18728 bytes
.../images/automount-location-list.png | Bin 0 -> 24421 bytes
.../FreeIPA_Guide/images/automount-location.png | Bin 0 -> 8577 bytes
.../FreeIPA_Guide/images/automount-map-list.png | Bin 0 -> 24608 bytes
.../FreeIPA_Guide/images/browser-kinit-fedora.png | Bin 0 -> 64444 bytes
.../FreeIPA_Guide/images/browser-kinit-rhel.png | Bin 0 -> 63715 bytes
.../FreeIPA_Guide/images/collapse-arrows.png | Bin 0 -> 9659 bytes
.../FreeIPA_Guide/images/configuring-browser1.png | Bin 0 -> 27720 bytes
.../FreeIPA_Guide/images/configuring-browser2.png | Bin 0 -> 15022 bytes
.../FreeIPA_Guide/images/configuring-browser3.png | Bin 0 -> 12237 bytes
.../FreeIPA_Guide/images/delegation-add.png | Bin 0 -> 16187 bytes
.../FreeIPA_Guide/images/delegation-list.png | Bin 0 -> 30007 bytes
.../FreeIPA_Guide/images/dns-zone-active.png | Bin 0 -> 20200 bytes
.../FreeIPA_Guide/images/dns-zone-dynamic.png | Bin 0 -> 28579 bytes
.../FreeIPA_Guide/images/dns-zone-list.png | Bin 0 -> 25250 bytes
.../FreeIPA_Guide/images/dns-zone-new.png | Bin 0 -> 15218 bytes
.../FreeIPA_Guide/images/dns-zone-record-list.png | Bin 0 -> 38583 bytes
.../FreeIPA_Guide/images/dns-zone-record-new.png | Bin 0 -> 10331 bytes
.../FreeIPA_Guide/images/dns-zone-record-types.png | Bin 0 -> 21842 bytes
.../FreeIPA_Guide/images/dns-zone-settings.png | Bin 0 -> 28156 bytes
.../FreeIPA_Guide/images/ent-domain-apply.png | Bin 0 -> 30918 bytes
.../FreeIPA_Guide/images/ent-domain-download.png | Bin 0 -> 27533 bytes
.../FreeIPA_Guide/images/ent-domain-register.png | Bin 0 -> 23195 bytes
.../FreeIPA_Guide/images/ent-import1.png | Bin 0 -> 31602 bytes
.../FreeIPA_Guide/images/ent-import2.png | Bin 0 -> 47706 bytes
.../html-single/FreeIPA_Guide/images/ent-reg2.png | Bin 0 -> 7135 bytes
.../FreeIPA_Guide/images/ent-register.png | Bin 0 -> 47483 bytes
.../FreeIPA_Guide/images/finalstate.svg | 42 +-
.../html-single/FreeIPA_Guide/images/group-add.png | Bin 0 -> 13322 bytes
.../FreeIPA_Guide/images/group-addmembers-user.png | Bin 0 -> 16416 bytes
.../FreeIPA_Guide/images/group-config.png | Bin 0 -> 37905 bytes
.../FreeIPA_Guide/images/group-delete.png | Bin 0 -> 8526 bytes
.../FreeIPA_Guide/images/group-links.png | Bin 0 -> 24550 bytes
.../FreeIPA_Guide/images/group-list.png | Bin 0 -> 26449 bytes
.../FreeIPA_Guide/images/groups-addmembers.png | Bin 0 -> 17899 bytes
.../FreeIPA_Guide/images/groups-menu.png | Bin 0 -> 68508 bytes
.../FreeIPA_Guide/images/groups-menu2.png | Bin 0 -> 46511 bytes
.../html-single/FreeIPA_Guide/images/hbac-from.png | Bin 0 -> 15484 bytes
.../FreeIPA_Guide/images/hbac-rule-addservice.png | Bin 0 -> 19408 bytes
.../FreeIPA_Guide/images/hbac-rule-new.png | Bin 0 -> 6505 bytes
.../FreeIPA_Guide/images/hbac-rule-target-add.png | Bin 0 -> 15098 bytes
.../FreeIPA_Guide/images/hbac-rule-target.png | Bin 0 -> 16118 bytes
.../FreeIPA_Guide/images/hbac-rule-user-add.png | Bin 0 -> 16155 bytes
.../FreeIPA_Guide/images/hbac-rule-user.png | Bin 0 -> 19003 bytes
.../FreeIPA_Guide/images/hbac-rule-viasrv.png | Bin 0 -> 17269 bytes
.../FreeIPA_Guide/images/hbac-rules-list.png | Bin 0 -> 47407 bytes
.../FreeIPA_Guide/images/hbac-service-new.png | Bin 0 -> 9295 bytes
.../FreeIPA_Guide/images/hbac-services-list.png | Bin 0 -> 40364 bytes
.../FreeIPA_Guide/images/hbac-svcgrp-list.png | Bin 0 -> 37451 bytes
.../FreeIPA_Guide/images/hbac-svcgrp-member1.png | Bin 0 -> 38172 bytes
.../FreeIPA_Guide/images/hbac-svcgrp-member2.png | Bin 0 -> 19448 bytes
.../FreeIPA_Guide/images/hbac-svcgrp-new.png | Bin 0 -> 9292 bytes
.../html-single/FreeIPA_Guide/images/host-add.png | Bin 0 -> 9192 bytes
.../html-single/FreeIPA_Guide/images/host-attr.png | Bin 0 -> 56493 bytes
.../FreeIPA_Guide/images/host-krbinfo.png | Bin 0 -> 16270 bytes
.../FreeIPA_Guide/images/hostgroup-add.png | Bin 0 -> 8140 bytes
.../FreeIPA_Guide/images/hostgroup-list.png | Bin 0 -> 33504 bytes
.../FreeIPA_Guide/images/hostgroups-addmembers.png | Bin 0 -> 17225 bytes
.../FreeIPA_Guide/images/hostgroups-menu.png | Bin 0 -> 36038 bytes
.../FreeIPA_Guide/images/hosts-list.png | Bin 0 -> 37419 bytes
.../images/indirect-group-filters.png | Bin 0 -> 3433 bytes
.../html-single/FreeIPA_Guide/images/initstate.svg | 9239 ++++++++++++
.../FreeIPA_Guide/images/krb-ticket-policy.png | Bin 0 -> 39986 bytes
.../html-single/FreeIPA_Guide/images/migr-krb.svg |15586 ++++++++++++++++++++
.../html-single/FreeIPA_Guide/images/migr-ldap.png | Bin 0 -> 43475 bytes
.../html-single/FreeIPA_Guide/images/migr-ldap.svg | 8315 +++++++++++
.../html-single/FreeIPA_Guide/images/migr-sssd.png | Bin 0 -> 72023 bytes
.../html-single/FreeIPA_Guide/images/migr-sssd.svg | 9976 +++++++++++++
.../FreeIPA_Guide/images/migr-sssd2.png | Bin 0 -> 74631 bytes
.../FreeIPA_Guide/images/migr-sssd2.svg | 9389 ++++++++++++
.../FreeIPA_Guide/images/netgroup-add.png | Bin 0 -> 11084 bytes
.../FreeIPA_Guide/images/netgroup-domain.png | Bin 0 -> 22795 bytes
.../FreeIPA_Guide/images/netgroup-list.png | Bin 0 -> 32115 bytes
.../FreeIPA_Guide/images/netgroups-menu.png | Bin 0 -> 11843 bytes
.../FreeIPA_Guide/images/nis-members.png | Bin 0 -> 22589 bytes
.../FreeIPA_Guide/images/pwd-policy-global.png | Bin 0 -> 35419 bytes
.../FreeIPA_Guide/images/pwd-policy-page.png | Bin 0 -> 27695 bytes
.../FreeIPA_Guide/images/pwd-policy1a.png | Bin 0 -> 10992 bytes
.../FreeIPA_Guide/images/pwd-policy1b.png | Bin 0 -> 7899 bytes
.../FreeIPA_Guide/images/pwd-policy2.png | Bin 0 -> 52753 bytes
.../FreeIPA_Guide/images/pwd-reset1.png | Bin 0 -> 11784 bytes
.../FreeIPA_Guide/images/pwd-reset2.png | Bin 0 -> 10873 bytes
.../FreeIPA_Guide/images/rhsm-web-consumer-add.png | Bin 0 -> 12485 bytes
.../html-single/FreeIPA_Guide/images/role-add.png | Bin 0 -> 8553 bytes
.../html-single/FreeIPA_Guide/images/role-list.png | Bin 0 -> 50547 bytes
.../FreeIPA_Guide/images/role-permission-add.png | Bin 0 -> 14736 bytes
.../FreeIPA_Guide/images/role-permission-list.png | Bin 0 -> 31207 bytes
.../FreeIPA_Guide/images/role-priv-add.png | Bin 0 -> 9626 bytes
.../FreeIPA_Guide/images/role-priv-addperm.png | Bin 0 -> 26490 bytes
.../FreeIPA_Guide/images/role-priv-addperm2.png | Bin 0 -> 21470 bytes
.../FreeIPA_Guide/images/role-priv-list.png | Bin 0 -> 48995 bytes
.../FreeIPA_Guide/images/role-privadd.png | Bin 0 -> 24523 bytes
.../FreeIPA_Guide/images/role-privlist.png | Bin 0 -> 37009 bytes
.../FreeIPA_Guide/images/role-user-list.png | Bin 0 -> 42962 bytes
.../FreeIPA_Guide/images/role-users-add.png | Bin 0 -> 18896 bytes
.../FreeIPA_Guide/images/selfservice-add.png | Bin 0 -> 14464 bytes
.../FreeIPA_Guide/images/selfservice-edit.png | Bin 0 -> 18938 bytes
.../FreeIPA_Guide/images/selfservice-list.png | Bin 0 -> 21901 bytes
.../FreeIPA_Guide/images/server-config-users.png | Bin 0 -> 36205 bytes
.../FreeIPA_Guide/images/server-config.png | Bin 0 -> 36599 bytes
.../FreeIPA_Guide/images/service-add1.png | Bin 0 -> 15345 bytes
.../FreeIPA_Guide/images/service-add2.png | Bin 0 -> 17818 bytes
.../FreeIPA_Guide/images/service-cert.png | Bin 0 -> 5798 bytes
.../FreeIPA_Guide/images/services-list.png | Bin 0 -> 31803 bytes
.../FreeIPA_Guide/images/sudo-cmd-list.png | Bin 0 -> 35069 bytes
.../FreeIPA_Guide/images/sudo-cmd-new.png | Bin 0 -> 8284 bytes
.../FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png | Bin 0 -> 14796 bytes
.../FreeIPA_Guide/images/sudo-cmdgrp-list.png | Bin 0 -> 34683 bytes
.../FreeIPA_Guide/images/sudo-cmdgrp-new.png | Bin 0 -> 8652 bytes
.../FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png | Bin 0 -> 13060 bytes
.../FreeIPA_Guide/images/sudo-rule-allow-add.png | Bin 0 -> 15630 bytes
.../FreeIPA_Guide/images/sudo-rule-allow.png | Bin 0 -> 37466 bytes
.../FreeIPA_Guide/images/sudo-rule-host-add.png | Bin 0 -> 16661 bytes
.../FreeIPA_Guide/images/sudo-rule-host.png | Bin 0 -> 16157 bytes
.../FreeIPA_Guide/images/sudo-rule-new.png | Bin 0 -> 6624 bytes
.../FreeIPA_Guide/images/sudo-rule-opt-new.png | Bin 0 -> 6680 bytes
.../FreeIPA_Guide/images/sudo-rule-opt.png | Bin 0 -> 13962 bytes
.../FreeIPA_Guide/images/sudo-rule-runas-add.png | Bin 0 -> 17896 bytes
.../FreeIPA_Guide/images/sudo-rule-runas.png | Bin 0 -> 23159 bytes
.../FreeIPA_Guide/images/sudo-rule-user-add.png | Bin 0 -> 18836 bytes
.../FreeIPA_Guide/images/sudo-rule-user.png | Bin 0 -> 24770 bytes
.../FreeIPA_Guide/images/sudo-rules-list.png | Bin 0 -> 32002 bytes
.../FreeIPA_Guide/images/ui-full-form.png | Bin 0 -> 58186 bytes
.../FreeIPA_Guide/images/ui-full-list.png | Bin 0 -> 73332 bytes
.../html-single/FreeIPA_Guide/images/ui-tabs.png | Bin 0 -> 47076 bytes
.../FreeIPA_Guide/images/undo-button.png | Bin 0 -> 10734 bytes
.../FreeIPA_Guide/images/update-link.png | Bin 0 -> 13314 bytes
.../FreeIPA_Guide/images/user-acctsettings.png | Bin 0 -> 41872 bytes
.../FreeIPA_Guide/images/user-addcontact.png | Bin 0 -> 7986 bytes
.../FreeIPA_Guide/images/user-additional-attr.png | Bin 0 -> 51617 bytes
.../html-single/FreeIPA_Guide/images/user-attr.png | Bin 0 -> 56784 bytes
.../FreeIPA_Guide/images/user-delete.png | Bin 0 -> 8160 bytes
.../html-single/FreeIPA_Guide/images/user-list.png | Bin 0 -> 39141 bytes
.../html-single/FreeIPA_Guide/images/user-new.png | Bin 0 -> 7335 bytes
.../images/user-objectclass-change.png | Bin 0 -> 23697 bytes
.../FreeIPA_Guide/images/user-search.png | Bin 0 -> 42079 bytes
.../Fedora/15/html-single/FreeIPA_Guide/index.html | 7695 ++++++----
...Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html | 20 +-
.../15/html/FreeIPA_Guide/Client_Problems.html | 6 +-
.../FreeIPA_Guide/Common_Content/css/common.css | 52 +-
.../Common_Content/images/watermark-draft.png | Bin 32139 -> 25365 bytes
...Authentication-Refreshing_Kerberos_Tickets.html | 8 +-
...g_Certificates_and_Certificate_Authorities.html | 16 +-
...IPA_Users-Specifying_Default_User_Settings.html | 150 +-
.../Configuring_Microsoft_Windows.html | 10 +-
.../Configuring_an_IPA_Client_on_AIX.html | 6 +-
.../Configuring_an_IPA_Client_on_HP_UX.html | 24 +-
...onfiguring_an_IPA_Client_on_Macintosh_OS_X.html | 20 +-
.../Configuring_an_IPA_Client_on_Solaris.html | 6 +-
.../html/FreeIPA_Guide/Document_Conventions.html | 10 +-
.../Exposing_Automount_Maps_to_NIS_Clients.html | 6 +-
...nding_the_Permissions_of_IPA_Managed_Hosts.html | 20 +-
.../Fedora/15/html/FreeIPA_Guide/Glossary.html | 4 +-
.../15/html/FreeIPA_Guide/HBAC_Service_Groups.html | 75 +
.../Installing_the_IPA_Client_on_Linux.html | 6 +-
.../Installing_the_IPA_Server_Packages.html | 4 +-
.../15/html/FreeIPA_Guide/Kerberos_Errors.html | 26 +-
.../Managing-Unique_UID_and_GID_Attributes.html | 12 +-
.../Managing_DNS_Zones-Adding_DNS_Zones.html | 36 +-
...ging_DNS_Zones-Adding_Records_to_DNS_Zones.html | 110 +-
..._DNS_Zones-Deleting_Records_from_DNS_Zones.html | 36 +-
...to_IPA-Performing_a_Client_based_Migration.html | 61 +-
...to_IPA-Performing_a_Server_based_Migration.html | 94 +-
.../Migrating_from_a_Directory_Server_to_IPA.html | 68 +-
.../Overview-Recommended_Sequence_of_Steps.html | 66 +-
.../Fedora/15/html/FreeIPA_Guide/Preface.html | 6 +-
.../Setting_Account-lockout_Policies.html | 24 +
...assword_Policies_for_Different_User_Groups.html | 55 +
.../Setting_the_Priority_of_Password_Policies.html | 20 +
.../FreeIPA_Guide/Setting_up_Active_Directory.html | 8 +-
.../FreeIPA_Guide/Setting_up_IPA_Replicas.html | 14 +-
...assword_Policy-Editing_the_Password_Policy.html | 36 +
.../FreeIPA_Guide/Uninstalling_IPA_Servers.html | 4 +-
.../Fedora/15/html/FreeIPA_Guide/Using_OCSP.html | 16 +-
.../Using_SSH_for_Password_Authentication.html | 16 +
.../15/html/FreeIPA_Guide/Working_with_DNS.html | 16 +-
..._with_certmonger-Using_certmonger_with_NSS.html | 16 +
.../15/html/FreeIPA_Guide/active-directory.html | 42 +-
.../15/html/FreeIPA_Guide/adding-host-entry.html | 38 +-
.../15/html/FreeIPA_Guide/adding-locations.html | 32 +-
.../15/html/FreeIPA_Guide/adding-netgroups.html | 60 +-
.../Fedora/15/html/FreeIPA_Guide/automount.html | 8 +-
.../Fedora/15/html/FreeIPA_Guide/basic-usage.html | 121 +-
.../html/FreeIPA_Guide/bind-dyndb-ldap-config.html | 20 +-
.../FreeIPA_Guide/certmonger-tracking-certs.html | 18 +
.../Fedora/15/html/FreeIPA_Guide/certmongerX.html | 82 +-
.../15/html/FreeIPA_Guide/changing-forwarder.html | 6 +-
.../15/html/FreeIPA_Guide/changing-pwds.html | 22 +-
...anagement_Guide-Frequently_Asked_Questions.html | 30 +-
.../Fedora/15/html/FreeIPA_Guide/client-tools.html | 18 +-
.../html/FreeIPA_Guide/configuring-automount.html | 12 +-
.../FreeIPA_Guide/configuring-host-access.html | 265 +-
.../15/html/FreeIPA_Guide/configuring-maps.html | 90 +-
.../15/html/FreeIPA_Guide/creating-server.html | 30 +-
.../15/html/FreeIPA_Guide/defining-roles.html | 252 +
.../15/html/FreeIPA_Guide/defining-sudocmds.html | 68 +-
.../15/html/FreeIPA_Guide/defining-sudorules.html | 186 +-
.../15/html/FreeIPA_Guide/delegating-users.html | 56 +
.../html/FreeIPA_Guide/disabling-anon-binds.html | 20 +-
.../15/html/FreeIPA_Guide/dns-multihomed.html | 8 +-
.../Fedora/15/html/FreeIPA_Guide/dns-resolve.html | 6 +-
.../Fedora/15/html/FreeIPA_Guide/doc-history.html | 6 +-
.../Fedora/15/html/FreeIPA_Guide/enabling-dns.html | 14 +-
.../15/html/FreeIPA_Guide/enabling-zones.html | 28 +-
.../15/html/FreeIPA_Guide/enrolling-machines.html | 33 +-
.../FreeIPA_Guide/example-configuring-sudo.html | 20 +-
.../Fedora/15/html/FreeIPA_Guide/feedback.html | 4 +-
.../Fedora/15/html/FreeIPA_Guide/hbac-rules.html | 212 +
.../Fedora/15/html/FreeIPA_Guide/hbac-testing.html | 80 +
.../Fedora/15/html/FreeIPA_Guide/host-disable.html | 12 +-
.../Fedora/15/html/FreeIPA_Guide/host-groups.html | 52 +-
.../en-US/Fedora/15/html/FreeIPA_Guide/hosts.html | 46 +-
.../images/IPA_Migration_Initial_State.png | Bin 22582 -> 25753 bytes
.../FreeIPA_Guide/images/automount-breadcrumbs.png | Bin 0 -> 10952 bytes
.../FreeIPA_Guide/images/automount-direct1.png | Bin 0 -> 13869 bytes
.../FreeIPA_Guide/images/automount-direct2.png | Bin 0 -> 13324 bytes
.../FreeIPA_Guide/images/automount-indirect1.png | Bin 0 -> 16417 bytes
.../FreeIPA_Guide/images/automount-key-list.png | Bin 0 -> 18728 bytes
.../images/automount-location-list.png | Bin 0 -> 24421 bytes
.../FreeIPA_Guide/images/automount-location.png | Bin 0 -> 8577 bytes
.../FreeIPA_Guide/images/automount-map-list.png | Bin 0 -> 24608 bytes
.../FreeIPA_Guide/images/browser-kinit-fedora.png | Bin 0 -> 64444 bytes
.../FreeIPA_Guide/images/browser-kinit-rhel.png | Bin 0 -> 63715 bytes
.../html/FreeIPA_Guide/images/collapse-arrows.png | Bin 0 -> 9659 bytes
.../FreeIPA_Guide/images/configuring-browser1.png | Bin 0 -> 27720 bytes
.../FreeIPA_Guide/images/configuring-browser2.png | Bin 0 -> 15022 bytes
.../FreeIPA_Guide/images/configuring-browser3.png | Bin 0 -> 12237 bytes
.../html/FreeIPA_Guide/images/delegation-add.png | Bin 0 -> 16187 bytes
.../html/FreeIPA_Guide/images/delegation-list.png | Bin 0 -> 30007 bytes
.../html/FreeIPA_Guide/images/dns-zone-active.png | Bin 0 -> 20200 bytes
.../html/FreeIPA_Guide/images/dns-zone-dynamic.png | Bin 0 -> 28579 bytes
.../15/html/FreeIPA_Guide/images/dns-zone-list.png | Bin 0 -> 25250 bytes
.../15/html/FreeIPA_Guide/images/dns-zone-new.png | Bin 0 -> 15218 bytes
.../FreeIPA_Guide/images/dns-zone-record-list.png | Bin 0 -> 38583 bytes
.../FreeIPA_Guide/images/dns-zone-record-new.png | Bin 0 -> 10331 bytes
.../FreeIPA_Guide/images/dns-zone-record-types.png | Bin 0 -> 21842 bytes
.../FreeIPA_Guide/images/dns-zone-settings.png | Bin 0 -> 28156 bytes
.../html/FreeIPA_Guide/images/ent-domain-apply.png | Bin 0 -> 30918 bytes
.../FreeIPA_Guide/images/ent-domain-download.png | Bin 0 -> 27533 bytes
.../FreeIPA_Guide/images/ent-domain-register.png | Bin 0 -> 23195 bytes
.../15/html/FreeIPA_Guide/images/ent-import1.png | Bin 0 -> 31602 bytes
.../15/html/FreeIPA_Guide/images/ent-import2.png | Bin 0 -> 47706 bytes
.../15/html/FreeIPA_Guide/images/ent-reg2.png | Bin 0 -> 7135 bytes
.../15/html/FreeIPA_Guide/images/ent-register.png | Bin 0 -> 47483 bytes
.../15/html/FreeIPA_Guide/images/finalstate.svg | 42 +-
.../15/html/FreeIPA_Guide/images/group-add.png | Bin 0 -> 13322 bytes
.../FreeIPA_Guide/images/group-addmembers-user.png | Bin 0 -> 16416 bytes
.../15/html/FreeIPA_Guide/images/group-config.png | Bin 0 -> 37905 bytes
.../15/html/FreeIPA_Guide/images/group-delete.png | Bin 0 -> 8526 bytes
.../15/html/FreeIPA_Guide/images/group-links.png | Bin 0 -> 24550 bytes
.../15/html/FreeIPA_Guide/images/group-list.png | Bin 0 -> 26449 bytes
.../FreeIPA_Guide/images/groups-addmembers.png | Bin 0 -> 17899 bytes
.../15/html/FreeIPA_Guide/images/groups-menu.png | Bin 0 -> 68508 bytes
.../15/html/FreeIPA_Guide/images/groups-menu2.png | Bin 0 -> 46511 bytes
.../15/html/FreeIPA_Guide/images/hbac-from.png | Bin 0 -> 15484 bytes
.../FreeIPA_Guide/images/hbac-rule-addservice.png | Bin 0 -> 19408 bytes
.../15/html/FreeIPA_Guide/images/hbac-rule-new.png | Bin 0 -> 6505 bytes
.../FreeIPA_Guide/images/hbac-rule-target-add.png | Bin 0 -> 15098 bytes
.../html/FreeIPA_Guide/images/hbac-rule-target.png | Bin 0 -> 16118 bytes
.../FreeIPA_Guide/images/hbac-rule-user-add.png | Bin 0 -> 16155 bytes
.../html/FreeIPA_Guide/images/hbac-rule-user.png | Bin 0 -> 19003 bytes
.../html/FreeIPA_Guide/images/hbac-rule-viasrv.png | Bin 0 -> 17269 bytes
.../html/FreeIPA_Guide/images/hbac-rules-list.png | Bin 0 -> 47407 bytes
.../html/FreeIPA_Guide/images/hbac-service-new.png | Bin 0 -> 9295 bytes
.../FreeIPA_Guide/images/hbac-services-list.png | Bin 0 -> 40364 bytes
.../html/FreeIPA_Guide/images/hbac-svcgrp-list.png | Bin 0 -> 37451 bytes
.../FreeIPA_Guide/images/hbac-svcgrp-member1.png | Bin 0 -> 38172 bytes
.../FreeIPA_Guide/images/hbac-svcgrp-member2.png | Bin 0 -> 19448 bytes
.../html/FreeIPA_Guide/images/hbac-svcgrp-new.png | Bin 0 -> 9292 bytes
.../15/html/FreeIPA_Guide/images/host-add.png | Bin 0 -> 9192 bytes
.../15/html/FreeIPA_Guide/images/host-attr.png | Bin 0 -> 56493 bytes
.../15/html/FreeIPA_Guide/images/host-krbinfo.png | Bin 0 -> 16270 bytes
.../15/html/FreeIPA_Guide/images/hostgroup-add.png | Bin 0 -> 8140 bytes
.../html/FreeIPA_Guide/images/hostgroup-list.png | Bin 0 -> 33504 bytes
.../FreeIPA_Guide/images/hostgroups-addmembers.png | Bin 0 -> 17225 bytes
.../html/FreeIPA_Guide/images/hostgroups-menu.png | Bin 0 -> 36038 bytes
.../15/html/FreeIPA_Guide/images/hosts-list.png | Bin 0 -> 37419 bytes
.../images/indirect-group-filters.png | Bin 0 -> 3433 bytes
.../15/html/FreeIPA_Guide/images/initstate.svg | 9239 ++++++++++++
.../FreeIPA_Guide/images/krb-ticket-policy.png | Bin 0 -> 39986 bytes
.../15/html/FreeIPA_Guide/images/migr-krb.svg |15586 ++++++++++++++++++++
.../15/html/FreeIPA_Guide/images/migr-ldap.png | Bin 0 -> 43475 bytes
.../15/html/FreeIPA_Guide/images/migr-ldap.svg | 8315 +++++++++++
.../15/html/FreeIPA_Guide/images/migr-sssd.png | Bin 0 -> 72023 bytes
.../15/html/FreeIPA_Guide/images/migr-sssd.svg | 9976 +++++++++++++
.../15/html/FreeIPA_Guide/images/migr-sssd2.png | Bin 0 -> 74631 bytes
.../15/html/FreeIPA_Guide/images/migr-sssd2.svg | 9389 ++++++++++++
.../15/html/FreeIPA_Guide/images/netgroup-add.png | Bin 0 -> 11084 bytes
.../html/FreeIPA_Guide/images/netgroup-domain.png | Bin 0 -> 22795 bytes
.../15/html/FreeIPA_Guide/images/netgroup-list.png | Bin 0 -> 32115 bytes
.../html/FreeIPA_Guide/images/netgroups-menu.png | Bin 0 -> 11843 bytes
.../15/html/FreeIPA_Guide/images/nis-members.png | Bin 0 -> 22589 bytes
.../FreeIPA_Guide/images/pwd-policy-global.png | Bin 0 -> 35419 bytes
.../html/FreeIPA_Guide/images/pwd-policy-page.png | Bin 0 -> 27695 bytes
.../15/html/FreeIPA_Guide/images/pwd-policy1a.png | Bin 0 -> 10992 bytes
.../15/html/FreeIPA_Guide/images/pwd-policy1b.png | Bin 0 -> 7899 bytes
.../15/html/FreeIPA_Guide/images/pwd-policy2.png | Bin 0 -> 52753 bytes
.../15/html/FreeIPA_Guide/images/pwd-reset1.png | Bin 0 -> 11784 bytes
.../15/html/FreeIPA_Guide/images/pwd-reset2.png | Bin 0 -> 10873 bytes
.../FreeIPA_Guide/images/rhsm-web-consumer-add.png | Bin 0 -> 12485 bytes
.../15/html/FreeIPA_Guide/images/role-add.png | Bin 0 -> 8553 bytes
.../15/html/FreeIPA_Guide/images/role-list.png | Bin 0 -> 50547 bytes
.../FreeIPA_Guide/images/role-permission-add.png | Bin 0 -> 14736 bytes
.../FreeIPA_Guide/images/role-permission-list.png | Bin 0 -> 31207 bytes
.../15/html/FreeIPA_Guide/images/role-priv-add.png | Bin 0 -> 9626 bytes
.../FreeIPA_Guide/images/role-priv-addperm.png | Bin 0 -> 26490 bytes
.../FreeIPA_Guide/images/role-priv-addperm2.png | Bin 0 -> 21470 bytes
.../html/FreeIPA_Guide/images/role-priv-list.png | Bin 0 -> 48995 bytes
.../15/html/FreeIPA_Guide/images/role-privadd.png | Bin 0 -> 24523 bytes
.../15/html/FreeIPA_Guide/images/role-privlist.png | Bin 0 -> 37009 bytes
.../html/FreeIPA_Guide/images/role-user-list.png | Bin 0 -> 42962 bytes
.../html/FreeIPA_Guide/images/role-users-add.png | Bin 0 -> 18896 bytes
.../html/FreeIPA_Guide/images/selfservice-add.png | Bin 0 -> 14464 bytes
.../html/FreeIPA_Guide/images/selfservice-edit.png | Bin 0 -> 18938 bytes
.../html/FreeIPA_Guide/images/selfservice-list.png | Bin 0 -> 21901 bytes
.../FreeIPA_Guide/images/server-config-users.png | Bin 0 -> 36205 bytes
.../15/html/FreeIPA_Guide/images/server-config.png | Bin 0 -> 36599 bytes
.../15/html/FreeIPA_Guide/images/service-add1.png | Bin 0 -> 15345 bytes
.../15/html/FreeIPA_Guide/images/service-add2.png | Bin 0 -> 17818 bytes
.../15/html/FreeIPA_Guide/images/service-cert.png | Bin 0 -> 5798 bytes
.../15/html/FreeIPA_Guide/images/services-list.png | Bin 0 -> 31803 bytes
.../15/html/FreeIPA_Guide/images/sudo-cmd-list.png | Bin 0 -> 35069 bytes
.../15/html/FreeIPA_Guide/images/sudo-cmd-new.png | Bin 0 -> 8284 bytes
.../FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png | Bin 0 -> 14796 bytes
.../html/FreeIPA_Guide/images/sudo-cmdgrp-list.png | Bin 0 -> 34683 bytes
.../html/FreeIPA_Guide/images/sudo-cmdgrp-new.png | Bin 0 -> 8652 bytes
.../FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png | Bin 0 -> 13060 bytes
.../FreeIPA_Guide/images/sudo-rule-allow-add.png | Bin 0 -> 15630 bytes
.../html/FreeIPA_Guide/images/sudo-rule-allow.png | Bin 0 -> 37466 bytes
.../FreeIPA_Guide/images/sudo-rule-host-add.png | Bin 0 -> 16661 bytes
.../html/FreeIPA_Guide/images/sudo-rule-host.png | Bin 0 -> 16157 bytes
.../15/html/FreeIPA_Guide/images/sudo-rule-new.png | Bin 0 -> 6624 bytes
.../FreeIPA_Guide/images/sudo-rule-opt-new.png | Bin 0 -> 6680 bytes
.../15/html/FreeIPA_Guide/images/sudo-rule-opt.png | Bin 0 -> 13962 bytes
.../FreeIPA_Guide/images/sudo-rule-runas-add.png | Bin 0 -> 17896 bytes
.../html/FreeIPA_Guide/images/sudo-rule-runas.png | Bin 0 -> 23159 bytes
.../FreeIPA_Guide/images/sudo-rule-user-add.png | Bin 0 -> 18836 bytes
.../html/FreeIPA_Guide/images/sudo-rule-user.png | Bin 0 -> 24770 bytes
.../html/FreeIPA_Guide/images/sudo-rules-list.png | Bin 0 -> 32002 bytes
.../15/html/FreeIPA_Guide/images/ui-full-form.png | Bin 0 -> 58186 bytes
.../15/html/FreeIPA_Guide/images/ui-full-list.png | Bin 0 -> 73332 bytes
.../15/html/FreeIPA_Guide/images/ui-tabs.png | Bin 0 -> 47076 bytes
.../15/html/FreeIPA_Guide/images/undo-button.png | Bin 0 -> 10734 bytes
.../15/html/FreeIPA_Guide/images/update-link.png | Bin 0 -> 13314 bytes
.../FreeIPA_Guide/images/user-acctsettings.png | Bin 0 -> 41872 bytes
.../html/FreeIPA_Guide/images/user-addcontact.png | Bin 0 -> 7986 bytes
.../FreeIPA_Guide/images/user-additional-attr.png | Bin 0 -> 51617 bytes
.../15/html/FreeIPA_Guide/images/user-attr.png | Bin 0 -> 56784 bytes
.../15/html/FreeIPA_Guide/images/user-delete.png | Bin 0 -> 8160 bytes
.../15/html/FreeIPA_Guide/images/user-list.png | Bin 0 -> 39141 bytes
.../15/html/FreeIPA_Guide/images/user-new.png | Bin 0 -> 7335 bytes
.../images/user-objectclass-change.png | Bin 0 -> 23697 bytes
.../15/html/FreeIPA_Guide/images/user-search.png | Bin 0 -> 42079 bytes
.../en-US/Fedora/15/html/FreeIPA_Guide/index.html | 14 +-
.../15/html/FreeIPA_Guide/installing-ipa.html | 78 +-
.../Fedora/15/html/FreeIPA_Guide/introduction.html | 20 +-
.../Fedora/15/html/FreeIPA_Guide/ipa-apache.html | 33 +-
.../15/html/FreeIPA_Guide/ipa-command-host.html | 10 +-
.../Fedora/15/html/FreeIPA_Guide/ipa-dns.html | 10 +-
.../15/html/FreeIPA_Guide/ipa-linux-services.html | 20 +-
.../en-US/Fedora/15/html/FreeIPA_Guide/ipa.html | 18 +-
.../en-US/Fedora/15/html/FreeIPA_Guide/ix01.html | 4 +-
.../15/html/FreeIPA_Guide/kerb-policies.html | 36 +-
.../15/html/FreeIPA_Guide/kerberos-pwd-cache.html | 8 +-
.../Fedora/15/html/FreeIPA_Guide/kerberos.html | 14 +-
.../Fedora/15/html/FreeIPA_Guide/logging-in.html | 18 +-
.../15/html/FreeIPA_Guide/managing-services.html | 148 +-
.../15/html/FreeIPA_Guide/managing-sync-agmt.html | 36 +-
.../15/html/FreeIPA_Guide/managing-users.html | 128 +-
.../FreeIPA_Guide/manually-unconfig-machines.html | 6 +-
.../15/html/FreeIPA_Guide/migrating-from-nis.html | 22 +-
.../FreeIPA_Guide/migration-considerations.html | 34 +
.../15/html/FreeIPA_Guide/modifying-dns-zones.html | 80 +-
.../en-US/Fedora/15/html/FreeIPA_Guide/nis.html | 12 +-
.../15/html/FreeIPA_Guide/password-sync.html | 6 +-
.../15/html/FreeIPA_Guide/promoting-replica.html | 53 +-
.../15/html/FreeIPA_Guide/removing-keytabs.html | 6 +-
.../15/html/FreeIPA_Guide/renaming-machines.html | 8 +-
.../Fedora/15/html/FreeIPA_Guide/searching.html | 56 +-
.../Fedora/15/html/FreeIPA_Guide/self-service.html | 59 +-
.../html/FreeIPA_Guide/server-access-controls.html | 36 +
.../15/html/FreeIPA_Guide/server-config.html | 381 +-
.../Fedora/15/html/FreeIPA_Guide/server-tools.html | 54 +-
.../html/FreeIPA_Guide/service-interactions.html | 16 +-
.../15/html/FreeIPA_Guide/setting-up-clients.html | 6 +-
.../en-US/Fedora/15/html/FreeIPA_Guide/sudo.html | 10 +-
.../15/html/FreeIPA_Guide/tools-reference.html | 6 +-
.../troubleshooting-client-install.html | 10 +-
.../html/FreeIPA_Guide/uninstalling-clients.html | 4 +-
.../15/html/FreeIPA_Guide/upgrading-server.html | 8 +-
.../Fedora/15/html/FreeIPA_Guide/user-groups.html | 150 +-
.../15/html/FreeIPA_Guide/user-pwdpolicy.html | 279 +-
.../en-US/Fedora/15/html/FreeIPA_Guide/users.html | 18 +-
.../Fedora/15/html/FreeIPA_Guide/using-the-ui.html | 209 +-
.../FreeIPA_Guide/viewing-the_Password_Policy.html | 108 +
.../Fedora-15-FreeIPA_Guide-en-US.pdf | Bin 2294464 -> 5083926 bytes
public_html/en-US/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/en-US/opds-Fedora_Core.xml | 2 +-
.../en-US/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/en-US/opds.xml | 10 +-
public_html/en-US/toc.html | 12 +-
public_html/es-ES/opds-Fedora.xml | 8 +-
public_html/es-ES/opds-Fedora_15.xml | 2 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/es-ES/opds-Fedora_Core.xml | 2 +-
.../es-ES/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/es-ES/opds.xml | 12 +-
public_html/es-ES/toc.html | 16 +-
public_html/fa-IR/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/fa-IR/opds-Fedora_Core.xml | 2 +-
.../fa-IR/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/fa-IR/opds.xml | 10 +-
public_html/fa-IR/toc.html | 12 +-
public_html/fi-FI/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/fi-FI/opds-Fedora_Core.xml | 2 +-
.../fi-FI/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/fi-FI/opds.xml | 10 +-
public_html/fi-FI/toc.html | 16 +-
public_html/fr-FR/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/fr-FR/opds-Fedora_Core.xml | 2 +-
.../fr-FR/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/fr-FR/opds.xml | 10 +-
public_html/fr-FR/toc.html | 12 +-
public_html/gu-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/gu-IN/opds-Fedora_Core.xml | 2 +-
.../gu-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/gu-IN/opds.xml | 10 +-
public_html/gu-IN/toc.html | 12 +-
public_html/he-IL/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/he-IL/opds-Fedora_Core.xml | 2 +-
.../he-IL/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/he-IL/opds.xml | 10 +-
public_html/he-IL/toc.html | 12 +-
public_html/hi-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/hi-IN/opds-Fedora_Core.xml | 2 +-
.../hi-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/hi-IN/opds.xml | 10 +-
public_html/hi-IN/toc.html | 12 +-
public_html/hu-HU/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/hu-HU/opds-Fedora_Core.xml | 2 +-
.../hu-HU/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/hu-HU/opds.xml | 10 +-
public_html/hu-HU/toc.html | 12 +-
public_html/id-ID/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/id-ID/opds-Fedora_Core.xml | 2 +-
.../id-ID/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/id-ID/opds.xml | 10 +-
public_html/id-ID/toc.html | 14 +-
public_html/it-IT/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/it-IT/opds-Fedora_Core.xml | 2 +-
.../it-IT/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/it-IT/opds.xml | 10 +-
public_html/it-IT/toc.html | 10 +-
public_html/ja-JP/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ja-JP/opds-Fedora_Core.xml | 2 +-
.../ja-JP/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ja-JP/opds.xml | 10 +-
public_html/ja-JP/toc.html | 14 +-
public_html/ja_JP/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ja_JP/opds-Fedora_Core.xml | 2 +-
.../ja_JP/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ja_JP/opds.xml | 10 +-
public_html/ja_JP/toc.html | 12 +-
public_html/kn-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/kn-IN/opds-Fedora_Core.xml | 2 +-
.../kn-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/kn-IN/opds.xml | 10 +-
public_html/kn-IN/toc.html | 12 +-
public_html/ko-KR/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ko-KR/opds-Fedora_Core.xml | 2 +-
.../ko-KR/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ko-KR/opds.xml | 10 +-
public_html/ko-KR/toc.html | 12 +-
public_html/ml-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ml-IN/opds-Fedora_Core.xml | 2 +-
.../ml-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ml-IN/opds.xml | 10 +-
public_html/ml-IN/toc.html | 12 +-
public_html/mr-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/mr-IN/opds-Fedora_Core.xml | 2 +-
.../mr-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/mr-IN/opds.xml | 10 +-
public_html/mr-IN/toc.html | 12 +-
public_html/nb-NO/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/nb-NO/opds-Fedora_Core.xml | 2 +-
.../nb-NO/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/nb-NO/opds.xml | 10 +-
public_html/nb-NO/toc.html | 12 +-
public_html/nl-NL/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/nl-NL/opds-Fedora_Core.xml | 2 +-
.../nl-NL/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/nl-NL/opds.xml | 10 +-
public_html/nl-NL/toc.html | 10 +-
public_html/opds.xml | 90 +-
public_html/or-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/or-IN/opds-Fedora_Core.xml | 2 +-
.../or-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/or-IN/opds.xml | 10 +-
public_html/or-IN/toc.html | 12 +-
public_html/pa-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/pa-IN/opds-Fedora_Core.xml | 2 +-
.../pa-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/pa-IN/opds.xml | 10 +-
public_html/pa-IN/toc.html | 12 +-
public_html/pl-PL/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/pl-PL/opds-Fedora_Core.xml | 2 +-
.../pl-PL/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/pl-PL/opds.xml | 10 +-
public_html/pl-PL/toc.html | 10 +-
public_html/pt-BR/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/pt-BR/opds-Fedora_Core.xml | 2 +-
.../pt-BR/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/pt-BR/opds.xml | 10 +-
public_html/pt-BR/toc.html | 12 +-
public_html/pt-PT/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/pt-PT/opds-Fedora_Core.xml | 2 +-
.../pt-PT/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/pt-PT/opds.xml | 10 +-
public_html/pt-PT/toc.html | 12 +-
public_html/ro/opds-Fedora.xml | 8 +-
.../ro/opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ro/opds-Fedora_Core.xml | 2 +-
public_html/ro/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ro/opds.xml | 10 +-
public_html/ro/toc.html | 12 +-
public_html/ru-RU/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ru-RU/opds-Fedora_Core.xml | 2 +-
.../ru-RU/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ru-RU/opds.xml | 10 +-
public_html/ru-RU/toc.html | 14 +-
public_html/sk-SK/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/sk-SK/opds-Fedora_Core.xml | 2 +-
.../sk-SK/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/sk-SK/opds.xml | 10 +-
public_html/sk-SK/toc.html | 12 +-
public_html/sr-Latn-RS/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/sr-Latn-RS/opds-Fedora_Core.xml | 2 +-
.../sr-Latn-RS/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/sr-Latn-RS/opds.xml | 10 +-
public_html/sr-Latn-RS/toc.html | 12 +-
public_html/sr-RS/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/sr-RS/opds-Fedora_Core.xml | 2 +-
.../sr-RS/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/sr-RS/opds.xml | 10 +-
public_html/sr-RS/toc.html | 12 +-
public_html/sv-SE/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/sv-SE/opds-Fedora_Core.xml | 2 +-
.../sv-SE/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/sv-SE/opds.xml | 10 +-
public_html/sv-SE/toc.html | 12 +-
public_html/ta-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/ta-IN/opds-Fedora_Core.xml | 2 +-
.../ta-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/ta-IN/opds.xml | 10 +-
public_html/ta-IN/toc.html | 12 +-
public_html/te-IN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/te-IN/opds-Fedora_Core.xml | 2 +-
.../te-IN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/te-IN/opds.xml | 10 +-
public_html/te-IN/toc.html | 12 +-
public_html/toc.html | 42 +-
public_html/uk-UA/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/uk-UA/opds-Fedora_Core.xml | 2 +-
.../uk-UA/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/uk-UA/opds.xml | 10 +-
public_html/uk-UA/toc.html | 12 +-
public_html/zh-CN/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/zh-CN/opds-Fedora_Core.xml | 2 +-
.../zh-CN/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/zh-CN/opds.xml | 10 +-
public_html/zh-CN/toc.html | 12 +-
public_html/zh-TW/opds-Fedora.xml | 8 +-
.../opds-Fedora_Contributor_Documentation.xml | 2 +-
public_html/zh-TW/opds-Fedora_Core.xml | 2 +-
.../zh-TW/opds-Fedora_Draft_Documentation.xml | 2 +-
public_html/zh-TW/opds.xml | 10 +-
public_html/zh-TW/toc.html | 12 +-
673 files changed, 114129 insertions(+), 5908 deletions(-)
---
diff --git a/fedoradocs.db b/fedoradocs.db
index c79b7c7..8f93018 100644
Binary files a/fedoradocs.db and b/fedoradocs.db differ
diff --git a/public_html/Sitemap b/public_html/Sitemap
index e8513e4..b4a74b1 100644
--- a/public_html/Sitemap
+++ b/public_html/Sitemap
@@ -217,7 +217,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/ca-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ca-ES.pdf</loc>
+ <loc>http://docs.fedoraproject.org/ca-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ca-ES.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -379,7 +379,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/cs-CZ/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-cs-CZ.pdf</loc>
+ <loc>http://docs.fedoraproject.org/cs-CZ/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-cs-CZ.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -685,7 +685,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/de-DE/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-de-DE.pdf</loc>
+ <loc>http://docs.fedoraproject.org/de-DE/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-de-DE.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -1664,25 +1664,25 @@
</url>
<url>
<loc>http://docs.fedoraproject.org/en-US/Fedora/15/epub/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.epub</loc>
- <lastmod>2011-08-31</lastmod>
+ <lastmod>2011-09-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/index.html</loc>
- <lastmod>2011-08-31</lastmod>
+ <lastmod>2011-09-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>http://docs.fedoraproject.org/en-US/Fedora/15/html-single/FreeIPA_Guide/index.html</loc>
- <lastmod>2011-08-31</lastmod>
+ <lastmod>2011-09-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>http://docs.fedoraproject.org/en-US/Fedora/15/pdf/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.pdf</loc>
- <lastmod>2011-08-31</lastmod>
+ <lastmod>2011-09-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
@@ -2119,7 +2119,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/en-US/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf</loc>
+ <loc>http://docs.fedoraproject.org/en-US/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf</loc>
<lastmod>2010-07-23</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -3343,13 +3343,13 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/en-US/Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf</loc>
+ <loc>http://docs.fedoraproject.org/en-US/Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf</loc>
<lastmod>2010-11-16</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</loc>
+ <loc>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</loc>
<lastmod>2011-09-13</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -3367,7 +3367,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/en-US/Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf</loc>
+ <loc>http://docs.fedoraproject.org/en-US/Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf</loc>
<lastmod>2011-09-13</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -3439,7 +3439,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf</loc>
+ <loc>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf</loc>
<lastmod>2010-07-07</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -3841,7 +3841,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf</loc>
+ <loc>http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf</loc>
<lastmod>2011-04-03</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -4015,7 +4015,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/es-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-es-ES.pdf</loc>
+ <loc>http://docs.fedoraproject.org/es-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-es-ES.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -4213,7 +4213,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/es-ES/Fedora/14/pdf/Software_Management_Guide/Fedora-0.1-Software_Management_Guide-es-ES.pdf</loc>
+ <loc>http://docs.fedoraproject.org/es-ES/Fedora/14/pdf/Software_Management_Guide/Fedora-14-Software_Management_Guide-es-ES.pdf</loc>
<lastmod>2010-10-08</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -4261,7 +4261,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/es-ES/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-es-ES.pdf</loc>
+ <loc>http://docs.fedoraproject.org/es-ES/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-es-ES.pdf</loc>
<lastmod>2010-05-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -5473,7 +5473,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/fi-FI/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-fi-FI.pdf</loc>
+ <loc>http://docs.fedoraproject.org/fi-FI/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-fi-FI.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -5707,7 +5707,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/fi-FI/Fedora/10/pdf/Fedora_Live_Images/Fedora-13-Fedora_Live_Images-fi-FI.pdf</loc>
+ <loc>http://docs.fedoraproject.org/fi-FI/Fedora/10/pdf/Fedora_Live_Images/Fedora-10-Fedora_Live_Images-fi-FI.pdf</loc>
<lastmod>2010-06-14</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -6745,7 +6745,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/id-ID/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-id-ID.pdf</loc>
+ <loc>http://docs.fedoraproject.org/id-ID/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-id-ID.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -7807,7 +7807,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/ja-JP/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ja-JP.pdf</loc>
+ <loc>http://docs.fedoraproject.org/ja-JP/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ja-JP.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -11779,7 +11779,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/pt-PT/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-pt-PT.pdf</loc>
+ <loc>http://docs.fedoraproject.org/pt-PT/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-pt-PT.pdf</loc>
<lastmod>2010-05-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -12523,7 +12523,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/ru-RU/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ru-RU.pdf</loc>
+ <loc>http://docs.fedoraproject.org/ru-RU/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ru-RU.pdf</loc>
<lastmod>2011-09-10</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -12613,7 +12613,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/ru-RU/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-ru-RU.pdf</loc>
+ <loc>http://docs.fedoraproject.org/ru-RU/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-ru-RU.pdf</loc>
<lastmod>2010-05-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -14989,7 +14989,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/uk-UA/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-uk-UA.pdf</loc>
+ <loc>http://docs.fedoraproject.org/uk-UA/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-uk-UA.pdf</loc>
<lastmod>2010-05-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
@@ -15571,7 +15571,7 @@
<priority>0.8</priority>
</url>
<url>
- <loc>http://docs.fedoraproject.org/zh-CN/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-zh-CN.pdf</loc>
+ <loc>http://docs.fedoraproject.org/zh-CN/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-zh-CN.pdf</loc>
<lastmod>2010-05-22</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
diff --git a/public_html/as-IN/opds-Fedora.xml b/public_html/as-IN/opds-Fedora.xml
index 3d812a8..3650f82 100644
--- a/public_html/as-IN/opds-Fedora.xml
+++ b/public_html/as-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/as-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:05</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>as-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml
index 926eec51..45cac19 100644
--- a/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/as-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/as-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:05</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/as-IN/opds-Fedora_Core.xml b/public_html/as-IN/opds-Fedora_Core.xml
index 32d0d8c..c200d26 100644
--- a/public_html/as-IN/opds-Fedora_Core.xml
+++ b/public_html/as-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/as-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:05</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/as-IN/opds-Fedora_Draft_Documentation.xml b/public_html/as-IN/opds-Fedora_Draft_Documentation.xml
index 4ff7460..6d6fa8c 100644
--- a/public_html/as-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/as-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/as-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:06</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/as-IN/opds.xml b/public_html/as-IN/opds.xml
index ed98e6c..32b0d25 100644
--- a/public_html/as-IN/opds.xml
+++ b/public_html/as-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/as-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:06</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/as-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:05</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>as-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/as-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:05</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>as-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/as-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:05</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>as-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/as-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:06</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>as-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/as-IN/toc.html b/public_html/as-IN/toc.html
index 64bd50e..9a98773 100644
--- a/public_html/as-IN/toc.html
+++ b/public_html/as-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/bg-BG/opds-Fedora.xml b/public_html/bg-BG/opds-Fedora.xml
index 6bda8d1..1529502 100644
--- a/public_html/bg-BG/opds-Fedora.xml
+++ b/public_html/bg-BG/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bg-BG/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>bg-BG</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1294,7 +1294,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1306,7 +1306,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml b/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml
index c4a19cb..50e395b 100644
--- a/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/bg-BG/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bg-BG/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bg-BG/opds-Fedora_Core.xml b/public_html/bg-BG/opds-Fedora_Core.xml
index d306b53..49e84cb 100644
--- a/public_html/bg-BG/opds-Fedora_Core.xml
+++ b/public_html/bg-BG/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bg-BG/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bg-BG/opds-Fedora_Draft_Documentation.xml b/public_html/bg-BG/opds-Fedora_Draft_Documentation.xml
index 2913f3d..ab31c10 100644
--- a/public_html/bg-BG/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/bg-BG/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bg-BG/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bg-BG/opds.xml b/public_html/bg-BG/opds.xml
index 0e8d0cc..ded764e 100644
--- a/public_html/bg-BG/opds.xml
+++ b/public_html/bg-BG/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/bg-BG/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/bg-BG/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bg-BG</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/bg-BG/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bg-BG</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/bg-BG/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bg-BG</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/bg-BG/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bg-BG</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/bg-BG/toc.html b/public_html/bg-BG/toc.html
index 47bb833..cd4ce8e 100644
--- a/public_html/bg-BG/toc.html
+++ b/public_html/bg-BG/toc.html
@@ -321,7 +321,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -848,7 +848,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -864,10 +864,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -907,7 +907,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1170,7 +1170,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/bn-IN/opds-Fedora.xml b/public_html/bn-IN/opds-Fedora.xml
index 0a8e22e..005de81 100644
--- a/public_html/bn-IN/opds-Fedora.xml
+++ b/public_html/bn-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bn-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>bn-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml
index 1209258..6b33b06 100644
--- a/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/bn-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bn-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bn-IN/opds-Fedora_Core.xml b/public_html/bn-IN/opds-Fedora_Core.xml
index 1beca89..f3958d8 100644
--- a/public_html/bn-IN/opds-Fedora_Core.xml
+++ b/public_html/bn-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bn-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bn-IN/opds-Fedora_Draft_Documentation.xml b/public_html/bn-IN/opds-Fedora_Draft_Documentation.xml
index c6449e5..d717478 100644
--- a/public_html/bn-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/bn-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bn-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bn-IN/opds.xml b/public_html/bn-IN/opds.xml
index 0e3bd62..eb576c0 100644
--- a/public_html/bn-IN/opds.xml
+++ b/public_html/bn-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/bn-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/bn-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/bn-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/bn-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/bn-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/bn-IN/toc.html b/public_html/bn-IN/toc.html
index 0dee9ec..df4ef1e 100644
--- a/public_html/bn-IN/toc.html
+++ b/public_html/bn-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/bs-BA/opds-Fedora.xml b/public_html/bs-BA/opds-Fedora.xml
index 6eaeacb..2fc3e28 100644
--- a/public_html/bs-BA/opds-Fedora.xml
+++ b/public_html/bs-BA/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bs-BA/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>bs-BA</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml b/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml
index cdc93e7..0b9715d 100644
--- a/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/bs-BA/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bs-BA/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bs-BA/opds-Fedora_Core.xml b/public_html/bs-BA/opds-Fedora_Core.xml
index 8b81b40..4928595 100644
--- a/public_html/bs-BA/opds-Fedora_Core.xml
+++ b/public_html/bs-BA/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bs-BA/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bs-BA/opds-Fedora_Draft_Documentation.xml b/public_html/bs-BA/opds-Fedora_Draft_Documentation.xml
index 9d9fc35..da66e3c 100644
--- a/public_html/bs-BA/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/bs-BA/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/bs-BA/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/bs-BA/opds.xml b/public_html/bs-BA/opds.xml
index f80452d..34329d9 100644
--- a/public_html/bs-BA/opds.xml
+++ b/public_html/bs-BA/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/bs-BA/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/bs-BA/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bs-BA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/bs-BA/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bs-BA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/bs-BA/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bs-BA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/bs-BA/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bs-BA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/bs-BA/toc.html b/public_html/bs-BA/toc.html
index 90fa827..f0e5fff 100644
--- a/public_html/bs-BA/toc.html
+++ b/public_html/bs-BA/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ca-ES/opds-Fedora.xml b/public_html/ca-ES/opds-Fedora.xml
index d9e5b59..71d8256 100644
--- a/public_html/ca-ES/opds-Fedora.xml
+++ b/public_html/ca-ES/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ca-ES/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ca-ES</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml b/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml
index 11e0d2c..41ee7a7 100644
--- a/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ca-ES/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ca-ES/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ca-ES/opds-Fedora_Core.xml b/public_html/ca-ES/opds-Fedora_Core.xml
index 1100c93..a1d6c9f 100644
--- a/public_html/ca-ES/opds-Fedora_Core.xml
+++ b/public_html/ca-ES/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ca-ES/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ca-ES/opds-Fedora_Draft_Documentation.xml b/public_html/ca-ES/opds-Fedora_Draft_Documentation.xml
index 1e58d33..f69e6a6 100644
--- a/public_html/ca-ES/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ca-ES/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ca-ES/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ca-ES/opds.xml b/public_html/ca-ES/opds.xml
index 4f150fb..378c3bb 100644
--- a/public_html/ca-ES/opds.xml
+++ b/public_html/ca-ES/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ca-ES/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ca-ES/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>ca-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/ca-ES/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>ca-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ca-ES/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>ca-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/ca-ES/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>ca-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ca-ES/toc.html b/public_html/ca-ES/toc.html
index b11daa3..65c80d3 100644
--- a/public_html/ca-ES/toc.html
+++ b/public_html/ca-ES/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ca-ES.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ca-ES.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ca-ES.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ca-ES.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ca-ES.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/cs-CZ/opds-Fedora.xml b/public_html/cs-CZ/opds-Fedora.xml
index d9a6496..def934a 100644
--- a/public_html/cs-CZ/opds-Fedora.xml
+++ b/public_html/cs-CZ/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/cs-CZ/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>cs-CZ</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml b/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml
index 576cf8a..5510f4b 100644
--- a/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/cs-CZ/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/cs-CZ/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/cs-CZ/opds-Fedora_Core.xml b/public_html/cs-CZ/opds-Fedora_Core.xml
index 2e1c272..dc04f81 100644
--- a/public_html/cs-CZ/opds-Fedora_Core.xml
+++ b/public_html/cs-CZ/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/cs-CZ/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/cs-CZ/opds-Fedora_Draft_Documentation.xml b/public_html/cs-CZ/opds-Fedora_Draft_Documentation.xml
index 18d51af..b51eddf 100644
--- a/public_html/cs-CZ/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/cs-CZ/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/cs-CZ/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/cs-CZ/opds.xml b/public_html/cs-CZ/opds.xml
index 1f287b6..8d891d1 100644
--- a/public_html/cs-CZ/opds.xml
+++ b/public_html/cs-CZ/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/cs-CZ/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/cs-CZ/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>cs-CZ</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/cs-CZ/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>cs-CZ</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/cs-CZ/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>cs-CZ</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/cs-CZ/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>cs-CZ</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/cs-CZ/toc.html b/public_html/cs-CZ/toc.html
index 78ebd1a..69ad090 100644
--- a/public_html/cs-CZ/toc.html
+++ b/public_html/cs-CZ/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-cs-CZ.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-cs-CZ.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-cs-CZ.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-cs-CZ.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-cs-CZ.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -350,7 +350,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Fedora_Live_Images' class="book collapsed" onclick="toggle(event, 'Fedora.13.Fedora_Live_Images.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/da-DK/opds-Fedora.xml b/public_html/da-DK/opds-Fedora.xml
index 2fbe7b3..f7e1657 100644
--- a/public_html/da-DK/opds-Fedora.xml
+++ b/public_html/da-DK/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/da-DK/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>da-DK</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml b/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml
index bff1a3c..730b110 100644
--- a/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/da-DK/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/da-DK/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/da-DK/opds-Fedora_Core.xml b/public_html/da-DK/opds-Fedora_Core.xml
index 3f8b510..6708210 100644
--- a/public_html/da-DK/opds-Fedora_Core.xml
+++ b/public_html/da-DK/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/da-DK/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/da-DK/opds-Fedora_Draft_Documentation.xml b/public_html/da-DK/opds-Fedora_Draft_Documentation.xml
index f264d34..b1d8866 100644
--- a/public_html/da-DK/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/da-DK/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/da-DK/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/da-DK/opds.xml b/public_html/da-DK/opds.xml
index 513afa6..05313da 100644
--- a/public_html/da-DK/opds.xml
+++ b/public_html/da-DK/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/da-DK/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/da-DK/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>da-DK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/da-DK/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>da-DK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/da-DK/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>da-DK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/da-DK/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>da-DK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/da-DK/toc.html b/public_html/da-DK/toc.html
index 529df09..2796c41 100644
--- a/public_html/da-DK/toc.html
+++ b/public_html/da-DK/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/de-DE/opds-Fedora.xml b/public_html/de-DE/opds-Fedora.xml
index be755d4..f6df4a6 100644
--- a/public_html/de-DE/opds-Fedora.xml
+++ b/public_html/de-DE/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/de-DE/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>de-DE</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml b/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml
index 8863438..689626f 100644
--- a/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/de-DE/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/de-DE/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/de-DE/opds-Fedora_Core.xml b/public_html/de-DE/opds-Fedora_Core.xml
index a9c7310..9e0182f 100644
--- a/public_html/de-DE/opds-Fedora_Core.xml
+++ b/public_html/de-DE/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/de-DE/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/de-DE/opds-Fedora_Draft_Documentation.xml b/public_html/de-DE/opds-Fedora_Draft_Documentation.xml
index 16d44ab..672fd33 100644
--- a/public_html/de-DE/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/de-DE/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/de-DE/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/de-DE/opds.xml b/public_html/de-DE/opds.xml
index b6c0266..91b70b4 100644
--- a/public_html/de-DE/opds.xml
+++ b/public_html/de-DE/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/de-DE/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/de-DE/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>de-DE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/de-DE/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>de-DE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/de-DE/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>de-DE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/de-DE/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>de-DE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/de-DE/toc.html b/public_html/de-DE/toc.html
index 9523bd1..b37f9ff 100644
--- a/public_html/de-DE/toc.html
+++ b/public_html/de-DE/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-de-DE.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-de-DE.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-de-DE.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-de-DE.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-de-DE.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -341,7 +341,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Installation_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.13.Installation_Guide.types');">
@@ -904,7 +904,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -920,10 +920,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -963,7 +963,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1226,7 +1226,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/el-GR/opds-Fedora.xml b/public_html/el-GR/opds-Fedora.xml
index e6eb8ed..cd17578 100644
--- a/public_html/el-GR/opds-Fedora.xml
+++ b/public_html/el-GR/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/el-GR/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>el-GR</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml b/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml
index 2b6336e..e1ecccd 100644
--- a/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/el-GR/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/el-GR/opds-Fedora_Core.xml b/public_html/el-GR/opds-Fedora_Core.xml
index 6c15430..5995a3c 100644
--- a/public_html/el-GR/opds-Fedora_Core.xml
+++ b/public_html/el-GR/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/el-GR/opds-Fedora_Draft_Documentation.xml b/public_html/el-GR/opds-Fedora_Draft_Documentation.xml
index d0d733d..40993ce 100644
--- a/public_html/el-GR/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/el-GR/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/el-GR/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/el-GR/opds.xml b/public_html/el-GR/opds.xml
index 3a24aab..a29e0b6 100644
--- a/public_html/el-GR/opds.xml
+++ b/public_html/el-GR/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/el-GR/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/el-GR/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>el-GR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/el-GR/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>el-GR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/el-GR/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>el-GR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/el-GR/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>el-GR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/el-GR/toc.html b/public_html/el-GR/toc.html
index 3032895..b174e04 100644
--- a/public_html/el-GR/toc.html
+++ b/public_html/el-GR/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/en-US/Fedora/15/epub/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.epub b/public_html/en-US/Fedora/15/epub/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.epub
index 964a4bf..86edb8b 100644
Binary files a/public_html/en-US/Fedora/15/epub/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.epub and b/public_html/en-US/Fedora/15/epub/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.epub differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/css/common.css b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/css/common.css
index e0090e2..d7dc3f2 100644
--- a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/css/common.css
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/css/common.css
@@ -1,3 +1,8 @@
+* {
+ widows: 2 !important;
+ orphans: 2 !important;
+}
+
body, h1, h2, h3, h4, h5, h6, pre, li, div {
line-height: 1.29em;
}
@@ -126,6 +131,12 @@ div.longdesc-link {
.toc a, .qandaset a {
font-weight:normal;
+ border:none;
+}
+
+.toc a:hover, .qandaset a:hover
+{
+ border-bottom: 1px dotted;
}
/*headings*/
@@ -134,6 +145,8 @@ h1, h2, h3, h4, h5, h6 {
margin-top: 0em;
margin-bottom: 0em;
background-color: transparent;
+ page-break-inside: avoid;
+ page-break-after: avoid;
}
h1 {
@@ -376,36 +389,27 @@ a.version:focus, a.version:hover {
.revhistory table {
background-color:transparent;
- border-color:#fff;
+ border-color:#fff;
padding:0em;
margin: 0;
border-collapse:collapse;
- border-style:none;
+ border-style:none;
}
.revhistory td {
text-align :left;
padding:0em;
- border: none;
+ border: none;
border-top: 1px solid #fff;
font-weight: bold;
}
-.revhistory .itemizedlist {
- font-weight: normal;
-}
-
-.revhistory ul {
- margin-top: 0;
- margin-left: 1em;
-}
-
.revhistory .simplelist td {
font-weight: normal;
}
.revhistory .simplelist {
- margin-bottom: 0em;
+ margin-bottom: 1.5em;
margin-left: 1em;
}
@@ -659,6 +663,7 @@ img {
.figure img {
display:block;
margin:0;
+ page-break-inside: avoid;
}
.figure .title {
@@ -762,7 +767,9 @@ pre .keycap {
code {
font-family:"liberation mono", "bitstream vera mono", "dejavu mono", monospace;
- white-space: nowrap;
+/* white-space: nowrap;*/
+ white-space: pre-wrap;
+ word-wrap: break-word;
font-weight:bold;
}
@@ -799,6 +806,7 @@ div.warning, div.note, div.important {
background-color: white;
margin-bottom: 1em;
border-bottom: 1px solid #aaaaaa;
+ page-break-inside: avoid;
}
div.warning h2, div.note h2,div.important h2 {
@@ -893,6 +901,10 @@ div.admonition {
}
/*Table*/
+div.table {
+ page-break-inside: avoid;
+}
+
table {
border:1px solid #6c614b;
width:100%;
@@ -991,8 +1003,12 @@ th.dbkey {
span.book {
margin-top:4em;
display:block;
+ font-size:11pt;
}
+span.book a{
+ font-weight:bold;
+}
span.chapter {
display:block;
margin-top:0.5em;
@@ -1117,10 +1133,16 @@ sup {
/**/
div.chapter {
margin-top:3em;
+ page-break-inside: avoid;
+}
+
+div.preface {
+ page-break-inside: avoid;
}
div.section {
margin-top:1em;
+ page-break-inside: auto;
}
div.note .replaceable,
@@ -1403,12 +1425,14 @@ pre {
-moz-border-radius:11px;
-webkit-border-radius:11px;
border-radius: 11px;
+ page-break-inside: avoid;
}
.example {
-moz-border-radius:0px;
-webkit-border-radius:0px;
border-radius: 0px;
+ page-break-inside: avoid;
}
.package, .citetitle {
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/images/watermark-draft.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/images/watermark-draft.png
index e3a9852..0ead5af 100644
Binary files a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/images/watermark-draft.png and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/Common_Content/images/watermark-draft.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/IPA_Migration_Initial_State.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/IPA_Migration_Initial_State.png
index c0aaaf3..08d1c75 100644
Binary files a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/IPA_Migration_Initial_State.png and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/IPA_Migration_Initial_State.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-breadcrumbs.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-breadcrumbs.png
new file mode 100644
index 0000000..65ed7af
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-breadcrumbs.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-direct1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-direct1.png
new file mode 100644
index 0000000..33ebb30
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-direct1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-direct2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-direct2.png
new file mode 100644
index 0000000..08b1177
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-direct2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-indirect1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-indirect1.png
new file mode 100644
index 0000000..5407bec
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-indirect1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-key-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-key-list.png
new file mode 100644
index 0000000..51e355b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-key-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-location-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-location-list.png
new file mode 100644
index 0000000..4773ff3
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-location-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-location.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-location.png
new file mode 100644
index 0000000..a29adfb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-location.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-map-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-map-list.png
new file mode 100644
index 0000000..54560da
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/automount-map-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/browser-kinit-fedora.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/browser-kinit-fedora.png
new file mode 100644
index 0000000..4ddaeee
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/browser-kinit-fedora.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/browser-kinit-rhel.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/browser-kinit-rhel.png
new file mode 100644
index 0000000..2403f82
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/browser-kinit-rhel.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/collapse-arrows.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/collapse-arrows.png
new file mode 100644
index 0000000..b3d6114
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/collapse-arrows.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser1.png
new file mode 100644
index 0000000..7ccda65
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser2.png
new file mode 100644
index 0000000..5401fa7
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser3.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser3.png
new file mode 100644
index 0000000..d95a0d6
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/configuring-browser3.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/delegation-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/delegation-add.png
new file mode 100644
index 0000000..257623c
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/delegation-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/delegation-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/delegation-list.png
new file mode 100644
index 0000000..6e5a461
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/delegation-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-active.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-active.png
new file mode 100644
index 0000000..da9ac48
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-active.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-dynamic.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-dynamic.png
new file mode 100644
index 0000000..5ade0a4
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-dynamic.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-list.png
new file mode 100644
index 0000000..fed5c9b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-new.png
new file mode 100644
index 0000000..37cf22d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-list.png
new file mode 100644
index 0000000..5c26d2d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-new.png
new file mode 100644
index 0000000..9055771
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-types.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-types.png
new file mode 100644
index 0000000..17c5e3b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-record-types.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-settings.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-settings.png
new file mode 100644
index 0000000..89e432b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/dns-zone-settings.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-apply.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-apply.png
new file mode 100644
index 0000000..b661e5f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-apply.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-download.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-download.png
new file mode 100644
index 0000000..f5fa2bc
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-download.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-register.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-register.png
new file mode 100644
index 0000000..f33f99e
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-domain-register.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-import1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-import1.png
new file mode 100644
index 0000000..ddc315e
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-import1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-import2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-import2.png
new file mode 100644
index 0000000..ebeef08
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-import2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-reg2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-reg2.png
new file mode 100644
index 0000000..006090a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-reg2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-register.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-register.png
new file mode 100644
index 0000000..5ed4664
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ent-register.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/finalstate.svg b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/finalstate.svg
index 85be850..c5b4b7c 100755
--- a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/finalstate.svg
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/finalstate.svg
@@ -36,8 +36,8 @@
showgrid="false"
inkscape:window-width="1274"
inkscape:window-height="996"
- inkscape:window-x="-39"
- inkscape:window-y="80"
+ inkscape:window-x="101"
+ inkscape:window-y="48"
inkscape:window-maximized="0"
fit-margin-top="0"
fit-margin-left="0"
@@ -1844,7 +1844,7 @@
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
- <dc:title></dc:title>
+ <dc:title />
</cc:Work>
</rdf:RDF>
</metadata>
@@ -2574,18 +2574,11 @@
y="335.79758"
id="text3608"
sodipodi:linespacing="107.00001%"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- sodipodi:role="line"
- id="tspan3610"
- x="285.31396"
- y="335.79758">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4746"
sodipodi:role="line"
x="283.6499"
- y="348.63757"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- id="tspan5410">using </tspan>SSSD with an LDAP backend</tspan></text>
+ y="348.63757">SSSD with an LDAP backend</tspan></text>
</g>
<g
transform="translate(169,-217.33331)"
@@ -2748,18 +2741,11 @@
x="386.11017"
style="font-size:11.23178864px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-indent:0;text-align:center;text-decoration:none;line-height:107.00000525%;letter-spacing:normal;word-spacing:normal;text-transform:none;direction:ltr;block-progression:tb;writing-mode:lr-tb;text-anchor:middle;baseline-shift:baseline;color:#000000;fill:#555753;fill-opacity:1;fill-rule:nonzero;stroke:none;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate;font-family:Droid Sans;-inkscape-font-specification:Droid Sans Bold"
xml:space="preserve"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- y="333.29758"
- x="387.77423"
- id="tspan4429"
- sodipodi:role="line">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4748"
y="346.13757"
x="386.11017"
- sodipodi:role="line"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- id="tspan5408">using </tspan>SSSD with an IPA backend</tspan></text>
+ sodipodi:role="line">SSSD with an IPA backend</tspan></text>
</g>
<text
sodipodi:linespacing="125%"
@@ -2934,18 +2920,11 @@
y="332.79758"
id="text4433"
sodipodi:linespacing="107.00001%"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- sodipodi:role="line"
- id="tspan4435"
- x="521.13611"
- y="332.79758">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4750"
sodipodi:role="line"
x="519.57751"
- y="345.63757"><tspan
- id="tspan5412"
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans">using </tspan>PAM_LDAP/NSS_LDAP</tspan></text>
+ y="345.63757">PAM_LDAP/NSS_LDAP</tspan></text>
</g>
<g
transform="translate(-112,6)"
@@ -3108,18 +3087,11 @@
x="669.04968"
style="font-size:11.23178864px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-indent:0;text-align:center;text-decoration:none;line-height:107.00000525%;letter-spacing:normal;word-spacing:normal;text-transform:none;direction:ltr;block-progression:tb;writing-mode:lr-tb;text-anchor:middle;baseline-shift:baseline;color:#000000;fill:#555753;fill-opacity:1;fill-rule:nonzero;stroke:none;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate;font-family:Droid Sans;-inkscape-font-specification:Droid Sans Bold"
xml:space="preserve"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- y="333.29758"
- x="670.60828"
- id="tspan4441"
- sodipodi:role="line">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4752"
y="346.13757"
x="669.04968"
- sodipodi:role="line"><tspan
- id="tspan5414"
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans">using </tspan>PAM_KRB5/NSS_LDAP</tspan></text>
+ sodipodi:role="line">PAM_KRB5/NSS_LDAP</tspan></text>
</g>
<g
transform="translate(539.98213,665.63497)"
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-add.png
new file mode 100644
index 0000000..df85400
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-addmembers-user.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-addmembers-user.png
new file mode 100644
index 0000000..2d8dfd1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-addmembers-user.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-config.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-config.png
new file mode 100644
index 0000000..9001ebf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-config.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-delete.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-delete.png
new file mode 100644
index 0000000..ddce2ca
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-delete.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-links.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-links.png
new file mode 100644
index 0000000..2963576
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-links.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-list.png
new file mode 100644
index 0000000..9e2104f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/group-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-addmembers.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-addmembers.png
new file mode 100644
index 0000000..3c280eb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-addmembers.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-menu.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-menu.png
new file mode 100644
index 0000000..7868145
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-menu.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-menu2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-menu2.png
new file mode 100644
index 0000000..6c88633
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/groups-menu2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-from.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-from.png
new file mode 100644
index 0000000..be5376d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-from.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-addservice.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-addservice.png
new file mode 100644
index 0000000..4d30fe0
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-addservice.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-new.png
new file mode 100644
index 0000000..8f8b424
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-target-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-target-add.png
new file mode 100644
index 0000000..30ad290
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-target-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-target.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-target.png
new file mode 100644
index 0000000..e2536a0
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-target.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-user-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-user-add.png
new file mode 100644
index 0000000..3b60665
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-user-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-user.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-user.png
new file mode 100644
index 0000000..0d23bc0
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-user.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-viasrv.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-viasrv.png
new file mode 100644
index 0000000..a0f4574
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rule-viasrv.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rules-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rules-list.png
new file mode 100644
index 0000000..6359051
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-rules-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-service-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-service-new.png
new file mode 100644
index 0000000..bde3f82
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-service-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-services-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-services-list.png
new file mode 100644
index 0000000..38bf693
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-services-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-list.png
new file mode 100644
index 0000000..2ed02c6
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-member1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-member1.png
new file mode 100644
index 0000000..f8d72e3
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-member1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-member2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-member2.png
new file mode 100644
index 0000000..fc89e08
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-member2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-new.png
new file mode 100644
index 0000000..f1f4e94
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hbac-svcgrp-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-add.png
new file mode 100644
index 0000000..52a910f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-attr.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-attr.png
new file mode 100644
index 0000000..5b81f21
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-attr.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-krbinfo.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-krbinfo.png
new file mode 100644
index 0000000..914996a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/host-krbinfo.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroup-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroup-add.png
new file mode 100644
index 0000000..feeef2c
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroup-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroup-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroup-list.png
new file mode 100644
index 0000000..471d2d1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroup-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroups-addmembers.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroups-addmembers.png
new file mode 100644
index 0000000..d000f47
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroups-addmembers.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroups-menu.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroups-menu.png
new file mode 100644
index 0000000..caaf1df
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hostgroups-menu.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hosts-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hosts-list.png
new file mode 100644
index 0000000..1ac51bf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/hosts-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/indirect-group-filters.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/indirect-group-filters.png
new file mode 100644
index 0000000..2660316
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/indirect-group-filters.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/initstate.svg b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/initstate.svg
new file mode 100644
index 0000000..25d2c92
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/initstate.svg
@@ -0,0 +1,9239 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="initstate.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\IPA_Migration_Initial_State.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="131.10439"
+ inkscape:cy="273.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ id="guide6372"
+ position="301,506"
+ orientation="1,0" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ patternTransform="matrix(0.39607708,0,0,0.42550454,617.86712,-146.57274)"
+ id="pattern23476"
+ xlink:href="#black-spots"
+ inkscape:collect="always" />
+ <marker
+ inkscape:stockid="TriangleOutM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutM"
+ style="overflow:visible">
+ <path
+ id="path18351"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ id="stop3989"
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0;" />
+ <stop
+ id="stop3991"
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1;" />
+ </linearGradient>
+ <pattern
+ patternUnits="userSpaceOnUse"
+ width="32"
+ height="32"
+ id="white-spots"
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)">
+ <g
+ inkscape:label="#g3035"
+ id="white-spot"
+ transform="translate(-484.3997,-513.505)">
+ <path
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ id="path3033"
+ style="opacity:0.25;fill:white" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ id="path4633" />
+ </mask>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1"
+ xlink:href="#linearGradient4584-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ id="path4633-8" />
+ </mask>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8"
+ xlink:href="#linearGradient4584-70"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1"
+ id="rect7731"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584"
+ id="linearGradient7733"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847">
+ <feGaussianBlur
+ id="feGaussianBlur9849"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917">
+ <feGaussianBlur
+ id="feGaussianBlur5919"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827">
+ <feGaussianBlur
+ id="feGaussianBlur9829"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668">
+ <feGaussianBlur
+ id="feGaussianBlur10670"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391">
+ <feGaussianBlur
+ id="feGaussianBlur8393"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1"
+ id="rect7572-2"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3"
+ id="linearGradient7574-6"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ id="path4633-3" />
+ </mask>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635"
+ xlink:href="#linearGradient4584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5370"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5374"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5376"
+ xlink:href="#linearGradient5557"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5378"
+ xlink:href="#linearGradient5541"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5380"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5382"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5384"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5386"
+ xlink:href="#linearGradient5813"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5388"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5390"
+ xlink:href="#linearGradient5931"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5392"
+ xlink:href="#linearGradient6398"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5394"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5396"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5398"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5400"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5402"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5404"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5406"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3-8-9" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0-3-2" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8-1-4"
+ xlink:href="#linearGradient4584-70-8-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0-9-4" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4-6-0" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1-4-2"
+ xlink:href="#linearGradient4584-7-8-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-7" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-1"
+ id="linearGradient7574-6-7"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <marker
+ style="overflow:visible"
+ id="TriangleInSQ"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSQ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9776" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS7"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS7">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9779" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSg"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSg">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9782" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSG"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSG">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9785" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSE"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSE">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9788" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSf"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSf">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9791" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSJ"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSJ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9794" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS2"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS2">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9797" />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendI"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9007"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2MstartB"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9004"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7413">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7415"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7409" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7411" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0"
+ id="radialGradient7405"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7397"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7399" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7401" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7403" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71"
+ id="linearGradient7395"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7391"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7393"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7389"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient7381"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7383" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7385" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3"
+ id="linearGradient7379"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7371"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7373" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7375" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7377" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37"
+ id="linearGradient7369"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7365"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7367"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7361">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7363"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7357" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7359" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0"
+ id="radialGradient7353"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7345"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7347" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7349" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7351" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71"
+ id="linearGradient7343"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7339"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7341"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7337"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient7329"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7331" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7333" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3"
+ id="linearGradient7327"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7319"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7321" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7323" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7325" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37"
+ id="linearGradient7317"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7313"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7315"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-9">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-33"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-4" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0"
+ id="radialGradient7254-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-7-71"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71"
+ id="linearGradient7252-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-9"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-5"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-7"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-1-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3"
+ id="linearGradient7250-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-3-37"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-2" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-50" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37"
+ id="linearGradient7248-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-4"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6929">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6931"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6925" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6927" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10"
+ id="radialGradient6921"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6913"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6915" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6917" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6919" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67"
+ id="linearGradient6911"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6907"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6909"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6905"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6897"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6899" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6901" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9"
+ id="linearGradient6895"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6887"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6889" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6891" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6893" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2"
+ id="linearGradient6885"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6881"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6883"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6877">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6879"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6873" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6875" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10"
+ id="radialGradient6869"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6861"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6863" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6865" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6867" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67"
+ id="linearGradient6859"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6855"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6857"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6853"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6845"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6847" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6849" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9"
+ id="linearGradient6843"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6835"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6837" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6839" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6841" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2"
+ id="linearGradient6833"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6829"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6831"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-0"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-82" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10"
+ id="radialGradient5846-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-67"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-2" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67"
+ id="linearGradient5844-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-1"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-2"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-6"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-9"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-28" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-50" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9"
+ id="linearGradient5842-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-2"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-9" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2"
+ id="linearGradient5840-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-4"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6383">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6385"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6379" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6381" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9"
+ id="radialGradient6375"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6367"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6369" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6371" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6373" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7"
+ id="linearGradient6365"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6361"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6363"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6359"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6351"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6353" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6355" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5"
+ id="linearGradient6349"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6341"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6343" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6345" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6347" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3"
+ id="linearGradient6339"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6335"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6337"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6331">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6333"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6327" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6329" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9"
+ id="radialGradient6323"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6315"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6317" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6319" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6321" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7"
+ id="linearGradient6313"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6309"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6311"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6307"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6299"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6301" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6303" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5"
+ id="linearGradient6297"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6289"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6291" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6293" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6295" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3"
+ id="linearGradient6287"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6283"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6285"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-8" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9"
+ id="radialGradient5236-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-7-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-5" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7"
+ id="linearGradient5234-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-3"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-5"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-1-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5"
+ id="linearGradient5232-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-3-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-1" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3"
+ id="linearGradient5230-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-3"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-9"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5984">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5986"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5980" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5982" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8"
+ id="radialGradient5976"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5968"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5970" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5972" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5974" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6"
+ id="linearGradient5966"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5962"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5964"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5960"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient5952"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5954" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5956" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0"
+ id="linearGradient5950"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5942"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5944" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5946" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5948" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4"
+ id="linearGradient5940"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5936"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5938"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5932">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5934"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5928" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5930" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8"
+ id="radialGradient5924"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5916"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5918" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5920" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5922" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6"
+ id="linearGradient5914"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5910"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5912"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5908"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient5900"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5902" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5904" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0"
+ id="linearGradient5898"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5890"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5892" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5894" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5896" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4"
+ id="linearGradient5888"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5884"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5886"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-8">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-8" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8"
+ id="radialGradient5846-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-6"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-3" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-00" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6"
+ id="linearGradient5844-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-9"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-9"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-8"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-26" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-52" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0"
+ id="linearGradient5842-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-75" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4"
+ id="linearGradient5840-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-5"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4553">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4555"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4549" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4551" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4545"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4537"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4539" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4541" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4543" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4535"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4531"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4533"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4529"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient4521"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4523" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4525" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4519"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4511"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4513" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4515" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4517" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4509"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4505"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4507"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4501">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4503"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4497" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4499" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4493"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4485"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4487" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4489" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4491" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4483"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4479"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4481"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4477"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient4469"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4471" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4473" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4467"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4459"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4461" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4463" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4465" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4457"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4453"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4455"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576-6"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="XMLID_419_-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3574-1"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5372-3"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3570-1"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9"
+ inkscape:collect="always" />
+ </filter>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9v"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9"
+ id="path10095"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <linearGradient
+ id="linearGradient5478"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5199"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5175"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4899"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <pattern
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)"
+ id="pattern7559"
+ xlink:href="#pattern18096" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3581" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop3583" />
+ </linearGradient>
+ <radialGradient
+ r="75"
+ id="radialGradient18146"
+ fx="55.217297"
+ fy="846.34479"
+ gradientUnits="userSpaceOnUse"
+ cy="846.42249"
+ cx="99.411484"
+ xlink:href="#linearGradient3579"
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)" />
+ <pattern
+ height="32"
+ id="black-spots"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ width="32">
+ <g
+ inkscape:label="#g3039"
+ transform="translate(-448.3997,-513.505)"
+ id="black-spot">
+ <path
+ style="opacity:0.1;fill:black"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path2961" />
+ </g>
+ </pattern>
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)"
+ id="pattern4038"
+ xlink:href="#black-spots" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)"
+ id="pattern4315"
+ xlink:href="#pattern4038" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)"
+ id="pattern4396"
+ xlink:href="#pattern4315" />
+ <pattern
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)"
+ id="pattern4704"
+ xlink:href="#pattern4396" />
+ <pattern
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)"
+ id="pattern3587"
+ xlink:href="#pattern4704" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)"
+ id="pattern6248"
+ xlink:href="#pattern3587" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)"
+ id="pattern2505"
+ xlink:href="#pattern6248" />
+ <pattern
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)"
+ id="pattern4829"
+ xlink:href="#pattern2505" />
+ <pattern
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)"
+ id="pattern18096"
+ xlink:href="#pattern4829" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ offset="0"
+ style="stop-color:#ac0000;stop-opacity:1"
+ id="stop5723" />
+ <stop
+ offset="1"
+ style="stop-color:#f50606;stop-opacity:1"
+ id="stop5725" />
+ </linearGradient>
+ <marker
+ style="overflow:visible"
+ id="TriangleInM"
+ refY="0"
+ orient="auto"
+ refX="0">
+ <path
+ transform="scale(-0.5,-0.5)"
+ style="fill:#555753"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ id="path4167" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop6077" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6079" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ offset="0"
+ style="stop-color:#000000;stop-opacity:1"
+ id="stop3520" />
+ <stop
+ offset="1"
+ style="stop-color:#000000;stop-opacity:0"
+ id="stop3522" />
+ </linearGradient>
+ <filter
+ height="1.8680604"
+ id="filter4009"
+ y="-0.43403015"
+ width="1.1872287"
+ x="-0.093614347">
+ <feGaussianBlur
+ stdDeviation="3.9786096"
+ id="feGaussianBlur4011"
+ inkscape:collect="always" />
+ </filter>
+ <pattern
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)"
+ id="pattern4156"
+ xlink:href="#pattern18092" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ id="stop3989-1" />
+ <stop
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ id="stop3991-1" />
+ </linearGradient>
+ <pattern
+ height="32"
+ id="white-spots-2"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ width="32">
+ <g
+ inkscape:label="#g3035"
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot-3">
+ <path
+ style="opacity:0.3;fill:white"
+ id="path3033-3"
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z " />
+ </g>
+ </pattern>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)"
+ id="pattern4015-1"
+ xlink:href="#white-spots-2" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)"
+ id="pattern4062-3"
+ xlink:href="#pattern4015-1" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)"
+ id="pattern6159"
+ xlink:href="#pattern4062-3" />
+ <pattern
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)"
+ id="pattern2509"
+ xlink:href="#pattern6159" />
+ <pattern
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)"
+ id="pattern2491"
+ xlink:href="#pattern2509" />
+ <pattern
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)"
+ id="pattern18092"
+ xlink:href="#pattern2491" />
+ <filter
+ height="1.5828062"
+ id="filter16947"
+ y="-0.29140311"
+ x="-0.093153283"
+ width="1.1863066">
+ <feGaussianBlur
+ stdDeviation="1.5518534"
+ id="feGaussianBlur16949"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ offset="0"
+ style="stop-color:#2e3436;stop-opacity:1"
+ id="stop3933" />
+ <stop
+ offset="1"
+ style="stop-color:#2e3436;stop-opacity:0"
+ id="stop3935" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326" />
+ </linearGradient>
+ <linearGradient
+ id="XMLID_419_"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <filter
+ height="1.3295043"
+ id="filter7696"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ style="opacity:1;fill:#2e3436"
+ id="path17037"
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7484"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <filter
+ height="1.2617458"
+ id="filter3605"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ offset="0"
+ style="stop-color:#888a85;stop-opacity:1"
+ id="stop3536" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop3538" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3337" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ id="stop3339" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7128" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7130" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16859"
+ gradientUnits="userSpaceOnUse"
+ x1="592.31"
+ x2="609.32001"
+ y1="162.60001"
+ y2="145.59">
+ <stop
+ offset="0"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ id="stop16861" />
+ <stop
+ offset="1"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ id="stop16863" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E5E5E5" />
+ </linearGradient>
+ <linearGradient
+ id="x5002_"
+ gradientUnits="userSpaceOnUse"
+ x1="601.48999"
+ x2="613.84003"
+ y1="170.16"
+ y2="170.16">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29134" />
+ <stop
+ offset="0.2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29136" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop29138" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.20"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#999999" />
+ </linearGradient>
+ <linearGradient
+ id="x5004_"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ y1="156.45"
+ x1="592.20001">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29157" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29159" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#FFFFFF" />
+ </linearGradient>
+ <radialGradient
+ r="265"
+ id="radialGradient4153"
+ fx="146.23947"
+ fy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ cy="830.26575"
+ cx="146.23947"
+ xlink:href="#linearGradient3987-4"
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)" />
+ <filter
+ height="1.2029091"
+ id="filter5126"
+ y="-0.10145455"
+ x="-0.021882353"
+ width="1.0437647">
+ <feGaussianBlur
+ stdDeviation="1.1579412"
+ id="feGaussianBlur5128"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5932"
+ gradientUnits="userSpaceOnUse"
+ y2="311.5975"
+ x2="500.71109"
+ xlink:href="#linearGradient3518"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ y1="244.95538"
+ x1="500.71109" />
+ <linearGradient
+ id="linearGradient5934"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient6596"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient2462"
+ gradientUnits="userSpaceOnUse"
+ y2="371.83398"
+ x2="257.22992"
+ xlink:href="#linearGradient6075"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ y1="371.49814"
+ x1="277.90814" />
+ <linearGradient
+ id="linearGradient2466"
+ gradientUnits="userSpaceOnUse"
+ y2="383.08859"
+ x2="246.338"
+ xlink:href="#linearGradient6075"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ y1="382.31308"
+ x1="294.08597" />
+ <linearGradient
+ id="linearGradient3570"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient3574"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient3614"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ xlink:href="#x5004_"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="156.45"
+ x1="592.20001" />
+ <linearGradient
+ id="linearGradient3616"
+ gradientUnits="userSpaceOnUse"
+ y2="170.16"
+ x2="613.84003"
+ xlink:href="#x5002_"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="170.77318"
+ x1="600.74371" />
+ <linearGradient
+ id="linearGradient3618"
+ gradientUnits="userSpaceOnUse"
+ y2="151.51437"
+ x2="605.57886"
+ xlink:href="#linearGradient16859"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="158.12231"
+ x1="599.39917" />
+ <radialGradient
+ r="20.016653"
+ id="radialGradient3620"
+ fx="29.256323"
+ fy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ cy="34.171967"
+ cx="29.256323"
+ xlink:href="#linearGradient7126"
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)" />
+ <linearGradient
+ id="linearGradient3622"
+ gradientUnits="userSpaceOnUse"
+ y2="39.879005"
+ x2="500.77838"
+ xlink:href="#linearGradient3335"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ y1="78.13385"
+ x1="500.77838" />
+ <linearGradient
+ id="linearGradient3624"
+ gradientUnits="userSpaceOnUse"
+ y2="41.366924"
+ x2="37.213612"
+ xlink:href="#linearGradient3534"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ y1="26.265114"
+ x1="37.213612" />
+ <radialGradient
+ r="24"
+ id="radialGradient3626"
+ fx="948"
+ fy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ cy="209.00021"
+ cx="948"
+ xlink:href="#linearGradient7126" />
+ <radialGradient
+ r="19.990965"
+ id="radialGradient3628"
+ fx="31.988766"
+ fy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ cy="61.259193"
+ cx="31.988766"
+ xlink:href="#linearGradient3931"
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)" />
+ <filter
+ height="1.5162802"
+ id="filter3712"
+ y="-0.25814009"
+ width="1.2335186"
+ x="-0.11675928">
+ <feGaussianBlur
+ stdDeviation="2.4864777"
+ id="feGaussianBlur3714"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3746"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <linearGradient
+ id="linearGradient3766"
+ gradientUnits="userSpaceOnUse"
+ y2="412.13812"
+ x2="252.93071"
+ xlink:href="#linearGradient6075"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ y1="411.73941"
+ x1="277.4801" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ offset="0"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ id="stop5933-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5935-4" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5799-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5801-9" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ id="stop10496-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop10498-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ offset="0"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5543-2" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ id="stop5545-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ offset="0"
+ style="stop-color:#0093d9;stop-opacity:1"
+ id="stop5559-2" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5561-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop8319" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8321" />
+ </linearGradient>
+ <filter
+ height="1.233731"
+ id="filter9827-6"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729">
+ <feGaussianBlur
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5815-2" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ id="stop5817-7" />
+ </linearGradient>
+ <filter
+ height="1.3127669"
+ id="filter5917-1"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309">
+ <feGaussianBlur
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5807-1" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5809-7" />
+ </linearGradient>
+ <filter
+ height="1.4388067"
+ id="filter9847-4"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854">
+ <feGaussianBlur
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7586-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7588-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7733-4"
+ gradientUnits="userSpaceOnUse"
+ y2="595.06226"
+ x2="20.999998"
+ xlink:href="#linearGradient7584-8"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-0">
+ <rect
+ style="fill:url(#linearGradient7733-4);fill-opacity:1"
+ id="rect7731-9"
+ width="103.35121"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ offset="0"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ id="stop10556" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop10558" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ offset="0"
+ style="stop-color:#ababab;stop-opacity:1"
+ id="stop7810" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7812" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7361" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7363" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop6480" />
+ <stop
+ offset="1"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ id="stop6482" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6416" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6418" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5687" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5689" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop10568" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop10570" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ height="1.0124482"
+ id="filter8323"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496">
+ <feGaussianBlur
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5671" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5673" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5679" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5681" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5567" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5569" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ offset="0"
+ style="stop-color:#898989;stop-opacity:1"
+ id="stop7578" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7580" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8483" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop8485" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7574"
+ gradientUnits="userSpaceOnUse"
+ y2="460.97229"
+ x2="596.48529"
+ xlink:href="#linearGradient8481"
+ gradientTransform="translate(0,-337)"
+ y1="416.72614"
+ x1="596.48529" />
+ <mask
+ id="mask7570">
+ <rect
+ style="fill:url(#linearGradient7574);fill-opacity:1"
+ id="rect7572"
+ width="86"
+ y="60.362179"
+ x="536"
+ height="111" />
+ </mask>
+ <linearGradient
+ id="linearGradient6392"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7453"
+ gradientUnits="userSpaceOnUse"
+ y2="19.512289"
+ x2="46.277946"
+ xlink:href="#linearGradient7576"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="49.1087"
+ x1="33.149971" />
+ <linearGradient
+ id="linearGradient7455"
+ gradientUnits="userSpaceOnUse"
+ y2="30.312105"
+ x2="34.585835"
+ xlink:href="#linearGradient5573"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="44.46735"
+ x1="21.322929" />
+ <linearGradient
+ id="linearGradient7457"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="51.641129"
+ x1="17.246363" />
+ <linearGradient
+ id="linearGradient7459"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7461"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7463"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7465"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7467"
+ gradientUnits="userSpaceOnUse"
+ y2="30.0221"
+ x2="42.382099"
+ xlink:href="#linearGradient5685"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ y1="42.648251"
+ x1="42.074207" />
+ <linearGradient
+ id="linearGradient7469"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6414"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7471"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7473"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6398"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7475"
+ gradientUnits="userSpaceOnUse"
+ y2="141.11491"
+ x2="603.48352"
+ xlink:href="#linearGradient6414"
+ gradientTransform="translate(0,-29.000003)"
+ y1="145.48944"
+ x1="603.48352" />
+ <linearGradient
+ id="linearGradient7477"
+ gradientUnits="userSpaceOnUse"
+ y2="35.376236"
+ x2="44.599358"
+ xlink:href="#linearGradient6478"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ y1="36.09766"
+ x1="41.126476" />
+ <linearGradient
+ id="linearGradient7479"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ y1="36.17104"
+ x1="53.072731" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7481"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7483"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7485"
+ gradientUnits="userSpaceOnUse"
+ y2="37.98819"
+ x2="17.47529"
+ xlink:href="#linearGradient7808"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="27.37009"
+ x1="37.260498" />
+ <linearGradient
+ id="linearGradient7487"
+ gradientUnits="userSpaceOnUse"
+ y2="33.722939"
+ x2="20.776503"
+ xlink:href="#linearGradient5573"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="46.597134"
+ x1="27.247866" />
+ <linearGradient
+ id="linearGradient7489"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="50.84045"
+ x1="16.030468" />
+ <linearGradient
+ id="linearGradient7491"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7493"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7495"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7497"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7499"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient10554"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.527008"
+ x1="48.126881" />
+ <linearGradient
+ id="linearGradient7501"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7503"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7505"
+ gradientUnits="userSpaceOnUse"
+ y2="144.12111"
+ x2="603.7171"
+ xlink:href="#linearGradient6414"
+ y1="140.36218"
+ x1="603.25" />
+ <linearGradient
+ id="linearGradient7507"
+ gradientUnits="userSpaceOnUse"
+ y2="36.286098"
+ x2="40.255276"
+ xlink:href="#linearGradient6478"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.187798"
+ x1="45.470558" />
+ <linearGradient
+ id="linearGradient7509"
+ gradientUnits="userSpaceOnUse"
+ y2="33.083126"
+ x2="37.686401"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ y1="35.072224"
+ x1="55.874207" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7511"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7513"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7515"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7517"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7519"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <linearGradient
+ id="linearGradient7521"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7523"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient8317"
+ y1="70.580994"
+ x1="802.88586" />
+ <linearGradient
+ id="linearGradient7525"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7527"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7529"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <linearGradient
+ id="linearGradient7531"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1"
+ y1="35.501328"
+ x1="-50.000641" />
+ <linearGradient
+ id="linearGradient7533"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <linearGradient
+ id="linearGradient7535"
+ gradientUnits="userSpaceOnUse"
+ y2="69.928268"
+ x2="-32.08812"
+ xlink:href="#linearGradient5813-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="73.162025"
+ x1="-31.529013" />
+ <linearGradient
+ id="linearGradient7537"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7539"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient5931-9"
+ y1="67.561554"
+ x1="806.19238" />
+ <linearGradient
+ id="linearGradient7541"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7543"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7545"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <linearGradient
+ id="linearGradient7547"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1"
+ y1="35.501328"
+ x1="-50.000641" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7549"
+ fx="-9.7009583"
+ fy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ cy="49.478912"
+ cx="-9.7009583"
+ xlink:href="#linearGradient5541-2"
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7551"
+ fx="544.67078"
+ fy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ cy="121.54527"
+ cx="544.67078"
+ xlink:href="#linearGradient10494-6"
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7553"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7555"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendZ"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5723"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5720"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Lstart"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4722"
+ transform="scale(1.1) translate(1,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4728"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow1Mend"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refX="0.0">
+ <path
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;"
+ id="path4713"
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2Mend"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;"
+ id="path4731"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="marker13197"
+ style="overflow:visible">
+ <path
+ id="path13100"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(-0.4)" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1"
+ id="rect7572-2-4"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-6"
+ id="linearGradient7574-6-8"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5-6">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2-5"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5-4">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5-9"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15362" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15364" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9-0">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0-4"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15383" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15385" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15394" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15396" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient12764-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12766-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15405" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15407" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12768-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-3" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12770-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15416" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15418" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8"
+ id="linearGradient12772-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0-8" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient12774-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop15427" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15429" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12776-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15434" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15436" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient12778-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15441" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15443" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15445">
+ <feGaussianBlur
+ id="feGaussianBlur15447"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient12780-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15452" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15454" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter15456">
+ <feGaussianBlur
+ id="feGaussianBlur15458"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12782-6"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15463" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15465" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15467">
+ <feGaussianBlur
+ id="feGaussianBlur15469"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient12784-4"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15474" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15476" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4"
+ id="linearGradient12786-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7-7" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12788-0"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15485" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15487" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15489">
+ <feGaussianBlur
+ id="feGaussianBlur15491"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient12790-5"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15496" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15498" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient12792-4"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15503" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15505" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient12794-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15510" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop15512" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12796-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15517" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15519" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4-3">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7-8"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12798-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15526" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15528" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12800-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15533" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15535" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12802-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15540" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15542" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12804-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15547" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15549" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ style="fill:url(#linearGradient7733-2);fill-opacity:1"
+ id="rect7731-2"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-0"
+ id="linearGradient7733-2"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-43">
+ <feGaussianBlur
+ id="feGaussianBlur9849-2"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-5">
+ <feGaussianBlur
+ id="feGaussianBlur5919-6"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-2">
+ <feGaussianBlur
+ id="feGaussianBlur9829-3"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16020" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16022" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-2">
+ <feGaussianBlur
+ id="feGaussianBlur10670-8"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-0">
+ <feGaussianBlur
+ id="feGaussianBlur8393-0"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter16044">
+ <feGaussianBlur
+ id="feGaussianBlur16046"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16051" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop16053" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter16055">
+ <feGaussianBlur
+ id="feGaussianBlur16057"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16066" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16068" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop16077" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16079" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16084" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16086" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16091" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16093" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16095">
+ <feGaussianBlur
+ id="feGaussianBlur16097"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16102" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16104" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16106">
+ <feGaussianBlur
+ id="feGaussianBlur16108"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16113" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16115" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16120" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16122" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-8">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16133" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16135" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ style="fill:url(#linearGradient7733-7);fill-opacity:1"
+ id="rect7731-0"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-00"
+ id="linearGradient7733-7"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-54" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-44">
+ <feGaussianBlur
+ id="feGaussianBlur9849-0"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-3">
+ <feGaussianBlur
+ id="feGaussianBlur5919-8"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-1">
+ <feGaussianBlur
+ id="feGaussianBlur9829-4"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17379" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17381" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-8" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-4">
+ <feGaussianBlur
+ id="feGaussianBlur10670-9"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-8">
+ <feGaussianBlur
+ id="feGaussianBlur8393-3"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter17403">
+ <feGaussianBlur
+ id="feGaussianBlur17405"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17410" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop17412" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter17414">
+ <feGaussianBlur
+ id="feGaussianBlur17416"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-71" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17425" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17427" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-52" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400-7" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17444" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17446" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17448">
+ <feGaussianBlur
+ id="feGaussianBlur17450"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17455" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17457" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17459">
+ <feGaussianBlur
+ id="feGaussianBlur17461"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop17466" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop17468" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17473" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17475" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17486" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17488" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2"
+ id="linearGradient17846"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3"
+ id="linearGradient17848"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3"
+ id="linearGradient17850"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-0"
+ id="linearGradient17852"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-7"
+ id="radialGradient17854"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9"
+ id="radialGradient17856"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6"
+ id="linearGradient17858"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2"
+ id="linearGradient17860"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-2"
+ id="linearGradient17862"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3"
+ id="linearGradient17864"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-0"
+ id="linearGradient17866"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-4"
+ id="linearGradient17868"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2"
+ id="radialGradient17870"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9"
+ id="radialGradient17872"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6"
+ id="linearGradient17874"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2"
+ id="radialGradient17876"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9"
+ id="radialGradient17878"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1"
+ id="radialGradient17880"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1"
+ id="radialGradient17882"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9"
+ id="linearGradient17958"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient17960"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient17962"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient17964"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient17966"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient17968"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient17970"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1"
+ id="linearGradient17972"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient17974"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient17976"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1"
+ id="linearGradient17978"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient17980"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutMk"
+ style="overflow:visible">
+ <path
+ id="path19935"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21675"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21677"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21679"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21681"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21683"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21685"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21687"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21689"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21691"
+ xlink:href="#linearGradient5813-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21693"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21695"
+ xlink:href="#linearGradient5931-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21697"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21699"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21701"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21703"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21705"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21707"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21709"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21711"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-6"
+ style="overflow:visible">
+ <path
+ id="path19935-0"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-8"
+ style="overflow:visible">
+ <path
+ id="path19935-2"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0-7" />
+ </linearGradient>
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22462"
+ xlink:href="#linearGradient7576-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22464"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22466"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22468"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22470"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22472"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22474"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22476"
+ xlink:href="#linearGradient5685-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22478"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22480"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22482"
+ xlink:href="#linearGradient6398-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22484"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22486"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22488"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22490"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22492"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22494"
+ xlink:href="#linearGradient7808-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22496"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22498"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22500"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22502"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22504"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22506"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22508"
+ xlink:href="#linearGradient10554-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22510"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22512"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22514"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22516"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22518"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22520"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22522"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22524"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22526"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22528"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22530"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22532"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22534"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22536"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22538"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22540"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22542"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22544"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22546"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22548"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22550"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22552"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22554"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22556"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22558"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22560"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22562"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22564"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22566"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22568"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22570"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22572"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22574"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22576"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22578"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22580"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22582"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22584"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22586"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22588"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22590"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22592"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22594"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22596"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22598"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22600"
+ xlink:href="#linearGradient5557"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22602"
+ xlink:href="#linearGradient5541"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22604"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22606"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22608"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22610"
+ xlink:href="#linearGradient5813"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22612"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22614"
+ xlink:href="#linearGradient5931"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22616"
+ xlink:href="#linearGradient6398"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22618"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22620"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22622"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22624"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22626"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22628"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22630"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22632"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22634"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22636"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22638"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22640"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22642"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22644"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22646"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22648"
+ xlink:href="#linearGradient5813-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22650"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22652"
+ xlink:href="#linearGradient5931-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22654"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22656"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22658"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22660"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22662"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22664"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22666"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22668"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="-130.55569"
+ x2="188"
+ y1="-130.55569"
+ x1="71"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22670"
+ xlink:href="#linearGradient5573"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="-130.55569"
+ x2="188"
+ y1="-130.55569"
+ x1="71"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22672"
+ xlink:href="#linearGradient5573-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="-130.55569"
+ x2="188"
+ y1="-130.55569"
+ x1="71"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22674"
+ xlink:href="#linearGradient5573-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22700"
+ xlink:href="#linearGradient7484-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22702"
+ xlink:href="#lg1900-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22704"
+ xlink:href="#XMLID_419_-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22706"
+ xlink:href="#linearGradient7322-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22750"
+ xlink:href="#linearGradient7484-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22752"
+ xlink:href="#lg1900-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22754"
+ xlink:href="#XMLID_419_-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22756"
+ xlink:href="#linearGradient7322-1"
+ inkscape:collect="always" />
+ <marker
+ inkscape:stockid="marker13197Y"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="marker13197Y"
+ style="overflow:visible">
+ <path
+ id="path7016"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ transform="scale(-0.4)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMkM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutMkM"
+ style="overflow:visible">
+ <path
+ id="path7019"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9"
+ transform="scale(0.4)" />
+ </marker>
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ transform="translate(-33.785574,76.85193)"
+ id="layer1"
+ inkscape:groupmode="layer"
+ inkscape:label="Layer 1">
+ <g
+ transform="translate(20.785574,15.148096)"
+ id="g1758">
+ <g
+ inkscape:label="Layer 1"
+ id="layer1-8"
+ style="display:inline"
+ transform="translate(-204.5471,-8.3623809)">
+ <g
+ id="g51234">
+ <g
+ transform="matrix(0.62176164,0,0,0.63869205,-1.43037,115.35275)"
+ id="g23480">
+ <rect
+ style="fill:url(#black-spots);fill-opacity:1;stroke:#000000;stroke-width:6.34749365;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="rect22758"
+ width="575.39099"
+ height="268.39102"
+ x="500.35156"
+ y="-315.88885" />
+ <rect
+ y="-312.49783"
+ x="502.35156"
+ height="263"
+ width="570"
+ id="rect23478"
+ style="opacity:0.61946902;fill:#ffffff;fill-opacity:1;stroke:none" />
+ </g>
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314"
+ y="5244.3931"
+ x="4432.2417"
+ ry="24.171429"
+ rx="60.428574"
+ height="24.171429"
+ width="0" />
+ <g
+ id="g8484-6"
+ transform="translate(5731.7105,647.6564)" />
+ <g
+ style="fill:#ffffff"
+ id="g6374-4"
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)" />
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-1"
+ y="672.71167"
+ x="5640.6602"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ id="g4596-3"
+ mask="url(#mask4631-8)"
+ style="opacity:0.30729232"
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)" />
+ <g
+ id="g3002-33"
+ transform="translate(5456.1995,2052.0684)" />
+ <g
+ id="g4898-8"
+ transform="translate(5291.6877,1428.7067)">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ id="g3002-4"
+ transform="translate(6200.2995,1255.4254)" />
+ <g
+ id="g4898-9"
+ transform="translate(6035.7875,632.0634)">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ x="5721.2646"
+ y="1713.0334"
+ id="text19594"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="5721.2646"
+ y="1713.0334"
+ id="tspan19596" /></text>
+ <g
+ id="g3002-3"
+ transform="translate(6137.2995,1486.4253)" />
+ <g
+ id="g4898-2"
+ transform="translate(5972.7875,863.0634)">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ id="g21694"
+ transform="translate(5002.2995,1054.4254)">
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text21702"
+ y="658.60797"
+ x="321.965"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan21704"
+ y="658.60797"
+ x="321.965" /></text>
+ </g>
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-3"
+ y="1739.5555"
+ x="6394.4658"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ transform="translate(539.98213,665.63497)"
+ id="g3002-35" />
+ <g
+ transform="translate(375.47031,42.27285)"
+ id="g4898-37">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ transform="translate(321.48515,123.56711)"
+ id="g3002-4-44" />
+ <g
+ transform="translate(156.97333,-499.79501)"
+ id="g4898-3">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ transform="translate(4.49242,441.24827)"
+ id="g9694" />
+ <g
+ transform="translate(-160.01938,-182.11385)"
+ id="g9696">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ transform="translate(531.70846,712.31515)"
+ id="g11586" />
+ <g
+ transform="translate(367.19664,88.95298)"
+ id="g11591">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ transform="translate(945.16259,126.17676)"
+ id="g13960" />
+ <g
+ transform="translate(780.65077,-497.18536)"
+ id="g13962">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ id="g6425"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ style="fill:#5c3566" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ x="902.75421"
+ y="196.70628"
+ id="text13535"><tspan
+ sodipodi:role="line"
+ id="tspan13537"
+ x="902.75421"
+ y="196.70628" /></text>
+ <g
+ id="g4113"
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)" />
+ <g
+ id="g6262"
+ transform="translate(-2126.5044,28.9977)" />
+ <g
+ style="display:inline"
+ id="g8866-7"
+ transform="matrix(-0.6631863,0,0,0.67913371,569.98149,-371.92372)">
+ <g
+ style="opacity:0.15161288"
+ id="g8868-3"
+ mask="url(#mask7729-5)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path8870-0"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path8872-2"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21675);fill-opacity:1"
+ id="path8874-5"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path8876-0"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ id="path8878-7"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path8880-0"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21677)"
+ id="path8882-2"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient21679);fill-opacity:1"
+ id="polygon8884-7"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21681);fill-opacity:1"
+ id="path8886-9"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient21683);fill-opacity:1;stroke:url(#radialGradient21685);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path8888-0"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21687);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path8890-0"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g8892-6"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path8894-4"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path8896-1"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21689);fill-opacity:1"
+ id="path8898-5"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path8900-1"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21691);fill-opacity:1"
+ id="path8902-2"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path8904-9"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21693)"
+ id="path8906-7"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient21695);fill-opacity:1"
+ id="polygon8908-0"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21697);fill-opacity:1"
+ id="path8910-6"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient21699);fill-opacity:1;stroke:url(#radialGradient21701);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path8912-3"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21703);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path8914-6"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient21705);fill-opacity:1;stroke:url(#radialGradient21707);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ id="path8916-3"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g8918-6"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient21709);fill-opacity:1"
+ id="path8920-7"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient21711);fill-opacity:1"
+ id="path8922-6"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <g
+ id="g7496-0"
+ transform="matrix(0.23376094,0,0,0.15766672,1027.4948,-175.19334)">
+ <use
+ height="700"
+ x="0"
+ xlink:href="#g7452-5"
+ y="0"
+ transform="translate(0,73)"
+ width="1000"
+ id="use7494-5" />
+ <g
+ id="g7452-5"
+ transform="matrix(0.8937066,0,0,0.8937066,-85.24089,192.26027)">
+ <g
+ id="g7454-3"
+ transform="matrix(7.659747,0,0,7.659747,-3413.2328,-6201.7396)">
+ <g
+ id="g7456-3"
+ transform="matrix(1.0634304,0,0,1.1520362,59.093881,903.66323)">
+ <path
+ d="m 1622.8438,458.84375 c -56.3324,0 -102.0313,23.48139 -102.0313,52.46875 0,0.33975 0.019,0.69303 0.031,1.03125 l -3.5,0 0,42.96875 c -10e-5,29.96809 47.2617,54.25 105.5,54.25 58.2382,2e-5 105.4062,-24.28191 105.4062,-54.25 l 0,-42.96875 -3.5,0 c 0.013,-0.33822 0.031,-0.6915 0.031,-1.03125 10e-5,-28.98736 -45.605,-52.46875 -101.9374,-52.46875 z"
+ id="path14856-1"
+ style="fill:#000000;fill-opacity:1;filter:url(#filter3605-3)"
+ transform="matrix(0.1373667,0,0,0.1268015,-199.43287,-50.397161)"
+ inkscape:connector-curvature="0" />
+ <path
+ id="path7458-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ style="fill:url(#linearGradient22750)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 23.078104,27.161102 c 8,0 14.457158,-3.08 14.457158,-6.88 l 0,-5.446791 c -1.375602,3.076004 -8.175744,5.672238 -13.851796,7.231897 0.04822,1.262713 -8.605362,5.094894 -0.605362,5.094894 z"
+ id="path7460-5"
+ style="fill:url(#linearGradient22752);filter:url(#filter7696-0)"
+ clip-path="url(#clipPath17035-6)"
+ inkscape:connector-curvature="0" />
+ <path
+ id="path7462-7"
+ d="m 37.97,14.568887 c 0,3.8 -6.48,6.88 -14.48,6.88 -8,0 -14.49,-3.08 -14.49,-6.88 0,-3.8 6.49,-6.8800005 14.49,-6.8800005 8,0 14.48,3.0800005 14.48,6.8800005 z"
+ style="fill:url(#linearGradient22754)"
+ inkscape:connector-curvature="0" />
+ <path
+ id="path7464-2"
+ d="m 37.728925,14.725637 c 0,3.705803 -6.319369,6.709453 -14.12106,6.709453 -7.80169,0 -14.1308116,-3.00365 -14.1308116,-6.709453 0,-3.705802 6.3291216,-6.709455 14.1308116,-6.709455 7.801691,0 14.12106,3.003653 14.12106,6.709455 z"
+ style="opacity:0.68983956;fill:none;stroke:url(#radialGradient22756);stroke-width:0.57768553;stroke-miterlimit:4;stroke-opacity:1;filter:url(#filter3968-6)"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ </g>
+ <use
+ height="700"
+ x="0"
+ xlink:href="#g7452-5"
+ y="0"
+ transform="translate(0,-79.242113)"
+ width="1000"
+ id="use5130-1" />
+ </g>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text21940"
+ y="34.30666"
+ x="594.46899"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:center;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="34.30666"
+ x="594.46899"
+ id="tspan21942"
+ sodipodi:role="line">LDAP</tspan><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="48.706657"
+ x="594.46899"
+ sodipodi:role="line"
+ id="tspan8613">client</tspan></text>
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,366.88733,-374.95875)"
+ id="g4892">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729)"
+ id="g4894"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4896"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path4898"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path4900"
+ style="fill:url(#linearGradient5370);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4902"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path4904"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path4906"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path4908"
+ style="fill:url(#linearGradient5372)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon4910"
+ style="fill:url(#linearGradient5374);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path4912"
+ style="fill:url(#linearGradient5376);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path4914"
+ style="opacity:0.62254902;fill:url(#radialGradient5378);fill-opacity:1;stroke:url(#radialGradient5380);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4916"
+ style="fill:url(#linearGradient5382);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g4918">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4920"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path4922"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path4924"
+ style="fill:url(#linearGradient5384);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4926"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path4928"
+ style="fill:url(#linearGradient5386);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path4930"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path4932"
+ style="fill:url(#linearGradient5388)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon4934"
+ style="fill:url(#linearGradient5390);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path4936"
+ style="fill:url(#linearGradient5392);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path4938"
+ style="opacity:0.96825412;fill:url(#radialGradient5394);fill-opacity:1;stroke:url(#radialGradient5396);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4940"
+ style="fill:url(#linearGradient5398);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path4942"
+ style="opacity:0.71957703;fill:url(#radialGradient5400);fill-opacity:1;stroke:url(#radialGradient5402);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g4944">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path4946"
+ style="opacity:0.680851;fill:url(#radialGradient5404);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path4948"
+ style="fill:url(#radialGradient5406);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <path
+ style="stroke-linejoin:miter;marker-end:url(#TriangleOutMkM);stroke-opacity:1;marker-start:url(#marker13197Y);stroke-dashoffset:0;stroke:#0093d9;stroke-linecap:butt;stroke-miterlimit:4;stroke-dasharray:none;stroke-width:3;fill:none"
+ d="m 465.84232,-22.693335 85.0537,-1"
+ id="path17982"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text21940-7"
+ y="28.743378"
+ x="389.25806"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:center;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="28.743378"
+ x="389.25806"
+ sodipodi:role="line"
+ id="tspan8613-1">Directory</tspan><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="43.143379"
+ x="389.25806"
+ sodipodi:role="line"
+ id="tspan8641">Server</tspan></text>
+ </g>
+ </g>
+ <g
+ id="layer2"
+ inkscape:label="sdfsdf"
+ style="display:none"
+ transform="translate(-204.5471,-8.3623809)">
+ <rect
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate"
+ id="rect26435"
+ width="1620"
+ height="951.42859"
+ x="-308.57144"
+ y="92.362144"
+ ry="26.574863"
+ rx="26.574863" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/krb-ticket-policy.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/krb-ticket-policy.png
new file mode 100644
index 0000000..1b6da73
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/krb-ticket-policy.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-krb.svg b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-krb.svg
new file mode 100644
index 0000000..c16da93
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-krb.svg
@@ -0,0 +1,15586 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-krb.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-ldap.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="-180.89561"
+ inkscape:cy="273.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="layer1-8"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#pattern6599"
+ id="pattern6964"
+ patternTransform="matrix(0.455007,0,0,0.455007,-358.50001,126.15346)" />
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#black-spots-2"
+ id="pattern6599"
+ patternTransform="matrix(0.455007,0,0,0.455007,-840.50001,-112.84654)" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4778"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4778-7"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4754-8"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22752-1"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22706-9"
+ xlink:href="#linearGradient7322-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22704-6"
+ xlink:href="#XMLID_419_-7-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22702-8"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22700-7"
+ xlink:href="#linearGradient7484-3-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22616"
+ xlink:href="#linearGradient6398-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient5573-1-3-1">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3-9-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0-7-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-7">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0-5" />
+ </linearGradient>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-8-2"
+ style="overflow:visible">
+ <path
+ id="path19935-2-6"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-6-6"
+ style="overflow:visible">
+ <path
+ id="path19935-0-4"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutMk-1"
+ style="overflow:visible">
+ <path
+ id="path19935-01"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4-0"
+ id="linearGradient17980-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1-3"
+ id="linearGradient17978-8"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient17976-1"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4-0"
+ id="linearGradient17974-7"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1-0"
+ id="linearGradient17972-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6-5"
+ id="linearGradient17970-7"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient17968-4"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4-1"
+ id="linearGradient17966-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3-8"
+ id="linearGradient17964-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient17962-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3-5"
+ id="linearGradient17960-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9-3"
+ id="linearGradient17958-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1-2"
+ id="radialGradient17882-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1-2"
+ id="radialGradient17880-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9-8"
+ id="radialGradient17878-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2-3"
+ id="radialGradient17876-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6-9"
+ id="linearGradient17874-4"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9-8"
+ id="radialGradient17872-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2-3"
+ id="radialGradient17870-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-4-9"
+ id="linearGradient17868-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-0-0"
+ id="linearGradient17866-0"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3-8"
+ id="linearGradient17864-6"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-2-7"
+ id="linearGradient17862-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2-8"
+ id="linearGradient17860-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6-9"
+ id="linearGradient17858-0"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9-8"
+ id="radialGradient17856-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-7-4"
+ id="radialGradient17854-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-0-5"
+ id="linearGradient17852-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3-8"
+ id="linearGradient17850-7"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3-8"
+ id="linearGradient17848-2"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2-8"
+ id="linearGradient17846-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ id="linearGradient17484-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17486-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17488-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359-4-1-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-5-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-5-5" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-2-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient17471-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17473-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17475-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17464-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop17466-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop17468-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17459-8">
+ <feGaussianBlur
+ id="feGaussianBlur17461-0"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17455-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17457-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17448-1">
+ <feGaussianBlur
+ id="feGaussianBlur17450-4"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17442-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17444-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17446-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-6-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-8-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4-9">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400-7-0" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402-8-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-52-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-3-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17425-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17427-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5813-2-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-6-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-71-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter17414-8">
+ <feGaussianBlur
+ id="feGaussianBlur17416-6"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17410-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop17412-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter17403-6">
+ <feGaussianBlur
+ id="feGaussianBlur17405-8"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-8-2">
+ <feGaussianBlur
+ id="feGaussianBlur8393-3-4"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-5-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-0-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-4-4">
+ <feGaussianBlur
+ id="feGaussianBlur10670-9-5"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-9-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-3-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-8-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-5-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-0-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-9-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-5-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17379-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17381-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317-3-3-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-0-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-4-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-1-0">
+ <feGaussianBlur
+ id="feGaussianBlur9829-4-3"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-3-6">
+ <feGaussianBlur
+ id="feGaussianBlur5919-8-5"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-5-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-0-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-44-6">
+ <feGaussianBlur
+ id="feGaussianBlur9849-0-7"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-00-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-54-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-3-6" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-00-1"
+ id="linearGradient7733-7-1"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-57-0">
+ <rect
+ style="fill:url(#linearGradient7733-7-1);fill-opacity:1"
+ id="rect7731-0-8"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ id="linearGradient16131-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16133-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16135-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359-4-2-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-0-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-8-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-8-9">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-4-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient16118-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16120-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16122-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16111-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16113-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16115-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16106-8">
+ <feGaussianBlur
+ id="feGaussianBlur16108-0"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16102-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16104-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16095-9">
+ <feGaussianBlur
+ id="feGaussianBlur16097-2"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16089-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16091-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16093-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16084-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16086-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop16077-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16079-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-8-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-0-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16066-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16068-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5813-8-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-5-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-4-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter16055-7">
+ <feGaussianBlur
+ id="feGaussianBlur16057-0"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16051-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop16053-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter16044-0">
+ <feGaussianBlur
+ id="feGaussianBlur16046-2"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-0-6">
+ <feGaussianBlur
+ id="feGaussianBlur8393-0-4"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-4-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-6-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-2-3">
+ <feGaussianBlur
+ id="feGaussianBlur10670-8-4"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-0-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-4-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-1-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-9-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-9-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-1-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-8-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16020-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16022-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317-3-9-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-1-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-1-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-2-9">
+ <feGaussianBlur
+ id="feGaussianBlur9829-3-7"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-5-2">
+ <feGaussianBlur
+ id="feGaussianBlur5919-6-5"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-8-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-1-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-43-8">
+ <feGaussianBlur
+ id="feGaussianBlur9849-2-2"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-0-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-5-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-0-4" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-0-5"
+ id="linearGradient7733-2-8"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-5-6">
+ <rect
+ style="fill:url(#linearGradient7733-2-8);fill-opacity:1"
+ id="rect7731-2-8"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ id="linearGradient15545-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15547-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15549-9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12804-8-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15538-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15540-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15542-6" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12802-6-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15531-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15533-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15535-7" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12800-5-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15524-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15526-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15528-1" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12798-0-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4-3-8">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7-8-3"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15515-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15517-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15519-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12796-7-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <linearGradient
+ id="linearGradient15508-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15510-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop15512-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1-0"
+ id="linearGradient12794-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ id="linearGradient15501-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15503-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15505-3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4-0"
+ id="linearGradient12792-4-2"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ id="linearGradient15494-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15496-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15498-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6-5"
+ id="linearGradient12790-5-7"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15489-6">
+ <feGaussianBlur
+ id="feGaussianBlur15491-3"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15483-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15485-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15487-0" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12788-0-6"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ id="linearGradient10554-1-4-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8-3-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7-7-5" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4-5"
+ id="linearGradient12786-7-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient15472-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15474-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15476-5" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6-5"
+ id="linearGradient12784-4-1"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15467-0">
+ <feGaussianBlur
+ id="feGaussianBlur15469-5"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15461-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15463-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15465-6" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12782-6-2"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter15456-0">
+ <feGaussianBlur
+ id="feGaussianBlur15458-7"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15450-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15452-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15454-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4-1"
+ id="linearGradient12780-2-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15445-0">
+ <feGaussianBlur
+ id="feGaussianBlur15447-4"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15439-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15441-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15443-2" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3-8"
+ id="linearGradient12778-6-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ id="linearGradient15432-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15434-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15436-7" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12776-5-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ id="linearGradient15425-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop15427-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15429-8" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3-5"
+ id="linearGradient12774-7-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ id="linearGradient7808-7-8-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7-1-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0-8-4" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8-5"
+ id="linearGradient12772-2-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ id="linearGradient15414-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15416-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15418-1" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12770-2-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient7359-4-3-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-2-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-3-4" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12768-0-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15403-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15405-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15407-4" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12766-1-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient6478-4-1-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2-1-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6-9-1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1-0"
+ id="linearGradient12764-0-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ id="linearGradient15392-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15394-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15396-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0-7-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3-2-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15383-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15385-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21-8-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9-7-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8-0-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7-5-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-6-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-1-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-5-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9-0-3">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0-4-2"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15362-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15364-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5-4-9">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5-9-0"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0-0-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7-2-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5-6-7">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2-5-0"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677-53-3-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2-7-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1-9-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1-5-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2-1-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4-4-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3-5-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3-8-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6-8-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481-3-6-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-5-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-1-2" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-6-4"
+ id="linearGradient7574-6-8-9"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <mask
+ id="mask7570-2-4-6">
+ <rect
+ style="fill:url(#linearGradient7574-6-8-9);fill-opacity:1"
+ id="rect7572-2-4-1"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <marker
+ inkscape:stockid="TriangleInM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="marker13197-9"
+ style="overflow:visible">
+ <path
+ id="path13100-4"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(-0.4)" />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2Mend-8"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;"
+ id="path4731-4"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow1Mend-1"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refX="0.0">
+ <path
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;"
+ id="path4713-6"
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart-1"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4728-2"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Lstart-3"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4722-3"
+ transform="scale(1.1) translate(1,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9-5"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5720-9"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendZ-7"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5723-2"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7555-8"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7553-7"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7551-2"
+ fx="544.67078"
+ fy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ cy="121.54527"
+ cx="544.67078"
+ xlink:href="#linearGradient10494-6-1"
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7549-2"
+ fx="-9.7009583"
+ fy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ cy="49.478912"
+ cx="-9.7009583"
+ xlink:href="#linearGradient5541-2-5"
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)" />
+ <linearGradient
+ id="linearGradient7547-4"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1-5"
+ y1="35.501328"
+ x1="-50.000641" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7545-7"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6-1"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7543-0"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2-5"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <linearGradient
+ id="linearGradient7541-7"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4-6"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <linearGradient
+ id="linearGradient7539-6"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient5931-9-6"
+ y1="67.561554"
+ x1="806.19238" />
+ <linearGradient
+ id="linearGradient7537-5"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317-35"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7535-5"
+ gradientUnits="userSpaceOnUse"
+ y2="69.928268"
+ x2="-32.08812"
+ xlink:href="#linearGradient5813-5-6"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="73.162025"
+ x1="-31.529013" />
+ <linearGradient
+ id="linearGradient7533-8"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <linearGradient
+ id="linearGradient7531-5"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1-5"
+ y1="35.501328"
+ x1="-50.000641" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7529-7"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6-1"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7527-7"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2-5"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <linearGradient
+ id="linearGradient7525-3"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4-6"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <linearGradient
+ id="linearGradient7523-2"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient8317-35"
+ y1="70.580994"
+ x1="802.88586" />
+ <linearGradient
+ id="linearGradient7521-9"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317-35"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7519-1"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7517-4"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7515-4"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7513-7"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7511-4"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7509-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.083126"
+ x2="37.686401"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ y1="35.072224"
+ x1="55.874207" />
+ <linearGradient
+ id="linearGradient7507-6"
+ gradientUnits="userSpaceOnUse"
+ y2="36.286098"
+ x2="40.255276"
+ xlink:href="#linearGradient6478-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.187798"
+ x1="45.470558" />
+ <linearGradient
+ id="linearGradient7505-8"
+ gradientUnits="userSpaceOnUse"
+ y2="144.12111"
+ x2="603.7171"
+ xlink:href="#linearGradient6414-6"
+ y1="140.36218"
+ x1="603.25" />
+ <linearGradient
+ id="linearGradient7503-7"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566-4"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7501-9"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7499-6"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient10554-6"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.527008"
+ x1="48.126881" />
+ <linearGradient
+ id="linearGradient7497-2"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566-4"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7495-1"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7493-4"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669-9"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7491-6"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677-6"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7489-5"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="50.84045"
+ x1="16.030468" />
+ <linearGradient
+ id="linearGradient7487-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.722939"
+ x2="20.776503"
+ xlink:href="#linearGradient5573-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="46.597134"
+ x1="27.247866" />
+ <linearGradient
+ id="linearGradient7485-8"
+ gradientUnits="userSpaceOnUse"
+ y2="37.98819"
+ x2="17.47529"
+ xlink:href="#linearGradient7808-73"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="27.37009"
+ x1="37.260498" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7483-3"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7481-0"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7479-3"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ y1="36.17104"
+ x1="53.072731" />
+ <linearGradient
+ id="linearGradient7477-2"
+ gradientUnits="userSpaceOnUse"
+ y2="35.376236"
+ x2="44.599358"
+ xlink:href="#linearGradient6478-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ y1="36.09766"
+ x1="41.126476" />
+ <linearGradient
+ id="linearGradient7475-9"
+ gradientUnits="userSpaceOnUse"
+ y2="141.11491"
+ x2="603.48352"
+ xlink:href="#linearGradient6414-6"
+ gradientTransform="translate(0,-29.000003)"
+ y1="145.48944"
+ x1="603.48352" />
+ <linearGradient
+ id="linearGradient7473-9"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6398-1"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7471-3"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7469-0"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6414-6"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7467-8"
+ gradientUnits="userSpaceOnUse"
+ y2="30.0221"
+ x2="42.382099"
+ xlink:href="#linearGradient5685-2"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ y1="42.648251"
+ x1="42.074207" />
+ <linearGradient
+ id="linearGradient7465-8"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566-4"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7463-1"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7461-5"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669-9"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7459-4"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677-6"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7457-1"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="51.641129"
+ x1="17.246363" />
+ <linearGradient
+ id="linearGradient7455-8"
+ gradientUnits="userSpaceOnUse"
+ y2="30.312105"
+ x2="34.585835"
+ xlink:href="#linearGradient5573-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="44.46735"
+ x1="21.322929" />
+ <linearGradient
+ id="linearGradient7453-3"
+ gradientUnits="userSpaceOnUse"
+ y2="19.512289"
+ x2="46.277946"
+ xlink:href="#linearGradient7576-0"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="49.1087"
+ x1="33.149971" />
+ <linearGradient
+ id="linearGradient6398-1">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400-1" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6392-5"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <mask
+ id="mask7570-0">
+ <rect
+ style="fill:url(#linearGradient7574-5);fill-opacity:1"
+ id="rect7572-0"
+ width="86"
+ y="60.362179"
+ x="536"
+ height="111" />
+ </mask>
+ <linearGradient
+ id="linearGradient7574-5"
+ gradientUnits="userSpaceOnUse"
+ y2="460.97229"
+ x2="596.48529"
+ xlink:href="#linearGradient8481-9"
+ gradientTransform="translate(0,-337)"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8483-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop8485-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-0">
+ <stop
+ offset="0"
+ style="stop-color:#898989;stop-opacity:1"
+ id="stop7578-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7580-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-8">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-03" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-8">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5567-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5569-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5679-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5681-0" />
+ </linearGradient>
+ <filter
+ id="filter8351-57">
+ <feGaussianBlur
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5671-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5673-70" />
+ </linearGradient>
+ <filter
+ height="1.0124482"
+ id="filter8323-9"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496">
+ <feGaussianBlur
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-1"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ id="filter10486-7">
+ <feGaussianBlur
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-4">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop10568-4" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop10570-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-2">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5687-0" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5689-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6416-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6418-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-8">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop6480-22" />
+ <stop
+ offset="1"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ id="stop6482-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7361-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7363-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-73">
+ <stop
+ offset="0"
+ style="stop-color:#ababab;stop-opacity:1"
+ id="stop7810-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7812-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-6">
+ <stop
+ offset="0"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ id="stop10556-9" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop10558-0" />
+ </linearGradient>
+ <filter
+ id="filter10534-6">
+ <feGaussianBlur
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-3"
+ inkscape:collect="always" />
+ </filter>
+ <mask
+ id="mask7729-0-2">
+ <rect
+ style="fill:url(#linearGradient7733-4-2);fill-opacity:1"
+ id="rect7731-9-3"
+ width="103.35121"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292" />
+ </mask>
+ <linearGradient
+ id="linearGradient7733-4-2"
+ gradientUnits="userSpaceOnUse"
+ y2="595.06226"
+ x2="20.999998"
+ xlink:href="#linearGradient7584-8-6"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584-8-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7586-8-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7588-2-8" />
+ </linearGradient>
+ <filter
+ height="1.4388067"
+ id="filter9847-4-0"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854">
+ <feGaussianBlur
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-5-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5-5">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5807-1-7" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5809-7-5" />
+ </linearGradient>
+ <filter
+ height="1.3127669"
+ id="filter5917-1-7"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309">
+ <feGaussianBlur
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-1-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5-6">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5815-2-6" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ id="stop5817-7-9" />
+ </linearGradient>
+ <filter
+ height="1.233731"
+ id="filter9827-6-8"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729">
+ <feGaussianBlur
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-1-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-35">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop8319-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8321-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4-6">
+ <stop
+ offset="0"
+ style="stop-color:#0093d9;stop-opacity:1"
+ id="stop5559-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5561-3-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2-5">
+ <stop
+ offset="0"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5543-2-3" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ id="stop5545-1-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-6-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ id="stop10496-8-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop10498-5-2" />
+ </linearGradient>
+ <filter
+ id="filter10668-7-9">
+ <feGaussianBlur
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-6-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1-5">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5799-8-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5801-9-1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2-1">
+ <feGaussianBlur
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-7-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5931-9-6">
+ <stop
+ offset="0"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ id="stop5933-5-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5935-4-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3766-2"
+ gradientUnits="userSpaceOnUse"
+ y2="412.13812"
+ x2="252.93071"
+ xlink:href="#linearGradient6075-9"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ y1="411.73941"
+ x1="277.4801" />
+ <linearGradient
+ id="linearGradient3746-5"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <filter
+ height="1.5162802"
+ id="filter3712-0"
+ y="-0.25814009"
+ width="1.2335186"
+ x="-0.11675928">
+ <feGaussianBlur
+ stdDeviation="2.4864777"
+ id="feGaussianBlur3714-7"
+ inkscape:collect="always" />
+ </filter>
+ <radialGradient
+ r="19.990965"
+ id="radialGradient3628-6"
+ fx="31.988766"
+ fy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ cy="61.259193"
+ cx="31.988766"
+ xlink:href="#linearGradient3931-4"
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)" />
+ <radialGradient
+ r="24"
+ id="radialGradient3626-3"
+ fx="948"
+ fy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ cy="209.00021"
+ cx="948"
+ xlink:href="#linearGradient7126-4" />
+ <linearGradient
+ id="linearGradient3624-6"
+ gradientUnits="userSpaceOnUse"
+ y2="41.366924"
+ x2="37.213612"
+ xlink:href="#linearGradient3534-7"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ y1="26.265114"
+ x1="37.213612" />
+ <linearGradient
+ id="linearGradient3622-0"
+ gradientUnits="userSpaceOnUse"
+ y2="39.879005"
+ x2="500.77838"
+ xlink:href="#linearGradient3335-6"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ y1="78.13385"
+ x1="500.77838" />
+ <radialGradient
+ r="20.016653"
+ id="radialGradient3620-3"
+ fx="29.256323"
+ fy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ cy="34.171967"
+ cx="29.256323"
+ xlink:href="#linearGradient7126-4"
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)" />
+ <linearGradient
+ id="linearGradient3618-8"
+ gradientUnits="userSpaceOnUse"
+ y2="151.51437"
+ x2="605.57886"
+ xlink:href="#linearGradient16859-3"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="158.12231"
+ x1="599.39917" />
+ <linearGradient
+ id="linearGradient3616-0"
+ gradientUnits="userSpaceOnUse"
+ y2="170.16"
+ x2="613.84003"
+ xlink:href="#x5002_-6"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="170.77318"
+ x1="600.74371" />
+ <linearGradient
+ id="linearGradient3614-3"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ xlink:href="#x5004_-2"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="156.45"
+ x1="592.20001" />
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576-5"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-0"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient3574-3"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-79"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="linearGradient3570-7"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient2466-5"
+ gradientUnits="userSpaceOnUse"
+ y2="383.08859"
+ x2="246.338"
+ xlink:href="#linearGradient6075-9"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ y1="382.31308"
+ x1="294.08597" />
+ <linearGradient
+ id="linearGradient2462-1"
+ gradientUnits="userSpaceOnUse"
+ y2="371.83398"
+ x2="257.22992"
+ xlink:href="#linearGradient6075-9"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ y1="371.49814"
+ x1="277.90814" />
+ <linearGradient
+ id="linearGradient6596-6"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721-0"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient5934-9"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721-0"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient5932-7"
+ gradientUnits="userSpaceOnUse"
+ y2="311.5975"
+ x2="500.71109"
+ xlink:href="#linearGradient3518-3"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ y1="244.95538"
+ x1="500.71109" />
+ <filter
+ height="1.2029091"
+ id="filter5126-0"
+ y="-0.10145455"
+ x="-0.021882353"
+ width="1.0437647">
+ <feGaussianBlur
+ stdDeviation="1.1579412"
+ id="feGaussianBlur5128-4"
+ inkscape:collect="always" />
+ </filter>
+ <radialGradient
+ r="265"
+ id="radialGradient4153-2"
+ fx="146.23947"
+ fy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ cy="830.26575"
+ cx="146.23947"
+ xlink:href="#linearGradient3987-4-5"
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)" />
+ <linearGradient
+ id="x5004_-2"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ y1="156.45"
+ x1="592.20001">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29157-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29159-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#FFFFFF" />
+ </linearGradient>
+ <linearGradient
+ id="x5002_-6"
+ gradientUnits="userSpaceOnUse"
+ x1="601.48999"
+ x2="613.84003"
+ y1="170.16"
+ y2="170.16">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29134-3" />
+ <stop
+ offset="0.2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29136-4" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop29138-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.20"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#999999" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16859-3"
+ gradientUnits="userSpaceOnUse"
+ x1="592.31"
+ x2="609.32001"
+ y1="162.60001"
+ y2="145.59">
+ <stop
+ offset="0"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ id="stop16861-4" />
+ <stop
+ offset="1"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ id="stop16863-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E5E5E5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126-4">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7128-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7130-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335-6">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3337-2" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ id="stop3339-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3534-7">
+ <stop
+ offset="0"
+ style="stop-color:#888a85;stop-opacity:1"
+ id="stop3536-6" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop3538-0" />
+ </linearGradient>
+ <filter
+ height="1.2617458"
+ id="filter3605-7"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-77"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7484-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-5" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="lg1900-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-9">
+ <path
+ style="opacity:1;fill:#2e3436"
+ id="path17037-3"
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z" />
+ </clipPath>
+ <filter
+ height="1.3295043"
+ id="filter7696-4"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-4"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="XMLID_419_-79"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-8" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7322-0">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-0" />
+ </linearGradient>
+ <filter
+ id="filter3968-3">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931-4">
+ <stop
+ offset="0"
+ style="stop-color:#2e3436;stop-opacity:1"
+ id="stop3933-1" />
+ <stop
+ offset="1"
+ style="stop-color:#2e3436;stop-opacity:0"
+ id="stop3935-3" />
+ </linearGradient>
+ <filter
+ height="1.5828062"
+ id="filter16947-4"
+ y="-0.29140311"
+ x="-0.093153283"
+ width="1.1863066">
+ <feGaussianBlur
+ stdDeviation="1.5518534"
+ id="feGaussianBlur16949-5"
+ inkscape:collect="always" />
+ </filter>
+ <pattern
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)"
+ id="pattern18092-2"
+ xlink:href="#pattern2491-4" />
+ <pattern
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)"
+ id="pattern2491-4"
+ xlink:href="#pattern2509-3" />
+ <pattern
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)"
+ id="pattern2509-3"
+ xlink:href="#pattern6159-8" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)"
+ id="pattern6159-8"
+ xlink:href="#pattern4062-3-5" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)"
+ id="pattern4062-3-5"
+ xlink:href="#pattern4015-1-0" />
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)"
+ id="pattern4015-1-0"
+ xlink:href="#white-spots-2-8" />
+ <pattern
+ height="32"
+ id="white-spots-2-8"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ width="32">
+ <g
+ inkscape:label="#g3035"
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot-3-4">
+ <path
+ style="opacity:0.3;fill:white"
+ id="path3033-3-8"
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z " />
+ </g>
+ </pattern>
+ <linearGradient
+ id="linearGradient3987-4-5">
+ <stop
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ id="stop3989-1-2" />
+ <stop
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ id="stop3991-1-4" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)"
+ id="pattern4156-6"
+ xlink:href="#pattern18092-2" />
+ <filter
+ height="1.8680604"
+ id="filter4009-5"
+ y="-0.43403015"
+ width="1.1872287"
+ x="-0.093614347">
+ <feGaussianBlur
+ stdDeviation="3.9786096"
+ id="feGaussianBlur4011-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3518-3">
+ <stop
+ offset="0"
+ style="stop-color:#000000;stop-opacity:1"
+ id="stop3520-8" />
+ <stop
+ offset="1"
+ style="stop-color:#000000;stop-opacity:0"
+ id="stop3522-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6075-9">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop6077-8" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6079-8" />
+ </linearGradient>
+ <marker
+ style="overflow:visible"
+ id="TriangleInM-1"
+ refY="0"
+ orient="auto"
+ refX="0">
+ <path
+ transform="scale(-0.5,-0.5)"
+ style="fill:#555753"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ id="path4167-8" />
+ </marker>
+ <linearGradient
+ id="linearGradient5721-0">
+ <stop
+ offset="0"
+ style="stop-color:#ac0000;stop-opacity:1"
+ id="stop5723-2" />
+ <stop
+ offset="1"
+ style="stop-color:#f50606;stop-opacity:1"
+ id="stop5725-5" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)"
+ id="pattern18096-5"
+ xlink:href="#pattern4829-6" />
+ <pattern
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)"
+ id="pattern4829-6"
+ xlink:href="#pattern2505-2" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)"
+ id="pattern2505-2"
+ xlink:href="#pattern6248-9" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)"
+ id="pattern6248-9"
+ xlink:href="#pattern3587-1" />
+ <pattern
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)"
+ id="pattern3587-1"
+ xlink:href="#pattern4704-5" />
+ <pattern
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)"
+ id="pattern4704-5"
+ xlink:href="#pattern4396-6" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)"
+ id="pattern4396-6"
+ xlink:href="#pattern4315-7" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)"
+ id="pattern4315-7"
+ xlink:href="#pattern4038-8" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)"
+ id="pattern4038-8"
+ xlink:href="#black-spots-2" />
+ <pattern
+ height="32"
+ id="black-spots-2"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ width="32">
+ <g
+ inkscape:label="#g3039"
+ transform="translate(-448.3997,-513.505)"
+ id="black-spot-2">
+ <path
+ style="opacity:0.1;fill:black"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path2961-7" />
+ </g>
+ </pattern>
+ <radialGradient
+ r="75"
+ id="radialGradient18146-6"
+ fx="55.217297"
+ fy="846.34479"
+ gradientUnits="userSpaceOnUse"
+ cy="846.42249"
+ cx="99.411484"
+ xlink:href="#linearGradient3579-7"
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)" />
+ <linearGradient
+ id="linearGradient3579-7">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3581-1" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop3583-0" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)"
+ id="pattern7559-5"
+ xlink:href="#pattern18096-5" />
+ <linearGradient
+ id="linearGradient4899-3"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5175-9"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5199-7"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5478-5"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9v-0"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9"
+ id="path10095-5"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-6"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3570-1-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3-8"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient7484-3-8"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-8" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5372-3-3"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1-53"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-1-53"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-6-7">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-1"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-92"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3574-1-5"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7-9"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="XMLID_419_-7-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-0" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-82" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576-6-6"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1-4"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient7322-1-4">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-09" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-7">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4453-3"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4455-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4457-9"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3-8"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient4459-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4461-1" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4463-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4465-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4467-1"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1-53"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4469-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4471-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4473-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath4475-3">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4477-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4479-6"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4481-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4483-6"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7-9"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="linearGradient4485-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4487-8" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4489-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4491-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4493-0"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1-4"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4495-7">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4497-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4499-8" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4501-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4503-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4505-0"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4507-4"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4509-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3-8"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient4511-7"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4513-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4515-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4517-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4519-9"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1-53"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4521-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4523-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4525-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath4527-4">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4529-4"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4531-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4533-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4535-6"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7-9"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="linearGradient4537-1"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4539-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4541-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4543-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4545-9"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1-4"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4547-2">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4549-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4551-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4553-3">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4555-6"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-5-9"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-5-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4-6"
+ id="linearGradient5840-5-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-4-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-75-6" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-9-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0-5"
+ id="linearGradient5842-8-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-0-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-26-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-52-0" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-5-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-8-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-9-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-9-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6-9"
+ id="linearGradient5844-8-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-6-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-3-8" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-00-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-1-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8-7"
+ id="radialGradient5846-3-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-8-7">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-6-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-8-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-8-4">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-2-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5884-9"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5886-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4-6"
+ id="linearGradient5888-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient5890-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5892-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5894-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5896-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0-5"
+ id="linearGradient5898-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5900-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5902-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5904-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath5906-3">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5908-1"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5910-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5912-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6-9"
+ id="linearGradient5914-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient5916-4"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5918-6" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5920-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5922-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8-7"
+ id="radialGradient5924-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5926-3">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5928-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5930-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5932-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5934-5"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5936-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5938-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4-6"
+ id="linearGradient5940-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient5942-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5944-6" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5946-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5948-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0-5"
+ id="linearGradient5950-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5952-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5954-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5956-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath5958-1">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5960-1"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5962-2"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5964-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6-9"
+ id="linearGradient5966-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient5968-5"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5970-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5972-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5974-0" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8-7"
+ id="radialGradient5976-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5978-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5980-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5982-5" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5984-2">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5986-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-3-8"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-9-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3-4"
+ id="linearGradient5230-7-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-3-3-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-1-3" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-7-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-5-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5-3"
+ id="linearGradient5232-2-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-1-5-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-0-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-2-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-6-1-3">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-5-5"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-0-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-3-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7-6"
+ id="linearGradient5234-8-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-7-7-6"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-5-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-3-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-2-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9-3"
+ id="radialGradient5236-4-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-1-9-3">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-0-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-8-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-5-0">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-3-4"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6283-2"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6285-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3-4"
+ id="linearGradient6287-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6289-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6291-6" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6293-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6295-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5-3"
+ id="linearGradient6297-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6299-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6301-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6303-7" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6305-4">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6307-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6309-4"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6311-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7-6"
+ id="linearGradient6313-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6315-8"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6317-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6319-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6321-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9-3"
+ id="radialGradient6323-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6325-2">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6327-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6329-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6331-1">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6333-5"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6335-6"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6337-0"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3-4"
+ id="linearGradient6339-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6341-9"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6343-9" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6345-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6347-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5-3"
+ id="linearGradient6349-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6351-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6353-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6355-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6357-0">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6359-5"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6361-7"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6363-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7-6"
+ id="linearGradient6365-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6367-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6369-4" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6371-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6373-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9-3"
+ id="radialGradient6375-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6377-0">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6379-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6381-4" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6383-7">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6385-1"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-4-1"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-7-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2-1"
+ id="linearGradient5840-2-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-2-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-9-5" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-6-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-4-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9-5"
+ id="linearGradient5842-2-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-9-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-28-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-50-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-4-6">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-6-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-1-2"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-2-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67-9"
+ id="linearGradient5844-1-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-67-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-2-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-8-7" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10-8"
+ id="radialGradient5846-6-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-10-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-9-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-82-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-5-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-0-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6829-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6831-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2-1"
+ id="linearGradient6833-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6835-7"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6837-7" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6839-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6841-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9-5"
+ id="linearGradient6843-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6845-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6847-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6849-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6851-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6853-0"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6855-6"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6857-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67-9"
+ id="linearGradient6859-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6861-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6863-5" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6865-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6867-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10-8"
+ id="radialGradient6869-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6871-5">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6873-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6875-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6877-8">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6879-9"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6881-1"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6883-4"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2-1"
+ id="linearGradient6885-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6887-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6889-1" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6891-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6893-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9-5"
+ id="linearGradient6895-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6897-7"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6899-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6901-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6903-7">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6905-9"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6907-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6909-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67-9"
+ id="linearGradient6911-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6913-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6915-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6917-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6919-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10-8"
+ id="radialGradient6921-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6923-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6925-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6927-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6929-0">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6931-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-4-7"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-8-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37-4"
+ id="linearGradient7248-6-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-3-37-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-2-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-4-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-50-0" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3-8"
+ id="linearGradient7250-5-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-1-3-8"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-8-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-5-7" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-6-6-8">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-7-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-9-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-5-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71-8"
+ id="linearGradient7252-2-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-7-71-8"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-1-7" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-8-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-5-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0-6"
+ id="radialGradient7254-1-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-1-0-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-4-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-4-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-9-9">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-33-6"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7313-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7315-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37-4"
+ id="linearGradient7317-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7319-8"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7321-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7323-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7325-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3-8"
+ id="linearGradient7327-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7329-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7331-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7333-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath7335-2">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7337-8"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7339-3"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7341-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71-8"
+ id="linearGradient7343-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient7345-5"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7347-3" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7349-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7351-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0-6"
+ id="radialGradient7353-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7355-5">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7357-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7359-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7361-7">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7363-1"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7365-1"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7367-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37-4"
+ id="linearGradient7369-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7371-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7373-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7375-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7377-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3-8"
+ id="linearGradient7379-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7381-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7383-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7385-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath7387-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7389-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7391-2"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7393-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71-8"
+ id="linearGradient7395-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient7397-5"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7399-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7401-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7403-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0-6"
+ id="radialGradient7405-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7407-7">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7409-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7411-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7413-9">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7415-7"
+ inkscape:collect="always" />
+ </filter>
+ <marker
+ style="overflow:visible"
+ id="Arrow2MstartB-8"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9004-1"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendI-6"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9007-7"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS2-1"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS2">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9797-8" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSJ-9"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSJ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9794-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSf-0"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSf">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9791-1" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSE-9"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSE">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9788-4" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSG-0"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSG">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9785-9" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSg-4"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSg">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9782-5" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS7-5"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS7">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9779-3" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSQ-9"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSQ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9776-6" />
+ </marker>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-1-2"
+ id="linearGradient7574-6-7-3"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-3-1-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-3-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-7-7" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1-4-2-9"
+ xlink:href="#linearGradient4584-7-8-5-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-7-8-5-5">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0-9-4-0" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4-6-0-7" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8-1-4-4"
+ xlink:href="#linearGradient4584-70-8-6-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-70-8-6-2">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3-8-9-8" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0-3-2-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-2">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-7" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-07" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-4"
+ xlink:href="#linearGradient4584-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <mask
+ id="mask4631-8-4">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ style="fill:url(#linearGradient4635-4);fill-opacity:1"
+ id="path4633-3-1" />
+ </mask>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4-7">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7-3"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554-1-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7-13" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4-10">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9-9">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0-3"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5-0">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5-1"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7-4" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5-5">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2-4"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677-53-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1-94" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3-88" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481-3-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-74" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-3"
+ id="linearGradient7574-6-3"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <mask
+ id="mask7570-2-5">
+ <rect
+ style="fill:url(#linearGradient7574-6-3);fill-opacity:1"
+ id="rect7572-2-47"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <linearGradient
+ id="linearGradient7359-4-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-5">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-7" />
+ </filter>
+ <linearGradient
+ id="linearGradient5931-05">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5813-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-7">
+ <feGaussianBlur
+ id="feGaussianBlur8393-8"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-61">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-28">
+ <feGaussianBlur
+ id="feGaussianBlur10670-3"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-07">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-55" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-23">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-50" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-41">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-36" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317-3-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-8" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-0">
+ <feGaussianBlur
+ id="feGaussianBlur9829-0"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-37">
+ <feGaussianBlur
+ id="feGaussianBlur5919-81"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-5" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-6">
+ <feGaussianBlur
+ id="feGaussianBlur9849-6"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-39" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-3"
+ id="linearGradient7733-1"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-8">
+ <rect
+ style="fill:url(#linearGradient7733-1);fill-opacity:1"
+ id="rect7731-8"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ id="linearGradient4584-70-4">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3-4" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0-7" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8-1"
+ xlink:href="#linearGradient4584-70-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <mask
+ id="mask4631-7-7">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-8-1);fill-opacity:1"
+ id="path4633-8-6" />
+ </mask>
+ <linearGradient
+ id="linearGradient4584-7-6">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0-8" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4-6" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1-1"
+ xlink:href="#linearGradient4584-7-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <mask
+ id="mask4631-76">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-1-1);fill-opacity:1"
+ id="path4633-7" />
+ </mask>
+ <pattern
+ patternUnits="userSpaceOnUse"
+ width="32"
+ height="32"
+ id="white-spots-21"
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)">
+ <g
+ inkscape:label="#g3035"
+ id="white-spot-2"
+ transform="translate(-484.3997,-513.505)">
+ <path
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ id="path3033-0"
+ style="opacity:0.25;fill:white" />
+ </g>
+ </pattern>
+ <linearGradient
+ id="linearGradient3987-49">
+ <stop
+ id="stop3989-5"
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0;" />
+ <stop
+ id="stop3991-0"
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1;" />
+ </linearGradient>
+ <marker
+ inkscape:stockid="TriangleOutM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutM-0"
+ style="overflow:visible">
+ <path
+ id="path18351-1"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient6624"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient6626"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6628"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient6630"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient6632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6634"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient6636"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient6638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient6640"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6642"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient6644"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient6646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient6648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6650"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6652"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient6656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient6658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6660"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient6662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient6664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6666"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient6668"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient6670"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6672"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient6674"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient6676"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient6678"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6680"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6682"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6684"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6686"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6688"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient6690"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient6692"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient6694"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient6696"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient6698"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient6700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient6702"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient6704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient6706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient6708"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient6710"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient6712"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient6714"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient6716"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient6718"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient6720"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient6722"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient6724"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient6726"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title />
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <rect
+ y="85.767029"
+ x="-55.645996"
+ height="197.38618"
+ width="410.38617"
+ id="rect23486-9"
+ style="fill:url(#pattern6964);fill-opacity:1;stroke:#000000;stroke-width:4;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.72123892;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect7100"
+ width="405"
+ height="192"
+ x="-53.645996"
+ y="89.153214" />
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314"
+ y="5244.3931"
+ x="4432.2417"
+ ry="24.171429"
+ rx="60.428574"
+ height="24.171429"
+ width="0" />
+ <g
+ id="g8484-6"
+ transform="translate(5731.7105,647.6564)" />
+ <g
+ style="fill:#ffffff"
+ id="g6374-4"
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)" />
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-1"
+ y="672.71167"
+ x="5640.6602"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ id="g4596-3"
+ mask="url(#mask4631-8)"
+ style="opacity:0.30729232"
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)" />
+ <g
+ id="g3002-33"
+ transform="translate(5456.1995,2052.0684)" />
+ <g
+ id="g4898-8"
+ transform="translate(5291.6877,1428.7067)">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ id="g3002-4"
+ transform="translate(6200.2995,1255.4254)" />
+ <g
+ id="g4898-9"
+ transform="translate(6035.7875,632.0634)">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ x="5721.2646"
+ y="1713.0334"
+ id="text19594"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="5721.2646"
+ y="1713.0334"
+ id="tspan19596" /></text>
+ <g
+ id="g3002-3"
+ transform="translate(6137.2995,1486.4253)" />
+ <g
+ id="g4898-2"
+ transform="translate(5972.7875,863.0634)">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ id="g21694"
+ transform="translate(5002.2995,1054.4254)">
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text21702"
+ y="658.60797"
+ x="321.965"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan21704"
+ y="658.60797"
+ x="321.965" /></text>
+ </g>
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-3"
+ y="1739.5555"
+ x="6394.4658"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ transform="translate(539.98213,665.63497)"
+ id="g3002-35" />
+ <g
+ transform="translate(375.47031,42.27285)"
+ id="g4898-37">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ transform="translate(321.48515,123.56711)"
+ id="g3002-4-44" />
+ <g
+ transform="translate(156.97333,-499.79501)"
+ id="g4898-3">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ transform="translate(4.49242,441.24827)"
+ id="g9694" />
+ <g
+ transform="translate(-160.01938,-182.11385)"
+ id="g9696">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ transform="translate(531.70846,712.31515)"
+ id="g11586" />
+ <g
+ transform="translate(367.19664,88.95298)"
+ id="g11591">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ transform="translate(945.16259,126.17676)"
+ id="g13960" />
+ <g
+ transform="translate(780.65077,-497.18536)"
+ id="g13962">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ id="g6425"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ style="fill:#5c3566" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ x="902.75421"
+ y="196.70628"
+ id="text13535"><tspan
+ sodipodi:role="line"
+ id="tspan13537"
+ x="902.75421"
+ y="196.70628" /></text>
+ <g
+ id="g4113"
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)" />
+ <g
+ id="g6262"
+ transform="translate(-2126.5044,28.9977)" />
+ <g
+ id="g22104"
+ transform="matrix(1.1226825,0,0,0.96774932,-69.33824,87.61629)">
+ <g
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)"
+ id="g22106">
+ <g
+ style="opacity:0.53157899"
+ id="g22108"
+ mask="url(#mask7570-2)"
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)">
+ <path
+ style="fill:url(#linearGradient6624);fill-opacity:1"
+ id="path22110"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6626);fill-opacity:1"
+ id="path22112"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6628);fill-opacity:1"
+ id="path22114"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6630);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path22116"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6632);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path22118"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22120"
+ transform="translate(0,41.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient6634);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path22122"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6636);fill-opacity:1"
+ id="path22124"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient6638);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22126"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22128"
+ transform="translate(0,31)">
+ <path
+ style="fill:url(#linearGradient6640);fill-opacity:1;stroke:url(#linearGradient6642);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22130"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6644);fill-opacity:1"
+ id="path22132"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient6646);fill-opacity:1;stroke:url(#linearGradient6648);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path22134"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient6650);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22136"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22138"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient6652);fill-opacity:1"
+ id="path22140"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient6654);fill-opacity:1"
+ id="path22142"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <g
+ id="g22144"
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)">
+ <path
+ style="fill:url(#linearGradient6656);fill-opacity:1"
+ id="path22146"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6658);fill-opacity:1"
+ id="path22148"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6660);fill-opacity:1"
+ id="path22150"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6662);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path22152"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6664);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path22154"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22156"
+ transform="translate(0,10.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient6666);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path22158"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6668);fill-opacity:1"
+ id="path22160"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient6670);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22162"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22164">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient6672);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path22166"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6674);fill-opacity:1"
+ id="path22168"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient6676);fill-opacity:1;stroke:url(#linearGradient6678);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path22170"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6680);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)"
+ id="path22172"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22174"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient6682);fill-opacity:1"
+ id="path22176"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient6684);fill-opacity:1"
+ id="path22178"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ id="g22180"
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient6686);fill-opacity:1"
+ id="path22182"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient6688);fill-opacity:1"
+ id="path22184"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path22326"
+ d="m 60.84232,150.30666 148.0537,-1"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)" />
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,18.98149,-172.92372)"
+ id="g22328"
+ style="display:inline">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729-5)"
+ id="g22330"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22332"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22334"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22336"
+ style="fill:url(#linearGradient6690);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22338"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path22340"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22342"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22344"
+ style="fill:url(#linearGradient6692)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22346"
+ style="fill:url(#linearGradient6694);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22348"
+ style="fill:url(#linearGradient6696);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22350"
+ style="opacity:0.62254902;fill:url(#radialGradient6698);fill-opacity:1;stroke:url(#radialGradient6700);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22352"
+ style="fill:url(#linearGradient6702);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g22354">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22356"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22358"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22360"
+ style="fill:url(#linearGradient6704);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22362"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path22364"
+ style="fill:url(#linearGradient6706);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22366"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22368"
+ style="fill:url(#linearGradient6708)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22370"
+ style="fill:url(#linearGradient6710);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22372"
+ style="fill:url(#linearGradient6712);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22374"
+ style="opacity:0.96825412;fill:url(#radialGradient6714);fill-opacity:1;stroke:url(#radialGradient6716);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22376"
+ style="fill:url(#linearGradient6718);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path22378"
+ style="opacity:0.71957703;fill:url(#radialGradient6720);fill-opacity:1;stroke:url(#radialGradient6722);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g22380">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22382"
+ style="opacity:0.680851;fill:url(#radialGradient6724);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22384"
+ style="fill:url(#radialGradient6726);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="222.54712"
+ y="122.30667"
+ id="text22386"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22388"
+ x="222.54712"
+ y="122.30667"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">pam_krb5</tspan><tspan
+ sodipodi:role="line"
+ x="222.54712"
+ y="136.70667"
+ id="tspan22390"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">nss_ldap</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ x="89.547119"
+ y="171.30667"
+ id="text22394"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ x="89.547119"
+ y="171.30667"
+ id="tspan22398"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">client connects</tspan><tspan
+ sodipodi:role="line"
+ x="89.547119"
+ y="183.90668"
+ id="tspan22400"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">for authentication</tspan><tspan
+ id="tspan4514"
+ sodipodi:role="line"
+ x="89.547119"
+ y="196.50667"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">& proceeds</tspan><tspan
+ id="tspan4516"
+ sodipodi:role="line"
+ x="89.547119"
+ y="209.10667"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">with its request</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="-44.452881"
+ y="180.30667"
+ id="text22422"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22424"
+ x="-44.452881"
+ y="180.30667"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">client</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="296.96118"
+ y="182.19727"
+ id="text22426"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22428"
+ x="296.96118"
+ y="182.19727"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">IPA</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text4784"
+ y="137.30667"
+ x="52.547119"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ xml:space="preserve"><tspan
+ style="font-size:20px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="137.30667"
+ x="52.547119"
+ id="tspan4786"
+ sodipodi:role="line">LDAP + Kerberos</tspan></text>
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="3570.7417"
+ y="5015.5464"
+ id="rect5314-0"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(4870.2105,418.80986)"
+ id="g8484-6-0" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,4672.3055,531.12986)"
+ id="g6374-4-8"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="4779.1602"
+ y="443.86514"
+ id="rect5314-1-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,4650.3225,1383.1399)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8-4)"
+ id="g4596-3-7" />
+ <g
+ transform="translate(4594.6995,1823.2219)"
+ id="g3002-33-9" />
+ <g
+ transform="translate(4430.1877,1199.8602)"
+ id="g4898-8-6">
+ <g
+ id="g4900-92">
+ <g
+ id="g4902-15" />
+ </g>
+ </g>
+ <g
+ transform="translate(5338.7995,1026.5789)"
+ id="g3002-4-2" />
+ <g
+ transform="translate(5174.2875,403.21686)"
+ id="g4898-9-4">
+ <g
+ id="g4900-9-8">
+ <g
+ id="g4902-1-3" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594-8"
+ y="1484.1869"
+ x="4859.7646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596-4"
+ y="1484.1869"
+ x="4859.7646" /></text>
+ <g
+ transform="translate(5275.7995,1257.5788)"
+ id="g3002-3-3" />
+ <g
+ transform="translate(5111.2875,634.21686)"
+ id="g4898-2-1">
+ <g
+ id="g4900-7-9">
+ <g
+ id="g4902-8-7" />
+ </g>
+ </g>
+ <g
+ transform="translate(4140.7995,825.57886)"
+ id="g21694-0">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702-2"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704-7" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5532.9658"
+ y="1510.709"
+ id="rect5314-3-9"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g3002-35-9"
+ transform="translate(-321.51783,436.78843)" />
+ <g
+ id="g4898-37-4"
+ transform="translate(-486.02965,-186.57369)">
+ <g
+ id="g4900-5-0">
+ <g
+ id="g4902-5-6" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44-7"
+ transform="translate(-540.01481,-105.27943)" />
+ <g
+ id="g4898-3-9"
+ transform="translate(-704.52663,-728.64155)">
+ <g
+ id="g4900-3-7-7">
+ <g
+ id="g4902-3-9-8" />
+ </g>
+ </g>
+ <g
+ id="g9694-8"
+ transform="translate(-857.00754,212.40173)" />
+ <g
+ id="g9696-3"
+ transform="translate(-1021.5193,-410.96039)">
+ <g
+ id="g9698-6">
+ <g
+ id="g9700-0" />
+ </g>
+ </g>
+ <g
+ id="g11586-8"
+ transform="translate(-329.7915,483.46861)" />
+ <g
+ id="g11591-3"
+ transform="translate(-494.30332,-139.89356)">
+ <g
+ id="g11593-7">
+ <g
+ id="g11595-5" />
+ </g>
+ </g>
+ <g
+ id="g13960-7"
+ transform="translate(83.66263,-102.66978)" />
+ <g
+ id="g13962-3"
+ transform="translate(-80.84919,-726.0319)">
+ <g
+ id="g13964-2">
+ <g
+ id="g13966-3" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,-520.29065,-1241.8593)"
+ id="g6425-3" />
+ <text
+ id="text13535-4"
+ y="-32.140255"
+ x="41.25425"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="-32.140255"
+ x="41.25425"
+ id="tspan13537-5"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-2811.8862,-70.48372)"
+ id="g4113-7" />
+ <g
+ transform="translate(-2988.0044,-199.84884)"
+ id="g6262-2" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text22386-5"
+ y="249.46013"
+ x="220.04715"
+ style="font-size:16px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="249.46013"
+ x="220.04715"
+ id="tspan22388-7"
+ sodipodi:role="line">pam_ldap</tspan><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22390-4"
+ y="263.86014"
+ x="220.04715"
+ sodipodi:role="line">nss_ldap</tspan></text>
+ <rect
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:none;overflow:visible;enable-background:accumulate"
+ id="rect26435-4"
+ width="1620"
+ height="951.42859"
+ x="-1214.0714"
+ y="-207.48439"
+ ry="26.574863"
+ rx="26.574863" />
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)"
+ d="m 60.84232,234.30666 148.0537,-1"
+ id="path6601"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text4784-6"
+ y="256.5332"
+ x="79.26976"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ xml:space="preserve"><tspan
+ style="font-size:20px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="256.5332"
+ x="79.26976"
+ id="tspan4786-3"
+ sodipodi:role="line">LDAP + LDAP</tspan></text>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-ldap.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-ldap.png
new file mode 100644
index 0000000..41d6b7a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-ldap.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-ldap.svg b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-ldap.svg
new file mode 100644
index 0000000..122c66e
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-ldap.svg
@@ -0,0 +1,8315 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-ldap.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-ldap.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="-24.89561"
+ inkscape:cy="153.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient22462"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22464"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22466"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22468"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22470"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22472"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22474"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient22476"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22478"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22480"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient22482"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22484"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22486"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22488"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22490"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22492"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient22494"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22496"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22498"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22500"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22502"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22504"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22506"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient22508"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22510"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22512"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22514"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22516"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22518"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22520"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22522"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22524"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22526"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient22616"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22634"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22636"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22640"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22642"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22644"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient22648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22650"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient22652"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22660"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22666"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22668"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4778"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <g
+ id="g51234">
+ <rect
+ y="75.613564"
+ x="323.85397"
+ height="197.38618"
+ width="410.38617"
+ id="rect23486"
+ style="fill:url(#black-spots);fill-opacity:1.0;stroke:#000000;stroke-width:4;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.72123892;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect6141"
+ width="405"
+ height="192"
+ x="325.85397"
+ y="76.999748" />
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="4432.2417"
+ y="5244.3931"
+ id="rect5314"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(5731.7105,647.6564)"
+ id="g8484-6" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)"
+ id="g6374-4"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5640.6602"
+ y="672.71167"
+ id="rect5314-1"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8)"
+ id="g4596-3" />
+ <g
+ transform="translate(5456.1995,2052.0684)"
+ id="g3002-33" />
+ <g
+ transform="translate(5291.6877,1428.7067)"
+ id="g4898-8">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ transform="translate(6200.2995,1255.4254)"
+ id="g3002-4" />
+ <g
+ transform="translate(6035.7875,632.0634)"
+ id="g4898-9">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594"
+ y="1713.0334"
+ x="5721.2646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596"
+ y="1713.0334"
+ x="5721.2646" /></text>
+ <g
+ transform="translate(6137.2995,1486.4253)"
+ id="g3002-3" />
+ <g
+ transform="translate(5972.7875,863.0634)"
+ id="g4898-2">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ transform="translate(5002.2995,1054.4254)"
+ id="g21694">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="6394.4658"
+ y="1739.5555"
+ id="rect5314-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g3002-35"
+ transform="translate(539.98213,665.63497)" />
+ <g
+ id="g4898-37"
+ transform="translate(375.47031,42.27285)">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44"
+ transform="translate(321.48515,123.56711)" />
+ <g
+ id="g4898-3"
+ transform="translate(156.97333,-499.79501)">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ id="g9694"
+ transform="translate(4.49242,441.24827)" />
+ <g
+ id="g9696"
+ transform="translate(-160.01938,-182.11385)">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ id="g11586"
+ transform="translate(531.70846,712.31515)" />
+ <g
+ id="g11591"
+ transform="translate(367.19664,88.95298)">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ id="g13960"
+ transform="translate(945.16259,126.17676)" />
+ <g
+ id="g13962"
+ transform="translate(780.65077,-497.18536)">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ id="g6425" />
+ <text
+ id="text13535"
+ y="196.70628"
+ x="902.75421"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="196.70628"
+ x="902.75421"
+ id="tspan13537"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)"
+ id="g4113" />
+ <g
+ transform="translate(-2126.5044,28.9977)"
+ id="g6262" />
+ <g
+ transform="matrix(1.1226825,0,0,0.96774932,348.66176,54.61629)"
+ id="g22104">
+ <g
+ id="g22106"
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)">
+ <g
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)"
+ mask="url(#mask7570-2)"
+ id="g22108"
+ style="opacity:0.53157899">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22110"
+ style="fill:url(#linearGradient22462);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22112"
+ style="fill:url(#linearGradient22464);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ id="path22114"
+ style="fill:url(#linearGradient22466);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22116"
+ style="fill:none;stroke:url(#linearGradient22468);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22118"
+ style="fill:none;stroke:url(#linearGradient22470);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,41.25)"
+ id="g22120">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22122"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22472);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22124"
+ style="fill:url(#linearGradient22474);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22126"
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient22476);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="translate(0,31)"
+ id="g22128">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22130"
+ style="fill:url(#linearGradient22478);fill-opacity:1;stroke:url(#linearGradient22480);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22132"
+ style="fill:url(#linearGradient22482);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22134"
+ style="fill:url(#linearGradient22484);fill-opacity:1;stroke:url(#linearGradient22486);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22136"
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient22488);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22138">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22140"
+ style="opacity:0.680851;fill:url(#radialGradient22490);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22142"
+ style="fill:url(#radialGradient22492);fill-opacity:1" />
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)"
+ id="g22144">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22146"
+ style="fill:url(#linearGradient22494);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22148"
+ style="fill:url(#linearGradient22496);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ id="path22150"
+ style="fill:url(#linearGradient22498);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22152"
+ style="fill:none;stroke:url(#linearGradient22500);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22154"
+ style="fill:none;stroke:url(#linearGradient22502);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,10.25)"
+ id="g22156">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22158"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22504);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22160"
+ style="fill:url(#linearGradient22506);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22162"
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient22508);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ id="g22164">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22166"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22510);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22168"
+ style="fill:url(#linearGradient22512);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22170"
+ style="fill:url(#linearGradient22514);fill-opacity:1;stroke:url(#linearGradient22516);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22172"
+ style="fill:none;stroke:url(#linearGradient22518);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22174">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22176"
+ style="opacity:0.680851;fill:url(#radialGradient22520);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22178"
+ style="fill:url(#radialGradient22522);fill-opacity:1" />
+ </g>
+ <g
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)"
+ id="g22180">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22182"
+ style="opacity:0.680851;fill:url(#radialGradient22524);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22184"
+ style="fill:url(#radialGradient22526);fill-opacity:1" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)"
+ d="m 467.84232,166.30666 148.0537,-1"
+ id="path22326"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <g
+ style="display:inline"
+ id="g22328"
+ transform="matrix(-0.6631863,0,0,0.67913371,420.98149,-185.92372)">
+ <g
+ style="opacity:0.15161288"
+ id="g22330"
+ mask="url(#mask7729-5)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22332"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22334"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22632);fill-opacity:1"
+ id="path22336"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22338"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ id="path22340"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22342"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22634)"
+ id="path22344"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22636);fill-opacity:1"
+ id="polygon22346"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22638);fill-opacity:1"
+ id="path22348"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient22640);fill-opacity:1;stroke:url(#radialGradient22642);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22350"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22644);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22352"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g22354"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22356"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22358"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22646);fill-opacity:1"
+ id="path22360"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22362"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22648);fill-opacity:1"
+ id="path22364"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22366"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22650)"
+ id="path22368"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22652);fill-opacity:1"
+ id="polygon22370"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22654);fill-opacity:1"
+ id="path22372"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient22656);fill-opacity:1;stroke:url(#radialGradient22658);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22374"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22660);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22376"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient22662);fill-opacity:1;stroke:url(#radialGradient22664);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ id="path22378"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g22380"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient22666);fill-opacity:1"
+ id="path22382"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient22668);fill-opacity:1"
+ id="path22384"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22386"
+ y="119.30667"
+ x="588.54712"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="119.30667"
+ x="588.54712"
+ id="tspan22388"
+ sodipodi:role="line">pam_ldap</tspan><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22390"
+ y="130.10667"
+ x="588.54712"
+ sodipodi:role="line">nss_ldap</tspan></text>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22394"
+ y="187.30667"
+ x="496.54712"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22398"
+ y="187.30667"
+ x="496.54712"
+ sodipodi:role="line">client connects</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22400"
+ y="199.90668"
+ x="496.54712"
+ sodipodi:role="line">for authentication</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="212.50667"
+ x="496.54712"
+ sodipodi:role="line"
+ id="tspan4514">& proceeds</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="225.10667"
+ x="496.54712"
+ sodipodi:role="line"
+ id="tspan4516">with its request</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22422"
+ y="163.30667"
+ x="358.54712"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="163.30667"
+ x="358.54712"
+ id="tspan22424"
+ sodipodi:role="line">client</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22426"
+ y="217.19727"
+ x="644.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="217.19727"
+ x="644.96118"
+ id="tspan22428"
+ sodipodi:role="line">IPA</tspan></text>
+ <rect
+ style="fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect4788"
+ width="84"
+ height="39"
+ x="336.54712"
+ y="55.30666" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ x="345.54712"
+ y="85.306664"
+ id="text4784"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan4786"
+ x="345.54712"
+ y="85.306664"
+ style="font-size:28px">LDAP</tspan></text>
+ </g>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd.png
new file mode 100644
index 0000000..abf8adf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd.svg b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd.svg
new file mode 100644
index 0000000..faf18bd
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd.svg
@@ -0,0 +1,9976 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-sssd.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-sssd.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="287.10439"
+ inkscape:cy="273.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#black-spots"
+ id="pattern23476"
+ patternTransform="matrix(0.39607708,0,0,0.42550454,617.86712,-146.57274)" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient5370"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient5372"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient5374"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557"
+ id="linearGradient5376"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541"
+ id="radialGradient5378"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient5380"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient5382"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient5384"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813"
+ id="linearGradient5386"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient5388"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931"
+ id="linearGradient5390"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient5392"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient5394"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient5396"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient5398"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient5400"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient5402"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient5404"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient5406"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12740"
+ xlink:href="#linearGradient7576-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12742"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12744"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12746"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12748"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12750"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12752"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12754"
+ xlink:href="#linearGradient5685-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12756"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12758"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12760"
+ xlink:href="#linearGradient6398-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12762"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772"
+ xlink:href="#linearGradient7808-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786"
+ xlink:href="#linearGradient10554-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient21675"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient21677"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient21679"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient21681"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient21683"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient21685"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient21687"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient21689"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient21691"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient21693"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient21695"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient21697"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient21699"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient21701"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient21703"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient21705"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient21707"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient21709"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient21711"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573"
+ id="linearGradient22024"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1"
+ id="linearGradient22024-3"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1-3"
+ id="linearGradient22024-3-6"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient22462"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22464"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22466"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22468"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22470"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22472"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22474"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient22476"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22478"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22480"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient22482"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22484"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22486"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22488"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22490"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22492"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient22494"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22496"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22498"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22500"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22502"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22504"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22506"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient22508"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22510"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22512"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22514"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22516"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22518"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22520"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22522"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22524"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22526"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9"
+ id="linearGradient22528"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22530"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22532"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22534"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22536"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22538"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22540"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1"
+ id="linearGradient22542"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22544"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22546"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1"
+ id="linearGradient22548"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22550"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22552"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22554"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22556"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22558"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8"
+ id="linearGradient22560"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22562"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22564"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22566"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22568"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22570"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22572"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4"
+ id="linearGradient22574"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22576"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22578"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22580"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22582"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22586"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22588"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22590"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22592"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22594"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22596"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22598"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557"
+ id="linearGradient22600"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541"
+ id="radialGradient22602"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22604"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22606"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22608"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813"
+ id="linearGradient22610"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22612"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931"
+ id="linearGradient22614"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient22616"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22618"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22620"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22622"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22624"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22626"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22628"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22630"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22634"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22636"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22640"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22642"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22644"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient22648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22650"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient22652"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22660"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22666"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22668"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573"
+ id="linearGradient22670"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1"
+ id="linearGradient22672"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1-3"
+ id="linearGradient22674"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22750"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22756"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <g
+ id="g51234">
+ <g
+ id="g23480"
+ transform="translate(-372,188)">
+ <rect
+ y="-315.88885"
+ x="500.35156"
+ height="268.39102"
+ width="575.39099"
+ id="rect22758"
+ style="fill:url(#pattern23476);fill-opacity:1;stroke:#000000;stroke-width:3.60897493;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.61946903;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect23478"
+ width="570"
+ height="263"
+ x="502.35156"
+ y="-312.49783" />
+ </g>
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="4432.2417"
+ y="5244.3931"
+ id="rect5314"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(5731.7105,647.6564)"
+ id="g8484-6" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)"
+ id="g6374-4"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5640.6602"
+ y="672.71167"
+ id="rect5314-1"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8)"
+ id="g4596-3" />
+ <g
+ transform="translate(5456.1995,2052.0684)"
+ id="g3002-33" />
+ <g
+ transform="translate(5291.6877,1428.7067)"
+ id="g4898-8">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ transform="translate(6200.2995,1255.4254)"
+ id="g3002-4" />
+ <g
+ transform="translate(6035.7875,632.0634)"
+ id="g4898-9">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594"
+ y="1713.0334"
+ x="5721.2646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596"
+ y="1713.0334"
+ x="5721.2646" /></text>
+ <g
+ transform="translate(6137.2995,1486.4253)"
+ id="g3002-3" />
+ <g
+ transform="translate(5972.7875,863.0634)"
+ id="g4898-2">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ transform="translate(5002.2995,1054.4254)"
+ id="g21694">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="6394.4658"
+ y="1739.5555"
+ id="rect5314-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g9226"
+ transform="matrix(1.1226825,0,0,0.96774932,317.66176,-68.38371)">
+ <g
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)"
+ id="g17509">
+ <g
+ style="opacity:0.53157899"
+ id="g7663"
+ mask="url(#mask7570-2)"
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)">
+ <path
+ style="fill:url(#linearGradient12740);fill-opacity:1"
+ id="path7667"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12742);fill-opacity:1"
+ id="path7669"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12744);fill-opacity:1"
+ id="path7671"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12746);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path7673"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12748);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path7675"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="use7678"
+ transform="translate(0,41.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient12750);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path5196"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12752);fill-opacity:1"
+ id="path5198"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient12754);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7680"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7682"
+ transform="translate(0,31)">
+ <path
+ style="fill:url(#linearGradient12756);fill-opacity:1;stroke:url(#linearGradient12758);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7684"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12760);fill-opacity:1"
+ id="path7686"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient12762);fill-opacity:1;stroke:url(#linearGradient12764);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path7688"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient12766);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7690"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7692"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient12768);fill-opacity:1"
+ id="path7694"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient12770);fill-opacity:1"
+ id="path7696"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <g
+ id="g7698"
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)">
+ <path
+ style="fill:url(#linearGradient12772);fill-opacity:1"
+ id="path7700"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12774);fill-opacity:1"
+ id="path7702"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12776);fill-opacity:1"
+ id="path7704"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12778);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path7706"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12780);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path7708"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="use7710"
+ transform="translate(0,10.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient12782);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path5186"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12784);fill-opacity:1"
+ id="path5188"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient12786);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7712"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7714">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient12788);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path7716"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12790);fill-opacity:1"
+ id="path7718"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient12792);fill-opacity:1;stroke:url(#linearGradient12794);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path7720"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12796);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)"
+ id="path7722"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7724"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient12798);fill-opacity:1"
+ id="path7726"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient12800);fill-opacity:1"
+ id="path7728"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ id="use7730"
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient12802);fill-opacity:1"
+ id="path5236"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient12804);fill-opacity:1"
+ id="path5238"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <g
+ id="g4892"
+ transform="matrix(-0.6631863,0,0,0.67913371,387.88733,-316.95875)">
+ <g
+ style="opacity:0.15161288"
+ id="g4894"
+ mask="url(#mask7729)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ id="path4896"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path4898"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5370);fill-opacity:1"
+ id="path4900"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ id="path4902"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827)"
+ id="path4904"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path4906"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5372)"
+ id="path4908"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient5374);fill-opacity:1"
+ id="polygon4910"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5376);fill-opacity:1"
+ id="path4912"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient5378);fill-opacity:1;stroke:url(#radialGradient5380);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ id="path4914"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5382);fill-opacity:1;filter:url(#filter8391)"
+ id="path4916"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g4918"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ id="path4920"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path4922"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5384);fill-opacity:1"
+ id="path4924"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ id="path4926"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5386);fill-opacity:1"
+ id="path4928"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path4930"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5388)"
+ id="path4932"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient5390);fill-opacity:1"
+ id="polygon4934"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5392);fill-opacity:1"
+ id="path4936"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient5394);fill-opacity:1;stroke:url(#radialGradient5396);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ id="path4938"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5398);fill-opacity:1;filter:url(#filter8391)"
+ id="path4940"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient5400);fill-opacity:1;stroke:url(#radialGradient5402);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106)"
+ id="path4942"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g4944"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient5404);fill-opacity:1"
+ id="path4946"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient5406);fill-opacity:1"
+ id="path4948"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path17982"
+ d="m 253.84232,35.306665 105.0537,-1"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)" />
+ <g
+ id="g3002-35"
+ transform="translate(539.98213,665.63497)" />
+ <g
+ id="g4898-37"
+ transform="translate(375.47031,42.27285)">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44"
+ transform="translate(321.48515,123.56711)" />
+ <g
+ id="g4898-3"
+ transform="translate(156.97333,-499.79501)">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ id="g9694"
+ transform="translate(4.49242,441.24827)" />
+ <g
+ id="g9696"
+ transform="translate(-160.01938,-182.11385)">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ id="g11586"
+ transform="translate(531.70846,712.31515)" />
+ <g
+ id="g11591"
+ transform="translate(367.19664,88.95298)">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ id="g13960"
+ transform="translate(945.16259,126.17676)" />
+ <g
+ id="g13962"
+ transform="translate(780.65077,-497.18536)">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ id="g6425" />
+ <text
+ id="text13535"
+ y="196.70628"
+ x="902.75421"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="196.70628"
+ x="902.75421"
+ id="tspan13537"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)"
+ id="g4113" />
+ <g
+ transform="translate(-2126.5044,28.9977)"
+ id="g6262" />
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,205.98149,-338.92372)"
+ id="g8866-7"
+ style="display:inline">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729-5)"
+ id="g8868-3"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8870-0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path8872-2"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path8874-5"
+ style="fill:url(#linearGradient21675);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8876-0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path8878-7"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path8880-0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path8882-2"
+ style="fill:url(#linearGradient21677)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon8884-7"
+ style="fill:url(#linearGradient21679);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path8886-9"
+ style="fill:url(#linearGradient21681);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path8888-0"
+ style="opacity:0.62254902;fill:url(#radialGradient21683);fill-opacity:1;stroke:url(#radialGradient21685);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8890-0"
+ style="fill:url(#linearGradient21687);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g8892-6">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8894-4"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path8896-1"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path8898-5"
+ style="fill:url(#linearGradient21689);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8900-1"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path8902-2"
+ style="fill:url(#linearGradient21691);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path8904-9"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path8906-7"
+ style="fill:url(#linearGradient21693)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon8908-0"
+ style="fill:url(#linearGradient21695);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path8910-6"
+ style="fill:url(#linearGradient21697);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path8912-3"
+ style="opacity:0.96825412;fill:url(#radialGradient21699);fill-opacity:1;stroke:url(#radialGradient21701);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8914-6"
+ style="fill:url(#linearGradient21703);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path8916-3"
+ style="opacity:0.71957703;fill:url(#radialGradient21705);fill-opacity:1;stroke:url(#radialGradient21707);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g8918-6">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path8920-7"
+ style="opacity:0.680851;fill:url(#radialGradient21709);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path8922-6"
+ style="fill:url(#radialGradient21711);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <g
+ transform="matrix(0.23376094,0,0,0.15766672,1027.4948,-175.19334)"
+ id="g7496-0">
+ <use
+ id="use7494-5"
+ width="1000"
+ transform="translate(0,73)"
+ y="0"
+ xlink:href="#g7452-5"
+ x="0"
+ height="700" />
+ <g
+ transform="matrix(0.8937066,0,0,0.8937066,-85.24089,192.26027)"
+ id="g7452-5">
+ <g
+ transform="matrix(7.659747,0,0,7.659747,-3413.2328,-6201.7396)"
+ id="g7454-3">
+ <g
+ transform="matrix(1.0634304,0,0,1.1520362,59.093881,903.66323)"
+ id="g7456-3">
+ <path
+ inkscape:connector-curvature="0"
+ transform="matrix(0.1373667,0,0,0.1268015,-199.43287,-50.397161)"
+ style="fill:#000000;fill-opacity:1;filter:url(#filter3605-3)"
+ id="path14856-1"
+ d="m 1622.8438,458.84375 c -56.3324,0 -102.0313,23.48139 -102.0313,52.46875 0,0.33975 0.019,0.69303 0.031,1.03125 l -3.5,0 0,42.96875 c -10e-5,29.96809 47.2617,54.25 105.5,54.25 58.2382,2e-5 105.4062,-24.28191 105.4062,-54.25 l 0,-42.96875 -3.5,0 c 0.013,-0.33822 0.031,-0.6915 0.031,-1.03125 10e-5,-28.98736 -45.605,-52.46875 -101.9374,-52.46875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22750)"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7458-2" />
+ <path
+ inkscape:connector-curvature="0"
+ clip-path="url(#clipPath17035-6)"
+ style="fill:url(#linearGradient22752);filter:url(#filter7696-0)"
+ id="path7460-5"
+ d="m 23.078104,27.161102 c 8,0 14.457158,-3.08 14.457158,-6.88 l 0,-5.446791 c -1.375602,3.076004 -8.175744,5.672238 -13.851796,7.231897 0.04822,1.262713 -8.605362,5.094894 -0.605362,5.094894 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22754)"
+ d="m 37.97,14.568887 c 0,3.8 -6.48,6.88 -14.48,6.88 -8,0 -14.49,-3.08 -14.49,-6.88 0,-3.8 6.49,-6.8800005 14.49,-6.8800005 8,0 14.48,3.0800005 14.48,6.8800005 z"
+ id="path7462-7" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.68983956;fill:none;stroke:url(#radialGradient22756);stroke-width:0.57768553;stroke-miterlimit:4;stroke-opacity:1;filter:url(#filter3968-6)"
+ d="m 37.728925,14.725637 c 0,3.705803 -6.319369,6.709453 -14.12106,6.709453 -7.80169,0 -14.1308116,-3.00365 -14.1308116,-6.709453 0,-3.705802 6.3291216,-6.709455 14.1308116,-6.709455 7.801691,0 14.12106,3.003653 14.12106,6.709455 z"
+ id="path7464-2" />
+ </g>
+ </g>
+ </g>
+ <use
+ id="use5130-1"
+ width="1000"
+ transform="translate(0,-79.242113)"
+ y="0"
+ xlink:href="#g7452-5"
+ x="0"
+ height="700" />
+ </g>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="379.54709"
+ y="-69.693336"
+ id="text21713"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan21715"
+ x="379.54709"
+ y="-69.693336"
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">pam_sss</tspan><tspan
+ sodipodi:role="line"
+ x="379.54709"
+ y="-58.893333"
+ id="tspan21717"
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">nss_sss</tspan></text>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path17982-1"
+ d="m 444.43325,43.30666 152.0537,0"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ x="196.5471"
+ y="67.306656"
+ id="text21743"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ id="tspan21745"
+ x="196.5471"
+ y="67.306656"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">client</tspan><tspan
+ sodipodi:role="line"
+ x="196.5471"
+ y="79.906662"
+ id="tspan21747"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">connects to SSSD</tspan><tspan
+ sodipodi:role="line"
+ x="196.5471"
+ y="92.50666"
+ id="tspan21749"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">for authentication</tspan></text>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path17982-1-1"
+ d="m 379.43325,30.30666 c -39.64564,-5.7457 -34.15972,-68.394533 11.0537,-61"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:end;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:end;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="348.31958"
+ y="-65.139046"
+ id="text21743-8"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-65.139046"
+ id="tspan21749-0"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">SSSD checks</tspan><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-52.539047"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21879">IPA for user</tspan><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-39.939045"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21881">& authentication</tspan><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-27.339046"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21883">information</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:start;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:start;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="470.49048"
+ y="64.465256"
+ id="text21743-8-0"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ x="470.49048"
+ y="64.465256"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21883-1">continues with</tspan><tspan
+ sodipodi:role="line"
+ x="470.49048"
+ y="77.065254"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21924">typical directory </tspan><tspan
+ sodipodi:role="line"
+ x="470.49048"
+ y="89.665253"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21926">service request</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="145.5471"
+ y="21.30666"
+ id="text21940"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan21942"
+ x="145.5471"
+ y="21.30666"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">client</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="613.96118"
+ y="94.197281"
+ id="text21940-0"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan21942-9"
+ x="613.96118"
+ y="94.197281"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">IPA</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="408.15646"
+ y="88.197281"
+ id="text21940-1"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ id="tspan21942-3"
+ x="408.15646"
+ y="88.197281"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">SSSD with</tspan><tspan
+ sodipodi:role="line"
+ x="408.15646"
+ y="102.59728"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ id="tspan21974">an LDAP</tspan><tspan
+ sodipodi:role="line"
+ x="408.15646"
+ y="116.99728"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ id="tspan21976">backend</tspan></text>
+ <g
+ id="g22019"
+ transform="translate(-89,379)">
+ <path
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)"
+ d="m 188,-130.55569 a 58.5,59.5 0 1 1 -117,0 58.5,59.5 0 1 1 117,0 z"
+ sodipodi:ry="59.5"
+ sodipodi:rx="58.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:cx="129.5"
+ id="path21986"
+ style="fill:url(#linearGradient22024);fill-opacity:1;stroke:none"
+ sodipodi:type="arc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text21940-3"
+ y="-295.8027"
+ x="260.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="-295.8027"
+ x="260.96118"
+ id="tspan21942-4"
+ sodipodi:role="line">1</tspan></text>
+ </g>
+ <g
+ style="display:inline"
+ id="g22019-3"
+ transform="translate(45.28658,206.71341)">
+ <path
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ sodipodi:ry="59.5"
+ sodipodi:rx="58.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:cx="129.5"
+ id="path21986-4"
+ style="fill:url(#linearGradient22024-3);fill-opacity:1;stroke:none"
+ sodipodi:type="arc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text21940-3-4"
+ y="-295.8027"
+ x="260.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="-295.8027"
+ x="260.96118"
+ id="tspan21942-4-2"
+ sodipodi:role="line">2</tspan></text>
+ </g>
+ <g
+ style="display:inline"
+ id="g22019-3-3"
+ transform="translate(257.28658,323.71341)">
+ <path
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ sodipodi:ry="59.5"
+ sodipodi:rx="58.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:cx="129.5"
+ id="path21986-4-9"
+ style="fill:url(#linearGradient22024-3-6);fill-opacity:1;stroke:none"
+ sodipodi:type="arc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text21940-3-4-3"
+ y="-295.8027"
+ x="260.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="-295.8027"
+ x="260.96118"
+ id="tspan21942-4-2-5"
+ sodipodi:role="line">3</tspan></text>
+ </g>
+ <rect
+ style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect23494"
+ width="173"
+ height="37"
+ x="296"
+ y="-61.055695"
+ transform="translate(217.5471,-83.637645)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ x="514.54712"
+ y="-118.69334"
+ id="text23490"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan23492"
+ x="514.54712"
+ y="-118.69334"
+ style="font-size:28px">SSSD + LDAP</tspan></text>
+ </g>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd2.png
new file mode 100644
index 0000000..a2f8886
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd2.svg b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd2.svg
new file mode 100644
index 0000000..52ce57a
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/migr-sssd2.svg
@@ -0,0 +1,9389 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-sssd2.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-sssd2.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="131.10439"
+ inkscape:cy="153.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#pattern23476"
+ id="pattern5698"
+ patternTransform="matrix(0.39607708,0,0,0.42550454,275.86712,173.42726)" />
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#black-spots"
+ id="pattern23476"
+ patternTransform="matrix(0.39607708,0,0,0.42550454,617.86712,-146.57274)" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient22462"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22464"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22466"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22468"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22470"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22472"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22474"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient22476"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22478"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22480"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient22482"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22484"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22486"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22488"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22490"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22492"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient22494"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22496"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22498"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22500"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22502"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22504"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22506"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient22508"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22510"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22512"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22514"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22516"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22518"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22520"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22522"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22524"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22526"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9"
+ id="linearGradient22528"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22530"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22532"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22534"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22536"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22538"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22540"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1"
+ id="linearGradient22542"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22544"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22546"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1"
+ id="linearGradient22548"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22550"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22552"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22554"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22556"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22558"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8"
+ id="linearGradient22560"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22562"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22564"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22566"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22568"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22570"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22572"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4"
+ id="linearGradient22574"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22576"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22578"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22580"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22582"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22586"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22588"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22590"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22592"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22594"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22596"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22598"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557"
+ id="linearGradient22600"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541"
+ id="radialGradient22602"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22604"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22606"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22608"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813"
+ id="linearGradient22610"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22612"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931"
+ id="linearGradient22614"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient22616"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22618"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22620"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22622"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22624"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22626"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22628"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22630"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22634"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22636"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22640"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22642"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22644"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient22648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22650"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient22652"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22660"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22666"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22668"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573"
+ id="linearGradient22670"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1"
+ id="linearGradient22672"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1-3"
+ id="linearGradient22674"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4778"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <g
+ id="g51234">
+ <rect
+ y="4.111145"
+ x="158.35156"
+ height="268.39102"
+ width="575.39099"
+ id="rect23486"
+ style="fill:url(#pattern5698);fill-opacity:1;stroke:#000000;stroke-width:3.60897493;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.69026549;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect23488"
+ width="570"
+ height="263"
+ x="160.35156"
+ y="7.5021667" />
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="4432.2417"
+ y="5244.3931"
+ id="rect5314"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(5731.7105,647.6564)"
+ id="g8484-6" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)"
+ id="g6374-4"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5640.6602"
+ y="672.71167"
+ id="rect5314-1"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8)"
+ id="g4596-3" />
+ <g
+ transform="translate(5456.1995,2052.0684)"
+ id="g3002-33" />
+ <g
+ transform="translate(5291.6877,1428.7067)"
+ id="g4898-8">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ transform="translate(6200.2995,1255.4254)"
+ id="g3002-4" />
+ <g
+ transform="translate(6035.7875,632.0634)"
+ id="g4898-9">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594"
+ y="1713.0334"
+ x="5721.2646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596"
+ y="1713.0334"
+ x="5721.2646" /></text>
+ <g
+ transform="translate(6137.2995,1486.4253)"
+ id="g3002-3" />
+ <g
+ transform="translate(5972.7875,863.0634)"
+ id="g4898-2">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ transform="translate(5002.2995,1054.4254)"
+ id="g21694">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="6394.4658"
+ y="1739.5555"
+ id="rect5314-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g3002-35"
+ transform="translate(539.98213,665.63497)" />
+ <g
+ id="g4898-37"
+ transform="translate(375.47031,42.27285)">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44"
+ transform="translate(321.48515,123.56711)" />
+ <g
+ id="g4898-3"
+ transform="translate(156.97333,-499.79501)">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ id="g9694"
+ transform="translate(4.49242,441.24827)" />
+ <g
+ id="g9696"
+ transform="translate(-160.01938,-182.11385)">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ id="g11586"
+ transform="translate(531.70846,712.31515)" />
+ <g
+ id="g11591"
+ transform="translate(367.19664,88.95298)">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ id="g13960"
+ transform="translate(945.16259,126.17676)" />
+ <g
+ id="g13962"
+ transform="translate(780.65077,-497.18536)">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ id="g6425" />
+ <text
+ id="text13535"
+ y="196.70628"
+ x="902.75421"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="196.70628"
+ x="902.75421"
+ id="tspan13537"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)"
+ id="g4113" />
+ <g
+ transform="translate(-2126.5044,28.9977)"
+ id="g6262" />
+ <g
+ transform="matrix(1.1226825,0,0,0.96774932,348.66176,54.61629)"
+ id="g22104">
+ <g
+ id="g22106"
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)">
+ <g
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)"
+ mask="url(#mask7570-2)"
+ id="g22108"
+ style="opacity:0.53157899">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22110"
+ style="fill:url(#linearGradient22462);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22112"
+ style="fill:url(#linearGradient22464);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ id="path22114"
+ style="fill:url(#linearGradient22466);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22116"
+ style="fill:none;stroke:url(#linearGradient22468);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22118"
+ style="fill:none;stroke:url(#linearGradient22470);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,41.25)"
+ id="g22120">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22122"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22472);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22124"
+ style="fill:url(#linearGradient22474);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22126"
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient22476);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="translate(0,31)"
+ id="g22128">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22130"
+ style="fill:url(#linearGradient22478);fill-opacity:1;stroke:url(#linearGradient22480);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22132"
+ style="fill:url(#linearGradient22482);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22134"
+ style="fill:url(#linearGradient22484);fill-opacity:1;stroke:url(#linearGradient22486);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22136"
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient22488);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22138">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22140"
+ style="opacity:0.680851;fill:url(#radialGradient22490);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22142"
+ style="fill:url(#radialGradient22492);fill-opacity:1" />
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)"
+ id="g22144">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22146"
+ style="fill:url(#linearGradient22494);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22148"
+ style="fill:url(#linearGradient22496);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ id="path22150"
+ style="fill:url(#linearGradient22498);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22152"
+ style="fill:none;stroke:url(#linearGradient22500);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22154"
+ style="fill:none;stroke:url(#linearGradient22502);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,10.25)"
+ id="g22156">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22158"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22504);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22160"
+ style="fill:url(#linearGradient22506);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22162"
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient22508);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ id="g22164">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22166"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22510);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22168"
+ style="fill:url(#linearGradient22512);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22170"
+ style="fill:url(#linearGradient22514);fill-opacity:1;stroke:url(#linearGradient22516);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22172"
+ style="fill:none;stroke:url(#linearGradient22518);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22174">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22176"
+ style="opacity:0.680851;fill:url(#radialGradient22520);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22178"
+ style="fill:url(#radialGradient22522);fill-opacity:1" />
+ </g>
+ <g
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)"
+ id="g22180">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22182"
+ style="opacity:0.680851;fill:url(#radialGradient22524);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22184"
+ style="fill:url(#radialGradient22526);fill-opacity:1" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <g
+ style="display:inline"
+ transform="matrix(-1.0164499,0,0,0.9032479,758.33167,1.03433)"
+ id="g22186">
+ <g
+ id="g22188"
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)">
+ <g
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)"
+ mask="url(#mask7570-2-4)"
+ id="g22190"
+ style="opacity:0.53157899">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22192"
+ style="fill:url(#linearGradient22528);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22194"
+ style="fill:url(#linearGradient22530);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ id="path22196"
+ style="fill:url(#linearGradient22532);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22198"
+ style="fill:none;stroke:url(#linearGradient22534);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5-6)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22200"
+ style="fill:none;stroke:url(#linearGradient22536);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5-4)" />
+ <g
+ transform="translate(0,41.25)"
+ id="g22202">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22204"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22538);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9-0)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22206"
+ style="fill:url(#linearGradient22540);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22208"
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient22542);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="translate(0,31)"
+ id="g22210">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22212"
+ style="fill:url(#linearGradient22544);fill-opacity:1;stroke:url(#linearGradient22546);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22214"
+ style="fill:url(#linearGradient22548);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22216"
+ style="fill:url(#linearGradient22550);fill-opacity:1;stroke:url(#linearGradient22552);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22218"
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient22554);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22220">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22222"
+ style="opacity:0.680851;fill:url(#radialGradient22556);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22224"
+ style="fill:url(#radialGradient22558);fill-opacity:1" />
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)"
+ id="g22226">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22228"
+ style="fill:url(#linearGradient22560);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22230"
+ style="fill:url(#linearGradient22562);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ id="path22232"
+ style="fill:url(#linearGradient22564);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22234"
+ style="fill:none;stroke:url(#linearGradient22566);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5-6)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22236"
+ style="fill:none;stroke:url(#linearGradient22568);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5-4)" />
+ <g
+ transform="translate(0,10.25)"
+ id="g22238">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22240"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22570);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9-0)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22242"
+ style="fill:url(#linearGradient22572);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22244"
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient22574);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ id="g22246">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22248"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22576);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9-0)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22250"
+ style="fill:url(#linearGradient22578);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22252"
+ style="fill:url(#linearGradient22580);fill-opacity:1;stroke:url(#linearGradient22582);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22254"
+ style="fill:none;stroke:url(#linearGradient22584);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4-3)" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22256">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22258"
+ style="opacity:0.680851;fill:url(#radialGradient22586);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22260"
+ style="fill:url(#radialGradient22588);fill-opacity:1" />
+ </g>
+ <g
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)"
+ id="g22262">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22264"
+ style="opacity:0.680851;fill:url(#radialGradient22590);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22266"
+ style="fill:url(#radialGradient22592);fill-opacity:1" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,418.88733,-193.95875)"
+ id="g22268">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729)"
+ id="g22270"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22272"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22274"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22276"
+ style="fill:url(#linearGradient22594);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22278"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path22280"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22282"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22284"
+ style="fill:url(#linearGradient22596)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22286"
+ style="fill:url(#linearGradient22598);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22288"
+ style="fill:url(#linearGradient22600);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22290"
+ style="opacity:0.62254902;fill:url(#radialGradient22602);fill-opacity:1;stroke:url(#radialGradient22604);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22292"
+ style="fill:url(#linearGradient22606);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g22294">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22296"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22298"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22300"
+ style="fill:url(#linearGradient22608);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22302"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path22304"
+ style="fill:url(#linearGradient22610);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22306"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22308"
+ style="fill:url(#linearGradient22612)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22310"
+ style="fill:url(#linearGradient22614);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22312"
+ style="fill:url(#linearGradient22616);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22314"
+ style="opacity:0.96825412;fill:url(#radialGradient22618);fill-opacity:1;stroke:url(#radialGradient22620);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22316"
+ style="fill:url(#linearGradient22622);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path22318"
+ style="opacity:0.71957703;fill:url(#radialGradient22624);fill-opacity:1;stroke:url(#radialGradient22626);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g22320">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22322"
+ style="opacity:0.680851;fill:url(#radialGradient22628);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22324"
+ style="fill:url(#radialGradient22630);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)"
+ d="m 284.84232,158.30666 105.0537,-1"
+ id="path22326"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <g
+ style="display:inline"
+ id="g22328"
+ transform="matrix(-0.6631863,0,0,0.67913371,236.98149,-215.92372)">
+ <g
+ style="opacity:0.15161288"
+ id="g22330"
+ mask="url(#mask7729-5)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22332"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22334"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22632);fill-opacity:1"
+ id="path22336"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22338"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ id="path22340"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22342"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22634)"
+ id="path22344"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22636);fill-opacity:1"
+ id="polygon22346"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22638);fill-opacity:1"
+ id="path22348"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient22640);fill-opacity:1;stroke:url(#radialGradient22642);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22350"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22644);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22352"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g22354"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22356"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22358"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22646);fill-opacity:1"
+ id="path22360"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22362"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22648);fill-opacity:1"
+ id="path22364"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22366"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22650)"
+ id="path22368"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22652);fill-opacity:1"
+ id="polygon22370"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22654);fill-opacity:1"
+ id="path22372"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient22656);fill-opacity:1;stroke:url(#radialGradient22658);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22374"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22660);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22376"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient22662);fill-opacity:1;stroke:url(#radialGradient22664);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ id="path22378"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g22380"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient22666);fill-opacity:1"
+ id="path22382"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient22668);fill-opacity:1"
+ id="path22384"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22386"
+ y="53.306671"
+ x="410.54709"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="53.306671"
+ x="410.54709"
+ id="tspan22388"
+ sodipodi:role="line">pam_sss</tspan><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22390"
+ y="64.106674"
+ x="410.54709"
+ sodipodi:role="line">nss_sss</tspan></text>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline"
+ d="m 475.43325,166.30666 152.0537,0"
+ id="path22392"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22394"
+ y="190.30667"
+ x="227.5471"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="190.30667"
+ x="227.5471"
+ id="tspan22396"
+ sodipodi:role="line">client</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22398"
+ y="202.90668"
+ x="227.5471"
+ sodipodi:role="line">connects to SSSD</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22400"
+ y="215.50668"
+ x="227.5471"
+ sodipodi:role="line">for authentication</tspan></text>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline"
+ d="m 410.43325,153.30666 c -39.64564,-5.7457 -34.15972,-68.39453 11.0537,-61"
+ id="path22402"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22404"
+ y="57.860947"
+ x="379.31958"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:end;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:end;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22406"
+ y="57.860947"
+ x="379.31958"
+ sodipodi:role="line">SSSD checks</tspan><tspan
+ id="tspan22408"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="70.460953"
+ x="379.31958"
+ sodipodi:role="line">IPA for user</tspan><tspan
+ id="tspan22410"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="83.060944"
+ x="379.31958"
+ sodipodi:role="line">& authentication</tspan><tspan
+ id="tspan22412"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="95.66095"
+ x="379.31958"
+ sodipodi:role="line">information</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="108.26094"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22676">+</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="120.86093"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22678">host-based</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="133.46094"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22680">access</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="146.06094"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22682">control</tspan></text>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22414"
+ y="187.46527"
+ x="501.49048"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:start;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:start;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ id="tspan22416"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="187.46527"
+ x="501.49048"
+ sodipodi:role="line">continues with</tspan><tspan
+ id="tspan22418"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="200.06528"
+ x="501.49048"
+ sodipodi:role="line">typical directory </tspan><tspan
+ id="tspan22420"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="212.66528"
+ x="501.49048"
+ sodipodi:role="line">service request</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22422"
+ y="144.30667"
+ x="176.5471"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="144.30667"
+ x="176.5471"
+ id="tspan22424"
+ sodipodi:role="line">client</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22426"
+ y="217.19727"
+ x="644.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="217.19727"
+ x="644.96118"
+ id="tspan22428"
+ sodipodi:role="line">IPA</tspan></text>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22430"
+ y="211.19727"
+ x="439.15646"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="211.19727"
+ x="439.15646"
+ id="tspan22432"
+ sodipodi:role="line">SSSD with</tspan><tspan
+ id="tspan22434"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="225.59726"
+ x="439.15646"
+ sodipodi:role="line">an IPA</tspan><tspan
+ id="tspan22436"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="239.99725"
+ x="439.15646"
+ sodipodi:role="line">backend</tspan></text>
+ <g
+ transform="translate(-58,502)"
+ id="g22438">
+ <path
+ sodipodi:type="arc"
+ style="fill:url(#linearGradient22670);fill-opacity:1;stroke:none"
+ id="path22440"
+ sodipodi:cx="129.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:rx="58.5"
+ sodipodi:ry="59.5"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="260.96118"
+ y="-295.8027"
+ id="text22442"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22444"
+ x="260.96118"
+ y="-295.8027"
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">1</tspan></text>
+ </g>
+ <g
+ transform="translate(76.28658,329.71341)"
+ id="g22446"
+ style="display:inline">
+ <path
+ sodipodi:type="arc"
+ style="fill:url(#linearGradient22672);fill-opacity:1;stroke:none"
+ id="path22448"
+ sodipodi:cx="129.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:rx="58.5"
+ sodipodi:ry="59.5"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="260.96118"
+ y="-295.8027"
+ id="text22450"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22452"
+ x="260.96118"
+ y="-295.8027"
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">2</tspan></text>
+ </g>
+ <g
+ transform="translate(288.28658,446.71341)"
+ id="g22454"
+ style="display:inline">
+ <path
+ sodipodi:type="arc"
+ style="fill:url(#linearGradient22674);fill-opacity:1;stroke:none"
+ id="path22456"
+ sodipodi:cx="129.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:rx="58.5"
+ sodipodi:ry="59.5"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="260.96118"
+ y="-295.8027"
+ id="text22458"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22460"
+ x="260.96118"
+ y="-295.8027"
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">3</tspan></text>
+ </g>
+ <rect
+ style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect4788"
+ width="155"
+ height="39"
+ x="331"
+ y="69.944305"
+ transform="translate(217.5471,-83.637645)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ x="553.54712"
+ y="13.306661"
+ id="text4784"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan4786"
+ x="553.54712"
+ y="13.306661"
+ style="font-size:28px">SSSD + IPA</tspan></text>
+ </g>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-add.png
new file mode 100644
index 0000000..5125759
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-domain.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-domain.png
new file mode 100644
index 0000000..2a75c8c
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-domain.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-list.png
new file mode 100644
index 0000000..501319b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroup-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroups-menu.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroups-menu.png
new file mode 100644
index 0000000..c92a983
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/netgroups-menu.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/nis-members.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/nis-members.png
new file mode 100644
index 0000000..736f1d9
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/nis-members.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy-global.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy-global.png
new file mode 100644
index 0000000..330648d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy-global.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy-page.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy-page.png
new file mode 100644
index 0000000..317bf91
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy-page.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy1a.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy1a.png
new file mode 100644
index 0000000..41cfaa1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy1a.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy1b.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy1b.png
new file mode 100644
index 0000000..88449b7
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy1b.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy2.png
new file mode 100644
index 0000000..be27e3d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-policy2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-reset1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-reset1.png
new file mode 100644
index 0000000..c69270f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-reset1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-reset2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-reset2.png
new file mode 100644
index 0000000..73f1746
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/pwd-reset2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/rhsm-web-consumer-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/rhsm-web-consumer-add.png
new file mode 100644
index 0000000..3fb9011
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/rhsm-web-consumer-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-add.png
new file mode 100644
index 0000000..373b31b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-list.png
new file mode 100644
index 0000000..4cd7863
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-permission-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-permission-add.png
new file mode 100644
index 0000000..6788192
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-permission-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-permission-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-permission-list.png
new file mode 100644
index 0000000..aa43414
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-permission-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-add.png
new file mode 100644
index 0000000..53056d8
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-addperm.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-addperm.png
new file mode 100644
index 0000000..3a73635
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-addperm.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-addperm2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-addperm2.png
new file mode 100644
index 0000000..fe2bc83
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-addperm2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-list.png
new file mode 100644
index 0000000..ebf2f15
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-priv-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-privadd.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-privadd.png
new file mode 100644
index 0000000..f97b844
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-privadd.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-privlist.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-privlist.png
new file mode 100644
index 0000000..8986891
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-privlist.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-user-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-user-list.png
new file mode 100644
index 0000000..ef95778
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-user-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-users-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-users-add.png
new file mode 100644
index 0000000..6490aad
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/role-users-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-add.png
new file mode 100644
index 0000000..13dfdbd
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-edit.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-edit.png
new file mode 100644
index 0000000..79acadf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-edit.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-list.png
new file mode 100644
index 0000000..9c5dad5
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/selfservice-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/server-config-users.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/server-config-users.png
new file mode 100644
index 0000000..51fd005
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/server-config-users.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/server-config.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/server-config.png
new file mode 100644
index 0000000..8bcde98
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/server-config.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-add1.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-add1.png
new file mode 100644
index 0000000..9a2c840
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-add1.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-add2.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-add2.png
new file mode 100644
index 0000000..9ea203f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-add2.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-cert.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-cert.png
new file mode 100644
index 0000000..4944f87
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/service-cert.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/services-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/services-list.png
new file mode 100644
index 0000000..cd10513
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/services-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmd-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmd-list.png
new file mode 100644
index 0000000..b50aa62
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmd-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmd-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmd-new.png
new file mode 100644
index 0000000..46cc319
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmd-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png
new file mode 100644
index 0000000..da89bb1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-list.png
new file mode 100644
index 0000000..a93e9ac
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-new.png
new file mode 100644
index 0000000..7f25beb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png
new file mode 100644
index 0000000..d0cf030
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-allow-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-allow-add.png
new file mode 100644
index 0000000..3bc23f4
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-allow-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-allow.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-allow.png
new file mode 100644
index 0000000..a6eaa46
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-allow.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-host-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-host-add.png
new file mode 100644
index 0000000..6c95cbf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-host-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-host.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-host.png
new file mode 100644
index 0000000..f227abe
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-host.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-new.png
new file mode 100644
index 0000000..52e270a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-opt-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-opt-new.png
new file mode 100644
index 0000000..3130dd7
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-opt-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-opt.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-opt.png
new file mode 100644
index 0000000..4ddfcc4
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-opt.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-runas-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-runas-add.png
new file mode 100644
index 0000000..c609767
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-runas-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-runas.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-runas.png
new file mode 100644
index 0000000..3116d3b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-runas.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-user-add.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-user-add.png
new file mode 100644
index 0000000..d0f483a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-user-add.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-user.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-user.png
new file mode 100644
index 0000000..32f272e
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rule-user.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rules-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rules-list.png
new file mode 100644
index 0000000..ba69f58
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/sudo-rules-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-full-form.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-full-form.png
new file mode 100644
index 0000000..576f296
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-full-form.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-full-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-full-list.png
new file mode 100644
index 0000000..4410e3a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-full-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-tabs.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-tabs.png
new file mode 100644
index 0000000..724dedf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/ui-tabs.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/undo-button.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/undo-button.png
new file mode 100644
index 0000000..6cab61b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/undo-button.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/update-link.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/update-link.png
new file mode 100644
index 0000000..9ca93ed
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/update-link.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-acctsettings.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-acctsettings.png
new file mode 100644
index 0000000..d8e9411
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-acctsettings.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-addcontact.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-addcontact.png
new file mode 100644
index 0000000..4a5bfe2
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-addcontact.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-additional-attr.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-additional-attr.png
new file mode 100644
index 0000000..cef03d6
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-additional-attr.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-attr.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-attr.png
new file mode 100644
index 0000000..d1b75e1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-attr.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-delete.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-delete.png
new file mode 100644
index 0000000..02a26f8
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-delete.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-list.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-list.png
new file mode 100644
index 0000000..5626398
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-list.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-new.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-new.png
new file mode 100644
index 0000000..2ff6b02
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-new.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-objectclass-change.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-objectclass-change.png
new file mode 100644
index 0000000..27e5f39
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-objectclass-change.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-search.png b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-search.png
new file mode 100644
index 0000000..99786fb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/images/user-search.png differ
diff --git a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/index.html b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/index.html
index c1d2d2b..13f81bb 100644
--- a/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/index.html
+++ b/public_html/en-US/Fedora/15/html-single/FreeIPA_Guide/index.html
@@ -1,16 +1,16 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>FreeIPA: Identity/Policy Management</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><meta name="description" content="Identity and policy management — for both users and machines — is a core function for almost any enterprise environment. IPA provides a way to create an identity domain that allows machines to enroll to a domain and immediately access identity information reuqired for single sign-on and authentication services, as well as policy settings that govern authorization and access. This manual covers all aspects of installing, configuring, and managing IPA domains, including both servers and
clients. This guide is intended for IT and systems administrators." /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>FreeIPA: Identity/Policy Management</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><meta name="description" content="Identity and policy management — for both users and machines — is a core function for almost any enterprise environment. IPA provides a way to create an identity domain that allows machines to enroll to a domain and immediately access identity information reuqired for single sign-on and authentication services, as well as policy settings that govern authorization and access. This manual covers all aspects of installing, configuring, and managing IPA domains, including both servers and
clients. This guide is intended for IT and systems administrators." /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><div xml:lang="en-US" class="book" id="id2985793" lang="en-US"><div class="titlepage"><div><div class="producttitle"><span class="productname">Fedora</span> <span class="productnumber">15</span></div><div><h1 id="id2985793" class="title">FreeIPA: Identity/Policy Management</h1></div><div><h2 class="subtitle">Managing Identity and Authorization Policies for Linux-Based Enterprise Networks</h2></div><p class="edition">Edition 2.1.1</p><div><h3 class="corpauthor">
+ </script></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><div xml:lang="en-US" class="book" id="id1578084" lang="en-US"><div class="titlepage"><div><div class="producttitle" font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><span class="productname">Fedora</span> <span class="productnumber">15</span></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h1 id="id1578084" class="title">FreeIPA: Identity/Policy Manageme
nt</h1></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h2 class="subtitle">Managing Identity and Authorization Policies for Linux-Based Enterprise Networks</h2></div><p class="edition">Edition 2.1.2</p><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h3 class="corpauthor">
<span class="inlinemediaobject"><object data="Common_Content/images/title_logo.svg" type="image/svg+xml"> </object></span>
- </h3></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></h3><code class="email"><a class="email" href="mailto:dlackey at redhat.com">dlackey at redhat.com</a></code></div></div></div><hr /><div><div id="id4474083" class="legalnotice"><h1 class="legalnotice">Legal Notice</h1><div class="para">
+ </h3></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></h3><code class="email"><a class="email" href="mailto:dlackey at redhat.com">dlackey at redhat.com</a></code></div></div></div><hr /><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div id="id827619" class="legalnotice"><h1 class="legalnotice">Legal Notice</h1><div class="para">
Copyright <span class="trademark"></span>© 2011 Red Hat.
</div><div class="para">
The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at <a href="http://creativecommons.org/licenses/by-sa/3.0/">http://creativecommons.org/licenses/by-sa/3.0/</a>. The original authors of this document, and Red Hat, designate the Fedora Project as the "Attribution Party" for purposes of CC-BY-SA. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version.
@@ -23,14 +23,18 @@
</div><div class="para">
<span class="trademark">Linux</span>® is the registered trademark of Linus Torvalds in the United States and other countries.
</div><div class="para">
+ <span class="trademark">Java</span>® is a registered trademark of Oracle and/or its affiliates.
+ </div><div class="para">
+ <span class="trademark">XFS</span>® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries.
+ </div><div class="para">
All other trademarks are the property of their respective owners.
- </div></div></div><div><div class="abstract"><h6>Abstract</h6><div class="para">
+ </div></div></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div class="abstract"><h6>Abstract</h6><div class="para">
Identity and policy management — for both users and machines — is a core function for almost any enterprise environment. IPA provides a way to create an identity domain that allows machines to enroll to a domain and immediately access identity information reuqired for single sign-on and authentication services, as well as policy settings that govern authorization and access. This manual covers all aspects of installing, configuring, and managing IPA domains, including both servers and clients. This guide is intended for IT and systems administrators.
- </div></div></div></div><hr /></div><div class="toc"><dl><dt><span class="preface"><a href="#Preface">Preface</a></span></dt><dd><dl><dt><span class="section"><a href="#audience">1. Audience and Purpose</a></span></dt><dt><span class="section"><a href="#Document_Conventions">2. Examples and Formatting</a></span></dt><dd><dl><dt><span class="section"><a href="#bracketsexamples">2.1. Brackets</a></span></dt><dt><span class="section"><a href="#tool-locations">2.2. Client Tool Information</a></span></dt><dt><span class="section"><a href="#guide-formatting">2.3. Text Formatting and Styles</a></span></dt></dl></dd><dt><span class="section"><a href="#feedback">3. Giving Feedback</a></span></dt><dt><span class="section"><a href="#doc-history">4. Document Change History</a></span></dt></dl></dd><dt><span class="chapter"><a href="#introduction">1. Introduction to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type
of Service</a></span></dt><dd><dl><dt><span class="section"><a href="#ipadefined">1.1.1. A Working Definition for FreeIPA</a></span></dt><dt><span class="section"><a href="#comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-linux-services">1.2. Bringing Linux Services Together</a></span></dt><dd><dl><dt><span class="section"><a href="#Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</a></span></dt><dt><span class="section"><a href="#Directory_Server">1.2.2. Data Storage: 389 Directory Server</a></span></dt><dt><span class="section"><a href="#certificate-services">1.2.3. Authentication: Dogtag Certificate System</a></span></dt><dt><span class="section"><a href="#dns">1.2.4. Server/Client Discovery: DNS</a></span></dt><dt><span class="section"><a href="#NTP">1.2.5. Management: NTP</a></span></dt></dl></dd><dt><span class="section"><a href="#service-interactions">1.3. Relationships Between Serve
rs and Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</a></span></dt><dt><span class="section"><a href="#ipa-clients">1.3.2. About FreeIPA Clients</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#installing-ipa">2. Installing a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</a></span></dt><dt><span class="section"><a href="#Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</a></span></dt><dt><span class="section"><a href="#prerequisites">2.1.3. System Prerequisites</a></span></dt></dl></dd><dt><span class="section"><a href="#Installing_the_IPA_Server_Packages">2.2. Installing the FreeIPA
Server Packages</a></span></dt><dt><span class="section"><a href="#creating-server">2.3. Creating a FreeIPA Server Instance</a></span></dt><dd><dl><dt><span class="section"><a href="#install-command">2.3.1. About ipa-server-install</a></span></dt><dt><span class="section"><a href="#install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</a></span></dt><dt><span class="section"><a href="#install-examples">2.3.3. Examples of Creating the FreeIPA Server</a></span></dt><dt><span class="section"><a href="#troubleshooting-install">2.3.4. Troubleshooting Installation Problems</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_up_IPA_Replicas">2.4. Setting up FreeIPA Replicas</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-replica">2.4.1. Prepping and Installing the Replica Server</a></span></dt><dt><span class="section"><a href="#creating-the-replica">2.4.2. Creating the Replica</a></span></dt><dt><span class="
section"><a href="#troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</a></span></dt></dl></dd><dt><span class="section"><a href="#Uninstalling_IPA_Servers">2.5. Uninstalling FreeIPA Servers and Replicas</a></span></dt></dl></dd><dt><span class="chapter"><a href="#setting-up-clients">3. Setting up Systems as FreeIPA Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#what-happens-clients">3.1. What Happens in Client Setup</a></span></dt><dt><span class="section"><a href="#Installing_the_IPA_Client_on_Linux">3.2. Configuring a Fedora System as a FreeIPA Client</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Solaris">3.3. Configuring a Solaris System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Cl
ient_on_Solaris_9">3.3.2. Configuring Solaris 9</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX">3.4. Configuring an HP-UX System as a FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</a></span></dt><dt><span class="section"><a href="#Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</a></span></dt><dt><span class="section"><a href="#Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuri
ng Access Control</a></span></dt><dt><span class="section"><a href="#hp-test">3.4.7. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_AIX">3.5. Configuring an AIX System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Config
uring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</a></span></dt><dt><span class="section"><a href="#testing-config-on-mac">3.6.5. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#troubleshooting-client-install">3.7. Troubleshooting Client Installations</a></span></dt><dt><span class="section"><a href="#uninstalling-clients">3.8. Uninstalling a FreeIPA Client</a></span></dt></dl></dd><dt><span class="chapter"><a href="#basic-usage">4. Basic Usage</a></span></dt><dd><dl><dt><span class="section"><a href="#running-scripts">4.1. Running FreeIPA Tools</a></span></dt><dt><span class="section"><a href="#logging-
in">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="#checking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="#opening-the-web-ui">4.3. Opening the FreeIPA Web UI</a></span></dt><dt><span class="section"><a href="#config-browser">4.4. Configuring the Browser</a></span></dt><dt><span class="section"><a href="#Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System">4.5. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="#Enabling_UsernamePassword_Authentication_in_Your_Browser">4.6. Ena
bling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="#Troubleshooting-UI">4.7. Troubleshooting UI Connection Problems</a></span></dt></dl></dd><dt><span class="chapter"><a href="#users">5. Identity: Managing Users and User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#managing-users">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="#about-user-entries">5.2.1. About User Entries</a></span></dt><dt><span class="section"><a h
ref="#adding-users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Users-Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_IPA_Users-Specifying_Default_User_Settings">5.3. Specifying Default User Settings</a></span></dt><dd><dl><dt><span class="section"><a href="#config-show">5.3.1. Showing the Settings Configuration</a></span></dt><dt><span class="section"><a href="#adding-custom-objclasses">5.3.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="#search-limits">5.3.3. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="#search-fields">5.3.4. Se
tting Search Attributes</a></span></dt></dl></dd><dt><span class="section"><a href="#changing-pwds">5.4. Changing Passwords</a></span></dt><dt><span class="section"><a href="#user-pwdpolicy">5.5. Defining Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#about-pwd-policy">5.5.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="#viewing-the_Password_Policy">5.5.2. Viewing Password Policies</a></span></dt><dt><span class="section"><a href="#The_IPA_Password_Policy-Editing_the_Password_Policy">5.5.3. Editing the Global Password Policy</a></span></dt><dt><span class="section"><a href="#Setting_Different_Password_Policies_for_Different_User_Groups">5.5.4. Setting Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="#Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies">5.5.5. Setting the Priority of Group Password Policies</a></sp
an></dt><dt><span class="section"><a href="#The_IPA_Password_Policy-Using_SSH_for_Password_Authentication">5.5.6. Enabling a Password Change Dialog</a></span></dt></dl></dd><dt><span class="section"><a href="#user-groups">5.6. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_IPA_Groups-Creating_IPA_Groups">5.6.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="#adding-members">5.6.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Groups-Deleting_IPA_Groups">5.6.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#searching">5.7. Searching for Users and Groups</a></span></dt></dl></dd><dt><span class="chapter"><a href="#kerberos">6. Identity: Managing the Kerberos Domain</a></span></dt><dd><dl><dt><span class="section"><a href="#about-kerberos">6.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href="#about-principal-n
ames">6.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="#about-keytabs">6.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="#kerb-policies">6.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#kerb-policies-global">6.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="#user-ticket-policies">6.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Authentication-Refreshing_Kerberos_Tickets">6.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="#kerberos-pwd-cache">6.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="#removing-keytabs">6.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="#Kerberos_Errors">6.6. Troubleshooting Kerberos Errors</a></span></dt></dl></dd><dt><span class="chapter"><a href=
"#automount">7. Identity: Using Automount</a></span></dt><dd><dl><dt><span class="section"><a href="#about-automount">7.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="#configuring-automount">7.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Automount-Configuring_autofs_on_Linux">7.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="#Configuring_Automount-Solaris_automount">7.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="#adding-locations">7.3. Configuring Locations</a></span></dt><dt><span class="section"><a href="#configuring-maps">7.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Direct_Maps">7.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="#Configuring_Indirect_Maps">7.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="sect
ion"><a href="#importing-maps">7.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#active-directory">8. Identity: Integrating with Microsoft Active Directory</a></span></dt><dd><dl><dt><span class="section"><a href="#about-active-directory">8.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="#about-sync">8.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="#about-sync-schema">8.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="#Windows_Sync-Schema_Differences-users">8.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_up_Active_Directory">8.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="#password-sync">8.3. Exempting Active Directory Users fr
om Password Synchronization</a></span></dt><dt><span class="section"><a href="#managing-sync-agmt">8.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="#exporting-ad-cert">8.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="#Creating_Synchronization_Agreements">8.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Modifying_Synchronization_Agreements">8.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="#changing-subtree">8.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt><span class="section"><a href="#Deleting_Synchronization_Agreements">8.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">8.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="s
ection"><a href="#Configuring_Microsoft_Windows">8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></dd><dt><span class="chapter"><a href="#nis">9. Identity: Integrating with NIS Domains and Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="#about-nis">9.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="#adding-netgroups">9.2. Adding Netgroups</a></span></dt><dt><span class="section"><a href="#Exposing_Automount_Maps_to_NIS_Clients">9.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="#migrating-from-nis">9.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-netgroup-entries">9.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="#nis-migr-exporting-data">9.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#Wo
rking_with_DNS">10. Identity: Managing DNS</a></span></dt><dd><dl><dt><span class="section"><a href="#about-dns">10.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#enabling-dns">10.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#bind-dyndb-ldap-config">10.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="#changing-forwarder">10.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="#finding-dns-zones">10.5. Finding and Displaying DNS Zones</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones">10.6. Adding DNS Zones</a></span></dt><dt><span class="section"><a href="#modifying-dns-zones">10.7. Modifying DNS Zones</a></span></dt><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates">10.8. Enabling Dynamic DNS Updates</a></span></dt><dt><span class="section"><a href="#enabling
-zones">10.9. Enabling and Disabling Zones</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">10.10. Adding Records to DNS Zones</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">10.11. Deleting Records from DNS Zones</a></span></dt><dt><span class="section"><a href="#dns-resolve">10.12. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></dd><dt><span class="chapter"><a href="#hosts">11. Policy: Managing Hosts, Services, and Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="#about-hosts">11.1. About Hosts and Services in FreeIPA</a></span></dt><dt><span class="section"><a href="#adding-host-entry">11.2. Adding Host Entries</a></span></dt><dt><span class="section"><a href="#managing-services">11.3. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-service-entry">11.3.1. Adding and Editing Service E
ntries and Keytabs</a></span></dt><dt><span class="section"><a href="#request-service-service">11.3.2. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">11.3.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a href="#Creating_an_IPA_Service-Using_NSS">11.3.4. Storing Certificates in NSS Databases</a></span></dt></dl></dd><dt><span class="section"><a href="#host-disable">11.4. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="#host-groups">11.5. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-host-groups">11.5.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="#hg-adding-members">11.5.2. Adding Group Members</a></span></dt></dl></dd><dt><span class="section"><a href="#Extending_the_Permissions_of_IPA_Managed_Hosts">11.6. Extending the Permissions of FreeIP
A Managed Hosts</a></span></dt><dd><dl><dt><span class="section"><a href="#Delegating_Service_Management">11.6.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="#Delegating_Host_Management">11.6.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="#accessing-service">11.6.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="#configuring-host-access">11.7. Configuring Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="#HBAC_Service_Groups">11.7.1. Defining Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dt><span class="section"><a href="#hbac-rules">11.7.2. Setting Host-Based Access Control Rules</a></span></dt><dt><span class="section"><a href="#hbac-testing">11.7.3. Testing Host-Based Access Control Rules</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#sudo">12. Policy: Using sudo</a></sp
an></dt><dd><dl><dt><span class="section"><a href="#about-sudo">12.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="#defining-sudocmds">12.2. Setting up sudo Commands and Command Groups</a></span></dt><dt><span class="section"><a href="#defining-sudorules">12.3. Defining sudo Rules</a></span></dt><dt><span class="section"><a href="#example-configuring-sudo">12.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">12.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">12.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#server-config">13. Configuring the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#default.conf">13.1. About default.conf</a></span></dt><dt><span class="se
ction"><a href="#managing-access-to-ipa">13.2. Defining Access Controls within FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#Server_side_Access_Control">13.2.1. Server-side Access Control</a></span></dt><dt><span class="section"><a href="#creating-roles">13.2.2. Creating Roles</a></span></dt><dt><span class="section"><a href="#self-service">13.2.3. Defining Self-Service Settings</a></span></dt></dl></dd><dt><span class="section"><a href="#disabling-anon-binds">13.3. Disabling Anonymous Binds</a></span></dt><dt><span class="section"><a href="#Managing-Unique_UID_and_GID_Attributes">13.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="#id-ranges-at-install">13.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="#Assigning_UIDs_and_GIDs-Adding_New_Ranges">13.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="#Configurin
g_Certificates_and_Certificate_Authorities">13.5. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="#Using_OCSP">13.6. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="#ocsp-interval">13.6.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="#ocsp-location">13.6.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-apache">13.7. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="#ipa-cluster">13.8. Using FreeIPA in a Cluster</a></span></dt><dd><dl><dt><span class="section"><a href="#Implementing_IPA_in_a_Clustered_Environment-Configuring_Kerberos_Credentials_for_a_Clustered_Environment">13.8.1. Configuring Kerberos Credentials for a Clustered Environment</a></span></dt><dt><span class="section"><a href="#Implementing_IPA_in_a_Clustered_Environment-Using_the_Same
_Service_Principal_for_Multiple_Services">13.8.2. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="#logging">13.9. Checking FreeIPA Server Logs</a></span></dt><dt><span class="section"><a href="#dns-multihomed">13.10. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="#promoting-replica">13.11. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dt><span class="section"><a href="#upgrading-server">13.12. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></dd><dt><span class="chapter"><a href="#managing-clients">14. Managing Client Machines in the FreeIPA Domain</a></span></dt><dd><dl><dt><span class="section"><a href="#about-machine-auth">14.1. About Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="#enrolling-machines">14.2. Enrolling Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a h
ref="#Enrollment_with_Separation_of_Duties">14.2.1. Performing a Split Enrollment</a></span></dt><dt><span class="section"><a href="#bulk-enrollment">14.2.2. Performing a Bulk or Kickstart Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="#renaming-machines">14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration</a></span></dt><dt><span class="section"><a href="#manually-unconfig-machines">14.4. Manually Unconfiguring Client Machines</a></span></dt><dt><span class="section"><a href="#Client_Problems">14.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="#certmongerX">14.6. Working with certmonger</a></span></dt><dd><dl><dt><span class="section"><a href="#certmonger-req">14.6.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="#Working_with_certmonger-Using_certmonger_with_NSS">14.6.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="secti
on"><a href="#certmonger-tracking-certs">14.6.3. Tracking Certificates with certmonger</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#Migrating_from_a_Directory_Server_to_IPA">15. Migrating from a Directory Server to IPA</a></span></dt><dd><dl><dt><span class="section"><a href="#Overview-Assumptions">15.1. Understanding Red Hat Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="#Overview-Recommended_Sequence_of_Steps">15.2. Recommended Sequence of Steps</a></span></dt><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">15.3. Performing a Server-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">15.3.1. Step 1: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Co
nfiguration">15.3.2. Step 2: Updating the Client Configuration</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">15.3.3. Step 3: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_4_Migrating_Users">15.3.4. Step 4: Migrating Users</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS">15.3.5. Step 5: Decommission the DS</a></span></dt></dl></dd><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">15.4. Performing a Client-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD">15.4.1. Step 1: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Ph
ase_2_Migrating_Existing_Data_to_IPA">15.4.2. Step 2: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA">15.4.3. Step 3: Migrate SSSD Clients from LDAP to IPA</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients">15.4.4. Step 4: Reconfigure non-SSSD Clients</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server">15.4.5. Step 5: Decommission the Directory Server</a></span></dt></dl></dd></dl></dd><dt><span class="appendix"><a href="#chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions">A. Frequently Asked Questions</a></span></dt><dt><span class="appendix"><a href="#tools-reference">B. FreeIPA Tools Reference</a></span></dt><dd><dl><dt><span class="section"><a href="#special-chars">B.1. Using Special Chara
cters</a></span></dt><dt><span class="section"><a href="#ipa">B.2. ipa</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-location">B.2.1. Location</a></span></dt><dt><span class="section"><a href="#ipa-syntax">B.2.2. Syntax</a></span></dt><dt><span class="section"><a href="#ipa-topics">B.2.3. Help Topics</a></span></dt><dt><span class="section"><a href="#ipa-global-options">B.2.4. Global Options</a></span></dt><dt><span class="section"><a href="#ipa-return-codes">B.2.5. Return Codes</a></span></dt><dt><span class="section"><a href="#ipa-commands">B.2.6. Commands</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-dns">B.3. ipa DNS Commands</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-command-dnszone-add">B.3.1. ipa dnszone-add</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-command-host">B.4. ipa Host Commands</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-host-add">B.4.1. ipa host-add</a></span></d
t></dl></dd><dt><span class="section"><a href="#server-tools">B.5. Server Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-replica-install">B.5.1. ipa-replica-install</a></span></dt><dt><span class="section"><a href="#ipa-replica-prepare">B.5.2. ipa-replica-prepare</a></span></dt><dt><span class="section"><a href="#ipa-server-install">B.5.3. ipa-server-install</a></span></dt></dl></dd><dt><span class="section"><a href="#client-tools">B.6. Client Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-client-install">B.6.1. ipa-client-install</a></span></dt></dl></dd></dl></dd><dt><span class="glossary"><a href="#Glossary">Glossary</a></span></dt><dt><span class="index"><a href="#id3358772">Index</a></span></dt></dl></div><div xml:lang="en-US" class="preface" id="Preface" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Preface</h1></div></div></div><div class="para">
+ </div></div></div></div><hr /></div><div class="toc"><dl><dt><span class="preface"><a href="#Preface">Preface</a></span></dt><dd><dl><dt><span class="section"><a href="#audience">1. Audience and Purpose</a></span></dt><dt><span class="section"><a href="#Document_Conventions">2. Examples and Formatting</a></span></dt><dd><dl><dt><span class="section"><a href="#bracketsexamples">2.1. Brackets</a></span></dt><dt><span class="section"><a href="#tool-locations">2.2. Client Tool Information</a></span></dt><dt><span class="section"><a href="#guide-formatting">2.3. Text Formatting and Styles</a></span></dt></dl></dd><dt><span class="section"><a href="#feedback">3. Giving Feedback</a></span></dt><dt><span class="section"><a href="#doc-history">4. Document Change History</a></span></dt></dl></dd><dt><span class="chapter"><a href="#introduction">1. Introduction to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type
of Service</a></span></dt><dd><dl><dt><span class="section"><a href="#ipadefined">1.1.1. A Working Definition for FreeIPA</a></span></dt><dt><span class="section"><a href="#comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-linux-services">1.2. Bringing Linux Services Together</a></span></dt><dd><dl><dt><span class="section"><a href="#Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</a></span></dt><dt><span class="section"><a href="#Directory_Server">1.2.2. Data Storage: 389 Directory Server</a></span></dt><dt><span class="section"><a href="#certificate-services">1.2.3. Authentication: Dogtag Certificate System</a></span></dt><dt><span class="section"><a href="#dns">1.2.4. Server/Client Discovery: DNS</a></span></dt><dt><span class="section"><a href="#NTP">1.2.5. Management: NTP</a></span></dt></dl></dd><dt><span class="section"><a href="#service-interactions">1.3. Relationships Between Serve
rs and Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</a></span></dt><dt><span class="section"><a href="#ipa-clients">1.3.2. About FreeIPA Clients</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#installing-ipa">2. Installing a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</a></span></dt><dt><span class="section"><a href="#Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</a></span></dt><dt><span class="section"><a href="#prerequisites">2.1.3. System Prerequisites</a></span></dt></dl></dd><dt><span class="section"><a href="#Installing_the_IPA_Server_Packages">2.2. Installing the FreeIPA
Server Packages</a></span></dt><dt><span class="section"><a href="#creating-server">2.3. Creating a FreeIPA Server Instance</a></span></dt><dd><dl><dt><span class="section"><a href="#install-command">2.3.1. About ipa-server-install</a></span></dt><dt><span class="section"><a href="#install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</a></span></dt><dt><span class="section"><a href="#install-examples">2.3.3. Examples of Creating the FreeIPA Server</a></span></dt><dt><span class="section"><a href="#troubleshooting-install">2.3.4. Troubleshooting Installation Problems</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_up_IPA_Replicas">2.4. Setting up FreeIPA Replicas</a></span></dt><dd><dl><dt><span class="section"><a href="#installing-replica">2.4.1. Prepping and Installing the Replica Server</a></span></dt><dt><span class="section"><a href="#creating-the-replica">2.4.2. Creating the Replica</a></span></dt><dt><span class="
section"><a href="#troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</a></span></dt></dl></dd><dt><span class="section"><a href="#Uninstalling_IPA_Servers">2.5. Uninstalling FreeIPA Servers and Replicas</a></span></dt></dl></dd><dt><span class="chapter"><a href="#setting-up-clients">3. Setting up Systems as FreeIPA Clients</a></span></dt><dd><dl><dt><span class="section"><a href="#what-happens-clients">3.1. What Happens in Client Setup</a></span></dt><dt><span class="section"><a href="#Installing_the_IPA_Client_on_Linux">3.2. Configuring a Fedora System as a FreeIPA Client</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Solaris">3.3. Configuring a Solaris System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Cl
ient_on_Solaris_9">3.3.2. Configuring Solaris 9</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX">3.4. Configuring an HP-UX System as a FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</a></span></dt><dt><span class="section"><a href="#Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</a></span></dt><dt><span class="section"><a href="#Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuri
ng Access Control</a></span></dt><dt><span class="section"><a href="#hp-test">3.4.7. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_AIX">3.5. Configuring an AIX System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Config
uring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</a></span></dt><dt><span class="section"><a href="#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</a></span></dt><dt><span class="section"><a href="#testing-config-on-mac">3.6.5. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="#troubleshooting-client-install">3.7. Troubleshooting Client Installations</a></span></dt><dt><span class="section"><a href="#uninstalling-clients">3.8. Uninstalling a FreeIPA Client</a></span></dt></dl></dd><dt><span class="chapter"><a href="#basic-usage">4. Basic Usage</a></span></dt><dd><dl><dt><span class="section"><a href="#about-client-tools">4.1. About the FreeIPA Client Tools</a></span></dt><dd><dl><dt><span class="section
"><a href="#about-cli-tools">4.1.1. About the FreeIPA Command-Line Tools</a></span></dt><dt><span class="section"><a href="#ipa-ui">4.1.2. Looking at the FreeIPA UI</a></span></dt></dl></dd><dt><span class="section"><a href="#logging-in">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="#checking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="#using-the-ui">4.3. Using the FreeIPA Web UI</a></span></dt><dd><dl><dt><span class="section"><a href="#opening-the-web-ui">4.3.1. Opening the FreeIPA Web UI</a></span></dt><dt><span class="sectio
n"><a href="#config-browser">4.3.2. Configuring the Browser</a></span></dt><dt><span class="section"><a href="#Using_a_Browser_on_Another_System">4.3.3. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="#Enabling_UsernamePassword_Authentication_in_Your_Browser">4.3.4. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="#Troubleshooting-UI">4.3.5. Troubleshooting UI Connection Problems</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#users">5. Identity: Managing Users and User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="#automou
nting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#managing-users">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="#about-user-entries">5.2.1. About User Entries</a></span></dt><dt><span class="section"><a href="#adding-users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="#Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="#Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="#changing-pwds">5.3. Changing Passwords</a></span></dt><dd><dl><dt><span class="section"><a href="#pwd-reset-ui">5.3.1. From the Web UI</a></span></dt><dt><span class="section"><a href="#pwd-reset-cmd">5.3.2. From the Command Line</a></span></dt></
dl></dd><dt><span class="section"><a href="#Managing-Unique_UID_and_GID_Attributes">5.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="#id-ranges-at-install">5.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="#Assigning_UIDs_and_GIDs-Adding_New_Ranges">5.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="#user-groups">5.5. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_IPA_Groups-Creating_IPA_Groups">5.5.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="#adding-members">5.5.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Groups-Deleting_IPA_Groups">5.5.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#searching">5.6. Searching for Users and Groups</a></span></dt><dd><dl><dt><span class="se
ction"><a href="#user-search-ui">5.6.1. With the UI</a></span></dt><dt><span class="section"><a href="#user-search-cmd">5.6.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_IPA_Users-Specifying_Default_User_Settings">5.7. Specifying Default User and Group Settings</a></span></dt><dd><dl><dt><span class="section"><a href="#config-show">5.7.1. Viewing the Settings Configuration</a></span></dt><dt><span class="section"><a href="#adding-custom-objclasses">5.7.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="#adding-custom-objclasses-groups">5.7.3. Applying Custom Object Classes to New Group Entries</a></span></dt><dt><span class="section"><a href="#search-limits">5.7.4. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="#search-fields">5.7.5. Setting User Search Attributes</a></span></dt><dt><span class="section"><a href="#search-fields-groups">5.7
.6. Setting Group Search Attributes</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#hosts">6. Identity: Managing Hosts and Services</a></span></dt><dd><dl><dt><span class="section"><a href="#about-hosts">6.1. About Hosts, Services, and Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="#adding-host-entry">6.2. Adding Host Entries</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-host-entry-ui">6.2.1. Adding Host Entries from the Web UI</a></span></dt><dt><span class="section"><a href="#adding-host-entry-cmd">6.2.2. Adding Host Entries from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#enrolling-machines">6.3. Enrolling Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a href="#Enrollment_with_Separation_of_Duties">6.3.1. Performing a Split Enrollment</a></span></dt><dt><span class="section"><a href="#bulk-enrollment">6.3.2. Performing a Bulk or Kickstart
Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="#manually-unconfig-machines">6.4. Manually Unconfiguring Client Machines</a></span></dt><dt><span class="section"><a href="#Client_Problems">6.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="#managing-services">6.6. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-service-entry">6.6.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="#request-service-service">6.6.2. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">6.6.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a href="#Creating_an_IPA_Service-Using_NSS">6.6.4. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="#ipa-cluster">6.6.5. Configuring Clustered Services</a>
</span></dt><dt><span class="section"><a href="#Using_the_Same_Service_Principal_for_Multiple_Services">6.6.6. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="#host-disable">6.7. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="#Extending_the_Permissions_of_IPA_Managed_Hosts">6.8. Extending Access Permissions over Other Hosts and Services</a></span></dt><dd><dl><dt><span class="section"><a href="#Delegating_Service_Management">6.8.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="#Delegating_Host_Management">6.8.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="#accessing-service">6.8.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="#renaming-machines">6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration</a></span></dt><dt><span class="section"><a href=
"#host-groups">6.10. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-host-groups">6.10.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="#hg-adding-members">6.10.2. Adding Group Members</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#active-directory">7. Identity: Integrating with Microsoft Active Directory</a></span></dt><dd><dl><dt><span class="section"><a href="#about-active-directory">7.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="#about-sync">7.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="#about-sync-schema">7.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="#Windows_Sync-Schema_Differences-users">7.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a href="#
Setting_up_Active_Directory">7.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="#password-sync">7.3. Exempting Active Directory Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="#managing-sync-agmt">7.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="#exporting-ad-cert">7.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="#Creating_Synchronization_Agreements">7.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Modifying_Synchronization_Agreements">7.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="#changing-subtree">7.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt><span class="section"><a href="#Deleting_Synchronization_Agreements">7.4.5. Deleting Synchronization Agreeme
nts</a></span></dt><dt><span class="section"><a href="#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">7.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Microsoft_Windows">7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></dd><dt><span class="chapter"><a href="#Working_with_DNS">8. Identity: Managing DNS</a></span></dt><dd><dl><dt><span class="section"><a href="#about-dns">8.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#enabling-dns">8.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#bind-dyndb-ldap-config">8.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="#changing-forwarder">8.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones">8.5. Adding DNS Zones</a></span></dt><dd><dl><dt><span
class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones-ui">8.5.1. Adding DNS Zones from the Web UI</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones-cmd">8.5.2. Adding DNS Zones from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#modifying-dns-zones">8.6. Modifying DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#editing-dns-zone-ui">8.6.1. Editing the Zone Configuration in the Web UI</a></span></dt><dt><span class="section"><a href="#editing-dns-zone-cmd">8.6.2. Editing the Zone Configuration in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates">8.7. Enabling Dynamic DNS Updates</a></span></dt><dd><dl><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">8.7.1. Enabling Dynamic DNS Updates in the Web UI</a></span></dt><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynam
ic_DNS_Updates-cmd">8.7.2. Enabling Dynamic DNS Updates in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#enabling-zones">8.8. Enabling and Disabling Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#enabling-zones-ui">8.8.1. Disabling Zones in the Web UI</a></span></dt><dt><span class="section"><a href="#enabling-zones-cmd">8.8.2. Disabling Zones in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">8.9. Adding Records to DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-dns-records-ui">8.9.1. Adding DNS Resource Records from the Web UI</a></span></dt><dt><span class="section"><a href="#adding-dns-records-cmd">8.9.2. Adding DNS Resource Records from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">8.10. Deleting Records from DNS Zones</a></span></dt>
<dd><dl><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui">8.10.1. Deleting Records with the Web UI</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd">8.10.2. Deleting Records with the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#dns-resolve">8.11. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></dd><dt><span class="chapter"><a href="#automount">9. Policy: Using Automount</a></span></dt><dd><dl><dt><span class="section"><a href="#about-automount">9.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="#configuring-automount">9.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Automount-Configuring_autofs_on_Linux">9.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="#Configuring_Automount-Solaris_automount">9.2.2. Configuring Automou
nt on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="#adding-locations">9.3. Configuring Locations</a></span></dt><dd><dl><dt><span class="section"><a href="#configuring-locations-ui">9.3.1. Configuring Locations through the Web UI</a></span></dt><dt><span class="section"><a href="#configuring-locations-cmd">9.3.2. Configuring Locations through the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#configuring-maps">9.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Direct_Maps">9.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="#Configuring_Indirect_Maps">9.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="#importing-maps">9.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#nis">10. Policy: Integrating with NIS Domains and Netgroups</a></span></dt><dd><dl><dt><span class="section
"><a href="#about-nis">10.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="#adding-netgroups">10.2. Creating Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="#add-netgroup">10.2.1. Adding Netgroups</a></span></dt><dt><span class="section"><a href="#add-netgroup-members">10.2.2. Adding Netgroup Members</a></span></dt></dl></dd><dt><span class="section"><a href="#Exposing_Automount_Maps_to_NIS_Clients">10.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="#migrating-from-nis">10.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-netgroup-entries">10.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="#nis-migr-exporting-data">10.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#user-pwdpolicy">11. Policy: Defining Password Policies</a></span></dt
><dd><dl><dt><span class="section"><a href="#about-pwd-policy">11.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="#viewing-the_Password_Policy">11.2. Viewing Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#viewing-global">11.2.1. Viewing the Global Password Policy</a></span></dt><dt><span class="section"><a href="#viewing-group-pwd-policies">11.2.2. Viewing Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="#viewing-pwdpolicy-user">11.2.3. Viewing the Password Policy in Effect for a User</a></span></dt></dl></dd><dt><span class="section"><a href="#The_IPA_Password_Policy-Editing_the_Password_Policy">11.3. Editing the Global Password Policy</a></span></dt><dd><dl><dt><span class="section"><a href="#edit-global-policy-ui">11.3.1. With the UI</a></span></dt><dt><span class="section"><a href="#edit-global-policy-cmd">11.3.2. With the Command Line</a></span></dt></dl></dd>
<dt><span class="section"><a href="#Setting_Different_Password_Policies_for_Different_User_Groups">11.4. Creating Group-Level Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-group-policy-ui">11.4.1. With the Web UI</a></span></dt><dt><span class="section"><a href="#creating-group-policy-cmd">11.4.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_the_Priority_of_Password_Policies">11.5. Changing the Priority of Group Password Policies</a></span></dt><dt><span class="section"><a href="#Setting_Account-lockout_Policies">11.6. Setting Account Lockout Policies</a></span></dt><dt><span class="section"><a href="#Using_SSH_for_Password_Authentication">11.7. Enabling a Password Change Dialog</a></span></dt></dl></dd><dt><span class="chapter"><a href="#kerberos">12. Policy: Managing the Kerberos Domain</a></span></dt><dd><dl><dt><span class="section"><a href="#about-kerberos">12.1. About Kerberos</a></sp
an></dt><dd><dl><dt><span class="section"><a href="#about-principal-names">12.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="#about-keytabs">12.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="#kerb-policies">12.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#kerb-policies-global">12.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="#user-ticket-policies">12.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Authentication-Refreshing_Kerberos_Tickets">12.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="#kerberos-pwd-cache">12.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="#removing-keytabs">12.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="#Kerberos_Errors">12.6. Troubleshooti
ng Kerberos Errors</a></span></dt></dl></dd><dt><span class="chapter"><a href="#sudo">13. Policy: Using sudo</a></span></dt><dd><dl><dt><span class="section"><a href="#about-sudo">13.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="#defining-sudocmds">13.2. Setting up sudo Commands and Command Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-sudo-cmds">13.2.1. Adding sudo Commands</a></span></dt><dt><span class="section"><a href="#adding-sudo-cmdgrp">13.2.2. Adding sudo Command Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#defining-sudorules">13.3. Defining sudo Rules</a></span></dt><dd><dl><dt><span class="section"><a href="#sudo-rules-ui">13.3.1. Defining sudo Rules in the Web UI</a></span></dt><dt><span class="section"><a href="#sudo-rules-cmd">13.3.2. Defining sudo Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#example-configuring-sudo">13.4. An Example of Configu
ring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">13.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">13.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#configuring-host-access">14. Policy: Configuring Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="#about-hbac">14.1. About Host-Based Access Control</a></span></dt><dt><span class="section"><a href="#HBAC_Service_Groups">14.2. Creating Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-hbac-svc">14.2.1. Adding HBAC Services</a></span></dt><dt><span class="section"><a href="#adding-hbac-svcgrp">14.2.2. Adding Service Groups</a></span></dt></dl></dd><dt><span class="section
"><a href="#hbac-rules">14.3. Defining Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="#hbac-rules-ui">14.3.1. Setting Host-Based Access Control Rules in the Web UI</a></span></dt><dt><span class="section"><a href="#hbac-rules-cmd">14.3.2. Setting Host-Based Access Control Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#hbac-testing">14.4. Testing Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="#hbac-limits">14.4.1. The Limits of Host-Based Access Control Configuration</a></span></dt><dt><span class="section"><a href="#hbac-test-examples">14.4.2. Test Scenarios for Host-Based Access Control</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#server-access-controls">15. Configuration: Defining Access Control within FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#about-ipa-access-controls">15.1. About Access Controls f
or FreeIPA Entries</a></span></dt><dt><span class="section"><a href="#self-service">15.2. Defining Self-Service Settings</a></span></dt><dd><dl><dt><span class="section"><a href="#self-service-ui">15.2.1. Creating Self-Service Rules from the Web UI</a></span></dt><dt><span class="section"><a href="#self-service-cli">15.2.2. Creating Self-Service Rules from the Command Line</a></span></dt><dt><span class="section"><a href="#self-service-edit">15.2.3. Editing Self-Service Rules</a></span></dt></dl></dd><dt><span class="section"><a href="#delegating-users">15.3. Delegating Permissions over Users</a></span></dt><dd><dl><dt><span class="section"><a href="#delegating-attributes-ui">15.3.1. Delegating Access to User Groups in the Web UI</a></span></dt><dt><span class="section"><a href="#delegating-attributes-cli">15.3.2. Delegating Access to User Groups in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#defining-roles">15.4. Defining Role-Based Access
Controls</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-roles">15.4.1. Creating Roles</a></span></dt><dt><span class="section"><a href="#creating-perms">15.4.2. Creating New Permissions</a></span></dt><dt><span class="section"><a href="#creating-priv">15.4.3. Creating New Privileges</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#server-config">16. Configuring the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-files">16.1. FreeIPA Files and Logs</a></span></dt><dd><dl><dt><span class="section"><a href="#file-ref">16.1.1. A Reference of FreeIPA Server Configuration Files and Directories</a></span></dt><dt><span class="section"><a href="#default.conf">16.1.2. About default.conf and Context Configuration Files</a></span></dt><dt><span class="section"><a href="#logging">16.1.3. Checking FreeIPA Server Logs</a></span></dt></dl></dd><dt><span class="section"><a href="#disabling-anon-binds">16.2. Disabling A
nonymous Binds</a></span></dt><dt><span class="section"><a href="#Configuring_Certificates_and_Certificate_Authorities">16.3. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="#Using_OCSP">16.4. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="#ocsp-interval">16.4.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="#ocsp-location">16.4.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-apache">16.5. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="#dns-multihomed">16.6. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="#promoting-replica">16.7. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#promoting-pki">16.7.1. Promoting a Replica with a Dogtag Certi
ficate System CA</a></span></dt><dt><span class="section"><a href="#promoting-selfsigned">16.7.2. Promoting a Replica with a Self-Signed CA</a></span></dt></dl></dd><dt><span class="section"><a href="#upgrading-server">16.8. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></dd><dt><span class="chapter"><a href="#Migrating_from_a_Directory_Server_to_IPA">17. Migrating from a 389 Directory Server to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#Overview-Assumptions">17.1. Understanding 389 Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="#migration-considerations">17.2. Migration Considerations</a></span></dt><dt><span class="section"><a href="#Overview-Recommended_Sequence_of_Steps">17.3. Migration Sequence</a></span></dt><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">17.4. Scenario 1: Migrating Directly to FreeIPA</a></span></dt><dt><
span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">17.5. Scenario 2: Using SSSD as Part of Migration</a></span></dt></dl></dd><dt><span class="chapter"><a href="#certmongerX">18. Working with certmonger</a></span></dt><dd><dl><dt><span class="section"><a href="#certmonger-req">18.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="#Working_with_certmonger-Using_certmonger_with_NSS">18.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="#certmonger-tracking-certs">18.3. Tracking Certificates with certmonger</a></span></dt></dl></dd><dt><span class="appendix"><a href="#chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions">A. Frequently Asked Questions</a></span></dt><dt><span class="appendix"><a href="#tools-reference">B. FreeIPA Tools Reference</a></span></dt><dd><dl><dt><span class="section"><a href="#special-chars">B.1. U
sing Special Characters</a></span></dt><dt><span class="section"><a href="#ipa">B.2. ipa</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-location">B.2.1. Location</a></span></dt><dt><span class="section"><a href="#ipa-syntax">B.2.2. Syntax</a></span></dt><dt><span class="section"><a href="#ipa-topics">B.2.3. Help Topics</a></span></dt><dt><span class="section"><a href="#ipa-global-options">B.2.4. Global Options</a></span></dt><dt><span class="section"><a href="#ipa-return-codes">B.2.5. Return Codes</a></span></dt><dt><span class="section"><a href="#ipa-commands">B.2.6. Commands</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-dns">B.3. ipa DNS Commands</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-command-dnszone-add">B.3.1. ipa dnszone-add</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-command-host">B.4. ipa Host Commands</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-host-add">B.4.1. ipa host
-add</a></span></dt></dl></dd><dt><span class="section"><a href="#server-tools">B.5. Server Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-replica-install">B.5.1. ipa-replica-install</a></span></dt><dt><span class="section"><a href="#ipa-replica-prepare">B.5.2. ipa-replica-prepare</a></span></dt><dt><span class="section"><a href="#ipa-server-install">B.5.3. ipa-server-install</a></span></dt></dl></dd><dt><span class="section"><a href="#client-tools">B.6. Client Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-client-install">B.6.1. ipa-client-install</a></span></dt></dl></dd></dl></dd><dt><span class="glossary"><a href="#Glossary">Glossary</a></span></dt><dt><span class="index"><a href="#id864961">Index</a></span></dt></dl></div><div xml:lang="en-US" class="preface" id="Preface" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Preface</h1></div></div></div><div class="para">
FreeIPA is a Fedora-based way to create a security, identity, and authentication domain. The different security and authentication protocols available to Linux and Unix systems (like Kerberos, NIS, DNS, PAM, and sudo) are complex, unrelated, and difficult to manage coherently, especially when combined with different identity stores.
</div><div class="para">
FreeIPA provides a layer that unifies all of these disparate services and simplifies the administrative tasks for managing users, systems, and security. FreeIPA breaks management down into two categories: <span class="emphasis"><em>identity</em></span> and <span class="emphasis"><em>policy</em></span>. It centralizes the functions of managing the users and entities within your IT environment (identity) and then provides a framework to define authentication and authorization for a global security framework and user-friendly tools like single sign-on (policy).
- </div><div class="section" id="audience"><div class="titlepage"><div><div><h2 class="title" id="audience">1. Audience and Purpose</h2></div></div></div><div class="para">
+ </div><div class="section" id="audience"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="audience">1. Audience and Purpose</h2></div></div></div><div class="para">
With FreeIPA, a Fedora system can easily become the center of an identity/authentication domain and even provide access to the domain for clients of other operating systems. FreeIPA is an integrated system, that builds on existing and reliable technologies like LDAP and certificate protocols, with a robust yet straightforward set of tools (including a web-based UI). The key to identity/policy management with FreeIPA is simplicity and flexibility:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Centralized identity stores for authentication and single sign-on using both integrated LDAP services (with 389 Directory Server) and, optionally, NIS services
@@ -44,15 +48,15 @@
This guide is written for systems administrators and IT staff who will manage FreeIPA domains, user systems, and servers. This assumes a moderate knowledge of Linux-based systems administration and familiarity with important concepts like access control, LDAP, and Kerberos.
</div><div class="para">
This guide covers every aspect of using FreeIPA, including preparation and installation processes, administrative tasks, and the FreeIPA tools. This guide also explains the major concepts behind both identity and policy management, generally, and FreeIPA features specifically. Administrative tasks in this guide are categorized as either <span class="emphasis"><em>Identity</em></span> or <span class="emphasis"><em>Policy</em></span> in the chapter title to help characterize the administrative functions.
- </div></div><div xml:lang="en-US" class="section" id="Document_Conventions" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="Document_Conventions">2. Examples and Formatting</h2></div></div></div><div class="para">
+ </div></div><div xml:lang="en-US" class="section" id="Document_Conventions" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Document_Conventions">2. Examples and Formatting</h2></div></div></div><div class="para">
Each of the examples used in this guide, such as file locations and commands, have certain defined conventions.
- </div><div class="section" id="bracketsexamples"><div class="titlepage"><div><div><h3 class="title" id="bracketsexamples">2.1. Brackets</h3></div></div></div><div class="para">
+ </div><div class="section" id="bracketsexamples"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="bracketsexamples">2.1. Brackets</h3></div></div></div><div class="para">
Square brackets (<code class="command">[]</code>) are used to indicate an alternative element in a name. For example, if a tool is available in <code class="filename">/usr/lib</code> on 32-bit systems and in <code class="filename">/usr/lib64</code> on 64-bit systems, then the tool location may be represented as <code class="filename">/usr/lib[64]</code>.
- </div></div><div class="section" id="tool-locations"><div class="titlepage"><div><div><h3 class="title" id="tool-locations">2.2. Client Tool Information</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="tool-locations"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="tool-locations">2.2. Client Tool Information</h3></div></div></div><div class="para">
The tools for FreeIPA are located in the <code class="filename">/usr/bin</code> and the <code class="filename">/usr/sbin</code> directories.
</div><div class="para">
The LDAP tools used to edit the FreeIPA directory services, such as <code class="command">ldapmodify</code> and <code class="command">ldapsearch</code>, are from OpenLDAP. OpenLDAP tools use SASL connections by default. To perform a simple bind using a username and password, use the <code class="option">-x</code> argument to disable SASL.
- </div></div><div class="section" id="guide-formatting"><div class="titlepage"><div><div><h3 class="title" id="guide-formatting">2.3. Text Formatting and Styles</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="guide-formatting"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="guide-formatting">2.3. Text Formatting and Styles</h3></div></div></div><div class="para">
Certain words are represented in different fonts, styles, and weights. Different character formatting is used to indicate the function or purpose of the phrase being highlighted.
</div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr valign="top"><th valign="top">
Formatting Style
@@ -80,7 +84,7 @@
Important information is necessary, but possibly unexpected, such as a configuration change that will not persist after a reboot.
</div></div></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
A warning indicates potential data loss, as may happen when tuning hardware for maximum performance.
- </div></div></div></div></div><div xml:lang="en-US" class="section" id="feedback" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="feedback">3. Giving Feedback</h2></div></div></div><div class="para">
+ </div></div></div></div></div><div xml:lang="en-US" class="section" id="feedback" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="feedback">3. Giving Feedback</h2></div></div></div><div class="para">
If there is any error in this book or there is any way to improve the documentation, please let us know. Bugs can be filed against the documentation for FreeIPA through Bugzilla, <a href="http://bugzilla.redhat.com/bugzilla">http://bugzilla.redhat.com/bugzilla</a>. Make the bug report as specific as possible, so we can be more effective in correcting any issues:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Select the Other group and the freeIPA product.
@@ -96,8 +100,8 @@
Give a clear title for the bug. For example, <code class="command">"Incorrect command example for setup script options"</code> is better than <code class="command">"Bad example"</code>.
</div></li></ol></div><div class="para">
We appreciate receiving any feedback — requests for new sections, corrections, improvements, enhancements, even new ways of delivering the documentation or new styles of docs. You are welcome to contact the Fedora docs team at <a href="mailto:docs at lists.fedoraproject.org">docs at lists.fedoraproject.org</a>.
- </div></div><div xml:lang="en-US" class="section" id="doc-history" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="doc-history">4. Document Change History</h2></div></div></div><div class="para">
- <div class="revhistory"><table border="0" width="100%" summary="Revision history"><tr><th align="left" valign="top" colspan="3"><b>Revision History</b></th></tr><tr><td align="left">Revision 2.1.0-2</td><td align="left">July 22, 2011</td><td align="left"><span class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></span></td></tr><tr><td align="left" colspan="3">
+ </div></div><div xml:lang="en-US" class="section" id="doc-history" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="doc-history">4. Document Change History</h2></div></div></div><div class="para">
+ <div class="revhistory"><table border="0" width="100%" summary="Revision history"><tr><th align="left" valign="top" colspan="3"><strong>Revision History</strong></th></tr><tr><td align="left">Revision 2.1.0-2</td><td align="left">July 22, 2011</td><td align="left"><span class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></span></td></tr><tr><td align="left" colspan="3">
<table border="0" summary="Simple list" class="simplelist"><tr><td>Completing first round of content revisions on the chapters for server installation, client installation, DNS, basic usage, managing clients, and the preface.</td></tr><tr><td>Beginning content revisions on the chapters for users, Kerberos, automount, and managing servers.</td></tr><tr><td>Bare initial draft of a tools appendix.</td></tr><tr><td>Bugzilla work: 646226, 646240, 646257, 646267, 68173, 693843, 701465, 709385, 714603, 715015 </td></tr><tr><td>FreeIPA.org tickets: 1183, 1359, 1449, 1058, 1335, 1107, 1355, 1430, 803, 991, 615, 969, 594, 593 </td></tr><tr><td>freeipa-guide trac tickets: 18, 19, 16, 17 </td></tr></table>
</td></tr><tr><td align="left">Revision 2.1.0-1</td><td align="left">May 10, 2011</td><td align="left"><span class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></span></td></tr><tr><td align="left" colspan="3">
@@ -111,9 +115,9 @@
FreeIPA provides a unifying skin for standards-defined, common network services, including PAM, LDAP, Kerberos, DNS, NTP, and certificate services, and it allows Red Hat Enterprise Linux systems to serve as the domain controllers.
</div><div class="para">
FreeIPA defines a domain, with servers and clients who share centrally-managed services, like Kerberos and DNS. This chapter first explains what FreeIPA is. This chapter also covers how all of these services work together within the domain and how servers and clients work with each other.
- </div><div class="section" id="ipa-v-ldap"><div class="titlepage"><div><div><h2 class="title" id="ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</h2></div></div></div><div class="para">
- At the most basic level, FreeIPA is a domain controller for Linux and Unix machines. FreeIPA defines the domain, using controlling servers and enrolled clien machines. This provides centralized structure that has previously been unavailable to Linux/Unix environments, and it does it using native Linux applications and protocols.
- </div><div class="section" id="ipadefined"><div class="titlepage"><div><div><h3 class="title" id="ipadefined">1.1.1. A Working Definition for FreeIPA</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-v-ldap"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</h2></div></div></div><div class="para">
+ At the most basic level, FreeIPA is a domain controller for Linux and Unix machines. FreeIPA defines the domain, using controlling servers and enrolled client machines. This provides centralized structure that has previously been unavailable to Linux/Unix environments, and it does it using native Linux applications and protocols.
+ </div><div class="section" id="ipadefined"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipadefined">1.1.1. A Working Definition for FreeIPA</h3></div></div></div><div class="para">
Security information frequently relates to <span class="emphasis"><em>identities</em></span> of users, machines, and services. Once the identity is verified, then access to services and resources can be controlled.
</div><div class="para">
For efficiency, risk management, and ease of administration, IT administrators try to manage identities as centrally as possible and to unite identity management with authentication and authorization policies. Historically, Linux environments have had a very difficult time establishing this centralized management. There are a number of different protocols (such as NIS and Kerberos) which define domains, while other applications store data (such as LDAP) and still others manage access (such as sudo). None of these applications talk to each other or use the same management tools. Every application had to be administered separately and it had to be managed locally. The only way to get a consistent identity policy was to copy configuration files around manually or to try to develop a proprietary application to manage identities and policies.
@@ -130,23 +134,23 @@
</div></li></ul></div><div class="para">
In a sense, FreeIPA isn't making administrators do something new; it is helping them do it better. There are a few ways to illustrate that.
</div><div class="para">
- On one extreme is the <span class="emphasis"><em>low control</em></span> environment. Little Example Corp. has several Linux and Unix servers, but each one is administred separately. All passwords are kept on the local machine, so there is no central identity or authentication process. Tim the IT Guy just has to manage users on every machine, set authentication and authorization policies separately, and maintain local passwords. With FreeIPA, things come to order. There is a simple way to have central user, password, and policy stores, so Tim the IT only has to maintain the identities on one machine (the FreeIPA server) and users and policies are uniformly applied to all machines. Using host-based access control, delegation, and other rules, he can even set different access levels for laptops and remote users.
+ On one extreme is the <span class="emphasis"><em>low control</em></span> environment. Little Example Corp. has several Linux and Unix servers, but each one is administered separately. All passwords are kept on the local machine, so there is no central identity or authentication process. Tim the IT Guy just has to manage users on every machine, set authentication and authorization policies separately, and maintain local passwords. With FreeIPA, things come to order. There is a simple way to have central user, password, and policy stores, so Tim the IT only has to maintain the identities on one machine (the FreeIPA server) and users and policies are uniformly applied to all machines. Using host-based access control, delegation, and other rules, he can even set different access levels for laptops and remote users.
</div><div class="para">
In the middle is the <span class="emphasis"><em>medium control</em></span> environment. Mid-Example Corp. has several Linux and Unix servers, but Bill the IT Guy has tried to maintain a greater degree of control by creating a NIS domain for machines, an LDAP directory for users, and Kerberos for authentication. While his environment is well under control, every application has to be maintained separately, using different tools. He also has to update all of the services manually whenever a new machine is added to his infrastructure or when one is taken offline. In this situation, FreeIPA greatly reduces his administrative overhead because it integrates all of the different applications together seamlessly, using a single and simplified tool set. It also makes it possible for him to implement single sign-on services for all of the machines in his domain.
</div><div class="para">
On the other extreme is <span class="emphasis"><em>absent control</em></span> environment. At Big Example Corp., most of the systems are Windows based and are managed in a tightly-knit Active Directory forest. However, development, production, and other teams have many Linux and Unix systems — which are basically excluded from the Windows controlled environment. FreeIPA brings native control to the Linux/Unix servers, using their native tools and applications — something that is not possible in an Active Directory forest. Additionally, because FreeIPA is Windows-aware, data can be synchronized between Active Directory and FreeIPA, preserving a centralized user store.
</div><div class="para">
FreeIPA provides a very simple solution to a very common, very specific problem: identity management.
- </div></div><div class="section" id="comparing"><div class="titlepage"><div><div><h3 class="title" id="comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="comparing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</h3></div></div></div><div class="para">
The closest relative to FreeIPA is a standard LDAP directory like 389 Directory Server or a hybrid directory like Active Directory, but there are some intrinsic differences between what they do and what they're <span class="emphasis"><em>indended</em></span> to do.
</div><div class="para">
- First, it helps to understand what a directory service is. A directory service is a collection of software, hardware, and processes that stores information. While directory services can be highly specific (for example, DNS is a directory service because it stores information on hostnames), a global directory service can store and retrieve any kind of information. LDAP directories like 389 Directory Server are global directories. They have a flexible schema that supports entries for users, machines, network entities, physical equipment, and buildings, and that schema can be customized to define entries of almost anything. Because of its extensiblity, LDAP servers like 389 Directory Server are frequently used as backends that store data for other applications. 389 Directory Server not only contains information, it organizes information. LDAP directories uses a hierarchical structure, a <span class="emphasis"><em>directory tree</em></span>, that organize entries into parent
entries (suffixes or branches) and child entries. Directory trees can be very complex, with a lot of branch points, or very simple (flat) with few branch points.
+ First, it helps to understand what a directory service is. A directory service is a collection of software, hardware, and processes that stores information. While directory services can be highly specific (for example, DNS is a directory service because it stores information on hostnames), a global directory service can store and retrieve any kind of information. LDAP directories like 389 Directory Server are global directories. They have a flexible schema that supports entries for users, machines, network entities, physical equipment, and buildings, and that schema can be customized to define entries of almost anything. Because of its extensibility, LDAP servers like 389 Directory Server are frequently used as backends that store data for other applications. 389 Directory Server not only contains information, it organizes information. LDAP directories uses a hierarchical structure, a <span class="emphasis"><em>directory tree</em></span>, that organize entries into paren
t entries (suffixes or branches) and child entries. Directory trees can be very complex, with a lot of branch points, or very simple (flat) with few branch points.
</div><div class="para">
The primary feature of an LDAP directory is its generality. It can be made to fit into a variety of applications.
</div><div class="para">
FreeIPA, on the other hand, has a very specific purpose and fits a very specific application. It is not a general LDAP directory, it is not a backend, and it is not a general policy server. It is not generic.
</div><div class="para">
- FreeIPA focuses on identities (user and machine) and policies that relate to those identities and their interactions. While it uses an LDAP backend to store its data, FreeIPA has a higlhy-customized and specific set of schema that defines a particular set of identity-related entries and defines them in detail. It has a relatively flat and simple directory tree because it has only a handful of entry types and relationships that are relevant to its purpose. It has rules and limitations on how the FreeIPA server can be deployed because it can only be deployed for a specific purpose: managing identities. IPA and AD need to be carefully segmented
+ FreeIPA focuses on identities (user and machine) and policies that relate to those identities and their interactions. While it uses an LDAP backend to store its data, FreeIPA has a highly-customized and specific set of schema that defines a particular set of identity-related entries and defines them in detail. It has a relatively flat and simple directory tree because it has only a handful of entry types and relationships that are relevant to its purpose. It has rules and limitations on how the FreeIPA server can be deployed because it can only be deployed for a specific purpose: managing identities. IPA and AD need to be carefully segmented
</div><div class="para">
The restrictions on FreeIPA also give it a great deal of administrative simplicity. It has a simple installation process, a unified set of commands, and a clearly defined role in the overall IT infrastructure. A FreeIPA domain is easy to configure, easy to join, and easy to manage, and the functions that it serves — particularly identity/authentication tasks like enterprise-wide single sign-on —are also easier to do with FreeIPA than with a more general-purpose directory service.
</div><div class="table" id="tab.ipa-v-ldap"><h6>Table 1.1. FreeIPA Compared to 389 Directory Server</h6><div class="table-contents"><table summary="FreeIPA Compared to 389 Directory Server" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
@@ -204,40 +208,40 @@
</td><td>
Web-based UI and special Python command-line tools
</td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- LDAP directories like 389 Directory Server have flexibility and adaptibility which makes them a perfect backend to any number of applications. 389 Directory Server is a <span class="emphasis"><em>global directory service</em></span> because it can be adapted to meet a number of different needs. Its primary purpose is to store and retrieve data efficiently.
+ LDAP directories like 389 Directory Server have flexibility and adaptability which makes them a perfect backend to any number of applications. 389 Directory Server is a <span class="emphasis"><em>global directory service</em></span> because it can be adapted to meet a number of different needs. Its primary purpose is to store and retrieve data efficiently.
</div><div class="para">
FreeIPA fills a very different niche. It is optimized to perform a single task very effectively. It stores user information and authentication and authorization policies, as well as other information related to access, like host information. Its single purpose is to manage identities.
- </div></div></div><div class="section" id="ipa-linux-services"><div class="titlepage"><div><div><h2 class="title" id="ipa-linux-services">1.2. Bringing Linux Services Together</h2></div></div></div><div class="para">
+ </div></div></div><div class="section" id="ipa-linux-services"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-linux-services">1.2. Bringing Linux Services Together</h2></div></div></div><div class="para">
FreeIPA unifies disparate yet related Linux services into a single management environment. From there, it establishes a simple, easy way to bring host machines into the domain of those services.
</div><div class="para">
A FreeIPA server is, at its core, an identity and authentication server. The primary FreeIPA server, essentially a domain controller, uses a Kerberos server and KDC for authentication. An LDAP backend contains all of the domain information, including users, client machines, and domain configuration.
- </div><div class="figure" id="fig.server1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-server.png" width="600" alt="The FreeIPA Server: Unifying Services" /></div></div><h6>Figure 1.1. The FreeIPA Server: Unifying Services</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.server1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-server.png" width="444" alt="The FreeIPA Server: Unifying Services" /></div></div><h6>Figure 1.1. The FreeIPA Server: Unifying Services</h6></div><br class="figure-break" /><div class="para">
Other services are included to provide support for the core identity/authentication functions. DNS is used for machine discovery and for connecting to other clients in the domain. NTP is used to synchronize all domain clocks so that logging, certificates, and operations can occur as expected. A certificate service provides certificates for Kerberos-aware services. All of these additional services work together under the control of the FreeIPA server.
</div><div class="para">
The FreeIPA server also has a set of tools which are used to manage all of the FreeIPA-associated services. Rather than managing the LDAP server, KDC, or DNS settings individually, using different tools on local machines, FreeIPA has a single management toolset (CLI and web UI) that allows centralized and cohesive administration of the domain.
- </div><div class="section" id="Kerberos_KDC"><div class="titlepage"><div><div><h3 class="title" id="Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</h3></div></div></div><div class="para">
- Kerberos is an autnentication protocol. Kerberos uses symmetric key cryptography to generate <span class="emphasis"><em>tickets</em></span> to users. Kerberos-aware applications check the ticket cache (a <span class="emphasis"><em>keytab</em></span>) and authenticate users with valid tickets.
+ </div><div class="section" id="Kerberos_KDC"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</h3></div></div></div><div class="para">
+ Kerberos is an authentication protocol. Kerberos uses symmetric key cryptography to generate <span class="emphasis"><em>tickets</em></span> to users. Kerberos-aware applications check the ticket cache (a <span class="emphasis"><em>keytab</em></span>) and authenticate users with valid tickets.
</div><div class="para">
- Kerberos authentication is significatly safer than normal password-based authentication because passwords are never sent over the network — even when services are accessed on other machines.
+ Kerberos authentication is significantly safer than normal password-based authentication because passwords are never sent over the network — even when services are accessed on other machines.
</div><div class="para">
In FreeIPA, the Kerberos administration server is set up on the FreeIPA domain controller, and all of the Kerberos data are stored in FreeIPA's backend Directory Server. The Directory Server instance defines and enforces access controls for the Kerberos data.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Th FreeIPA Kerberos server is managed through FreeIPA tools instead of Kerberos tools because all of its data are stored in the Directory Server instance. The KDC is unaware of the Directory Server, so managing the KDC with Kerberos tools does not effect the FreeIPA configuration.
- </div></div></div></div><div class="section" id="Directory_Server"><div class="titlepage"><div><div><h3 class="title" id="Directory_Server">1.2.2. Data Storage: 389 Directory Server</h3></div></div></div><div class="para">
+ </div></div></div></div><div class="section" id="Directory_Server"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Directory_Server">1.2.2. Data Storage: 389 Directory Server</h3></div></div></div><div class="para">
FreeIPA contains an internal 389 Directory Server instance. All of the Kerberos information, user accounts, groups, services, policy information, DNS zone and host entries, and all other information in FreeIPA is stored in this 389 Directory Server instance.
</div><div class="para">
When multiple servers are configured, they can talk to each other because 389 Directory Server supports <span class="emphasis"><em>multi-master replication</em></span>. Agreements are automatically configured between the initial server and any additional <span class="emphasis"><em>replicas</em></span> which are added to the domain.
- </div></div><div class="section" id="certificate-services"><div class="titlepage"><div><div><h3 class="title" id="certificate-services">1.2.3. Authentication: Dogtag Certificate System</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="certificate-services"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="certificate-services">1.2.3. Authentication: Dogtag Certificate System</h3></div></div></div><div class="para">
Kerberos can use certificates along with keytabs for authentication, and some services require certificates for secure communication. FreeIPA includes a certificate authority, through Dogtag Certificate System, with the server. This CA issues certificates to the server, replicas, and hosts and services within the FreeIPA domain.
</div><div class="para">
The CA can be a root CA or it can have its policies defined by another, external CA (so that it is <span class="emphasis"><em>subordinate</em></span> to that CA). Whether the CA is a root or subordinate CA is determined when the FreeIPA server is set up.
- </div></div><div class="section" id="dns"><div class="titlepage"><div><div><h3 class="title" id="dns">1.2.4. Server/Client Discovery: DNS</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="dns"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="dns">1.2.4. Server/Client Discovery: DNS</h3></div></div></div><div class="para">
FreeIPA defines a domain — multiple machines with different users and services, each accessing shared resources and using shared identity, authentication, and policy configuration. The clients need to be able to contact each other, as FreeIPA servers. Additionally, services like Kerberos depend on hostnames to identify their principal identities.
</div><div class="para">
Hostnames are associated with IP address using the <span class="emphasis"><em>Domain Name Service</em></span> (DNS). DNS maps hostnames to IP addresses and IP addresses to hostnames, providing a resource that clients can use when they need to look up a host. From the time a client is enrolled in the FreeIPA domain, it uses DNS to locate the FreeIPA server and then all of the services and clients within the domain.
</div><div class="para">
Multiple DNS servers are usually configured, each one working as an authoritative resource for machines within a specific domain. Having the FreeIPA server also be a DNS server is optional, but it is strongly recommended. When the FreeIPA server also manages DNS, there is tight integration between the DNS zones and the FreeIPA clients and the DNS configuration can be managed using native FreeIPA tools. Even if a FreeIPA server is a DNS server, other external DNS servers can still be used.
- </div></div><div class="section" id="NTP"><div class="titlepage"><div><div><h3 class="title" id="NTP">1.2.5. Management: NTP</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="NTP"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="NTP">1.2.5. Management: NTP</h3></div></div></div><div class="para">
Many services require that servers and clients have the same time, within a certain variance. For example, Kerberos tickets use time stamps to determine their validity. If the times between the server and client skew outside the allowed range, then any Kerberos tickets are invalidated.
</div><div class="para">
Clocks are synchronized over a network using <span class="emphasis"><em>Network Time Protocol</em></span> (NTP). A central server acts as an authoritative clock and all of the clients which reference that NTP server sync their times to match.
@@ -245,26 +249,26 @@
When the FreeIPA server is the NTP server for the domain, all times and dates are synchronized before any other operations are performed. This allows all of the date-related services — including password expirations, ticket and certificate expirations, account lockout settings, and entry create dates — to function as expected.
</div><div class="para">
The FreeIPA server, by default, works as the NTP server for the domain. Other NTP servers can also be used for the hosts.
- </div></div></div><div class="section" id="service-interactions"><div class="titlepage"><div><div><h2 class="title" id="service-interactions">1.3. Relationships Between Servers and Clients</h2></div></div></div><div class="para">
+ </div></div></div><div class="section" id="service-interactions"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="service-interactions">1.3. Relationships Between Servers and Clients</h2></div></div></div><div class="para">
FreeIPA itself defines a <span class="emphasis"><em>domain</em></span>, a group of machines that have shared configuration, policies, and identity stores. This shared configuration allows the machines (and users) within the domain to be aware of each other and operate together. This awareness can be used to enable cross-platform compatibility, like unifying Windows and Linux systems, or to enable infrastructure-wide single sign-on.
- </div><div class="section" id="ipa-servers-replicas"><div class="titlepage"><div><div><h3 class="title" id="ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-servers-replicas"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</h3></div></div></div><div class="para">
FreeIPA works by having identified servers which are the master stores of information for user and machine identities and domain-wide policies. These servers also host domain-related services such as Kerberos and DNS. The server essentially is a central repository of identity and policy information. This information is sent routinely to the clients.
</div><div class="para">
Servers can be cloned and their information mirrored onto subordinate FreeIPA servers called <span class="emphasis"><em>replicas</em></span>. FreeIPA servers are the data masters; replicas contain copies of that information, which is synchronized between the internal 389 Directory Server and Certificate System databases through mutual <span class="emphasis"><em>replication agreements</em></span>.
- </div><div class="figure" id="fig.replica1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-replica.png" width="600" alt="Server and Replica Interactions" /></div></div><h6>Figure 1.2. Server and Replica Interactions</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.replica1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-replica.png" width="444" alt="Server and Replica Interactions" /></div></div><h6>Figure 1.2. Server and Replica Interactions</h6></div><br class="figure-break" /><div class="para">
Replicas can communicate with clients, the same as servers, so replicas provide a means to balance the loads on servers while still minimizing the number of data masters and centralizing configuration in the servers.
- </div></div><div class="section" id="ipa-clients"><div class="titlepage"><div><div><h3 class="title" id="ipa-clients">1.3.2. About FreeIPA Clients</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="ipa-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-clients">1.3.2. About FreeIPA Clients</h3></div></div></div><div class="para">
A client is simply any machine which is configured to operate within the FreeIPA domain, using its Kerberos and DNS services, NTP settings, and certificate services. That's an important distinction: a client does not require a daemon or (necessarily) an installed product. It requires only system configurations which direct it to use FreeIPA services.
</div><div class="para">
For Fedora systems, a certain number of platform tools are available for FreeIPA to use, such as SSSD. These are <span class="emphasis"><em>FreeIPA-enabled platform applications</em></span>, which is simply a way of saying that they are aspects of the underlying platform that work with FreeIPA services. Other tools, like certain PAM and NSS modules and FreeIPA command-line utilities, are provided as FreeIPA-specific packages that must be installed on the machine. These are <span class="emphasis"><em>FreeIPA-related components</em></span>.
- </div><div class="figure" id="fig.serverclient1"><div class="figure-contents"><div class="mediaobject"><img src="images/ServerClient1.png" width="600" alt="Server and Client Interactions" /></div></div><h6>Figure 1.3. Server and Client Interactions</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.serverclient1"><div class="figure-contents"><div class="mediaobject"><img src="images/ServerClient1.png" width="444" alt="Server and Client Interactions" /></div></div><h6>Figure 1.3. Server and Client Interactions</h6></div><br class="figure-break" /><div class="para">
FreeIPA uses the local storage (cache) on a client to improve performance in a few ways:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Store FreeIPA information when the machine is offline.
</div></li><li class="listitem"><div class="para">
Keep information active beyond its normal timeout period of the client cannot access the central server. The cache is persistent even after rebooting the machine.
</div></li><li class="listitem"><div class="para">
- Reduce the roundtrip time of requests by checking information locally before looking at the server.
+ Reduce the round-trip time of requests by checking information locally before looking at the server.
</div></li></ul></div><div class="para">
Information is stored either in an LDB database (similar to LDAP) or the local filesystem (as XML files), depending on the <span class="emphasis"><em>type</em></span> of information.
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
@@ -273,7 +277,7 @@
Policy information is more static than identity information, and it can included configuration for SELinux or sudo. These policies are set globally on the server and then are propagated to the clients. On the client, the policy information is stored in the filesystem in XML files which can be downloaded and converted into a native file for whatever service is being managed.
</div></li></ul></div><div class="para">
A specific set of services on the FreeIPA server interact with a subset of services and modules on the FreeIPA client. A client is any machine (a <span class="emphasis"><em>host</em></span>) which can retrieve a keytab or certificates from the FreeIPA domain.
- </div><div class="figure" id="fig.IPA_Architecture"><div class="figure-contents"><div class="mediaobject"><img src="images/IPA_arch.png" width="600" alt="Interactions Between FreeIPA Services" /></div></div><h6>Figure 1.4. Interactions Between FreeIPA Services</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.IPA_Architecture"><div class="figure-contents"><div class="mediaobject"><img src="images/IPA_arch.png" width="444" alt="Interactions Between FreeIPA Services" /></div></div><h6>Figure 1.4. Interactions Between FreeIPA Services</h6></div><br class="figure-break" /><div class="para">
<a class="xref" href="#fig.IPA_Architecture">Figure 1.4, “Interactions Between FreeIPA Services”</a> shows that Fedora uses two native daemons to interact with the FreeIPA server:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
SSSD provides the user authentication for the machine and enforces host-based access control rules.
@@ -285,15 +289,15 @@
The FreeIPA domain is defined and managed by a FreeIPA <span class="emphasis"><em>server</em></span> which is essentially a domain controller. There can be multiple domain controllers within a domain for load-balancing and failover tolerance. These additional servers are called <span class="emphasis"><em>replicas</em></span> of the master FreeIPA server.
</div><div class="para">
Both FreeIPA servers and replicas only run on Fedora systems. For both servers and replicas, the necessary packages must be installed and then the FreeIPA server or replica itself is configured through setup scripts, which configure all of the requisite services.
- </div><div class="section" id="Preparing_for_an_IPA_Installation"><div class="titlepage"><div><div><h2 class="title" id="Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</h2></div></div></div><div class="para">
+ </div><div class="section" id="Preparing_for_an_IPA_Installation"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</h2></div></div></div><div class="para">
Before you install FreeIPA, ensure that the installation environment is suitably configured. You also need to provide certain information during the installation and configuration procedures, including realm names and certain usernames and passwords. This section describes the information that you need to provide.
- </div><div class="section" id="Preparing_for_an_IPA_Installation-Hardware_Requirements"><div class="titlepage"><div><div><h3 class="title" id="Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</h3></div></div></div><div class="para">
+ </div><div class="section" id="Preparing_for_an_IPA_Installation-Hardware_Requirements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</h3></div></div></div><div class="para">
A basic user entry is about 1 KB in size, as is a simple host entry with a certificate. The structure of the directory tree and the number of indexes in the Directory Server instance can impact the hardware required for the best performance. <a class="xref" href="#tab.Minimum_hardware_requirements_for_IPA">Table 2.1, “Minimum Hardware Requirements”</a> lists the recommended minimums. For customized systems, additional indexes, or larger user entries, it is more effective to increase the RAM than to increase the disk space because the Directory Server stores much of its data in cache. Add info for disk layout/size recommendations, from https://www.redhat.com/archives/freeipa-users/2011-May/msg00012.html
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
The Directory Server instance used by the FreeIPA server can be tuned to increase performance. For tuning information, see the Directory Server documentation at <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Performance_Tuning_Guide/system-tuning.html">http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Performance_Tuning_Guide/system-tuning.html</a>.
</div></div></div><div class="para">
The system requirements for both 32-bit and 64-bit platforms are the same.
- </div><div class="table" id="tab.Minimum_hardware_requirements_for_IPA"><h6>Table 2.1. Minimum Hardware Requirements</h6><div class="table-contents"><table summary="Minimum Hardware Requirements" border="1"><colgroup><col width="25%" align="center" /><col width="25%" align="center" /><col width="25%" align="center" /><col width="25%" align="center" /></colgroup><thead><tr><th align="center">
+ </div><div class="table" id="tab.Minimum_hardware_requirements_for_IPA"><h6>Table 2.1. Minimum Hardware Requirements</h6><div class="table-contents"><table summary="Minimum Hardware Requirements" border="1"><colgroup><col width="25%" align="center" class="Col1" /><col width="25%" align="center" class="Col2" /><col width="25%" align="center" class="Col3" /><col width="25%" align="center" class="Col4" /></colgroup><thead><tr><th align="center">
Minimum Hardware Requirements
</th><th align="center">
10,000 - 250,000 Entries
@@ -321,21 +325,35 @@
4 GB
</td><td align="center">
8 GB
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Preparing_for_an_IPA_Installation-Software_Requirements"><div class="titlepage"><div><div><h3 class="title" id="Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Preparing_for_an_IPA_Installation-Software_Requirements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</h3></div></div></div><div class="para">
Most of the packages that a FreeIPA server depends on are installed as dependencies when the FreeIPA packages are installed. There are some packages, however, which are required before installing the FreeIPA packages:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Kerberos 1.9
</div></li><li class="listitem"><div class="para">
The <span class="package">named</span> and <span class="package">bind-dyndb-ldap</span> packages for DNS
- </div></li></ul></div></div><div class="section" id="prerequisites"><div class="titlepage"><div><div><h3 class="title" id="prerequisites">2.1.3. System Prerequisites</h3></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="prerequisites"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="prerequisites">2.1.3. System Prerequisites</h3></div></div></div><div class="para">
The FreeIPA server is set up using a configuration script, and this script makes certain assumption about the host system. If the system does not meet these prerequisites, then server configuration may fail.
- </div><div class="section" id="prereq-ds"><div class="titlepage"><div><div><h4 class="title" id="prereq-ds">2.1.3.1. Directory Server</h4></div></div></div><div class="para">
+ </div><div class="section" id="hostname-requirements"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="hostname-requirements">2.1.3.1. Hostname Requirements</h4></div></div></div><div class="para">
+ Regardless of whether the DNS is within the FreeIPA server or external, the server host must have DNS properly configured:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The hostname must be a fully-qualified domain name. For example, <code class="systemitem">ipa.example.com</code>.
+ </div></li><li class="listitem"><div class="para">
+ The server's machine name must be set and resolve to its public IP address. The fully-qualified domain name cannot resolve to the loopback address. It must resolve to the machine's public IP address, not to <code class="systemitem">127.0.0.1</code>. The output of the <code class="command">hostname</code> command cannot be <code class="systemitem">localhost</code> or <code class="systemitem">localhost6</code>.
+ </div></li><li class="listitem"><div class="para">
+ The reverse of the address that the hostname resolves to must match the hostname.
+ </div></li><li class="listitem"><div class="para">
+ The DNS must be correctly configured to resolve forward and reverse addresses. The DNS does not need to be on the same machine as the FreeIPA server, but it does need to be fully functional.
+ </div><div class="para">
+ If you do not have a functional DNS, you can use the <code class="option">--setup-dns</code> option when you install FreeIPA to configure a suitable DNS automatically.
+ </div></li><li class="listitem"><div class="para">
+ The installation process checks that the FreeIPA server name is a DNS A record and that its reverse and forward addresses match. This check is not performed if a FreeIPA DNS server is installed using the <code class="option">--setup-dns</code> option because the script assumes that the FreeIPA server will use itself as a DNS.
+ </div></li></ul></div></div><div class="section" id="prereq-ds"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-ds">2.1.3.2. Directory Server</h4></div></div></div><div class="para">
There must not be any instances of 389 Directory Server installed on the host machine.
- </div></div><div class="section" id="prereq-system"><div class="titlepage"><div><div><h4 class="title" id="prereq-system">2.1.3.2. System Files </h4></div></div></div><div class="para">
+ </div></div><div class="section" id="prereq-system"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-system">2.1.3.3. System Files </h4></div></div></div><div class="para">
The server script overwrites system files to set up the FreeIPA domain. The system should be clean, without custom configuration for services like DNS and Kerberos, before configuring the FreeIPA server.
- </div></div><div class="section" id="prereq-ports"><div class="titlepage"><div><div><h4 class="title" id="prereq-ports">2.1.3.3. System Ports</h4></div></div></div><div class="para">
+ </div></div><div class="section" id="prereq-ports"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-ports">2.1.3.4. System Ports</h4></div></div></div><div class="para">
FreeIPA uses a number of ports to communicate with its services. These ports, listed in <a class="xref" href="#tab.ipa-ports">Table 2.2, “FreeIPA Ports”</a>, must be open and available for FreeIPA to work. They cannot be in use by another service or blocked by a firewall. To make sure that these ports are available, try <code class="command">iptables</code> to list the available ports or <code class="command">nc</code>, <code class="command">telnet</code>, or <code class="command">nmap</code> to connect to a port or run a port scan.
- </div><div class="table" id="tab.ipa-ports"><h6>Table 2.2. FreeIPA Ports</h6><div class="table-contents"><table summary="FreeIPA Ports" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="table" id="tab.ipa-ports"><h6>Table 2.2. FreeIPA Ports</h6><div class="table-contents"><table summary="FreeIPA Ports" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th>
Service
</th><th>
Ports
@@ -363,37 +381,23 @@
</td><td>
53
</td></tr><tr><td>
- NTP<sup>[<a id="id3064735" href="#ftn.id3064735" class="footnote">b</a>]</sup>
+ NTP<sup>[<a id="id715368" href="#ftn.id715368" class="footnote">b</a>]</sup>
</td><td>
123
</td></tr><tr><td>
Dogtag Certificate System
</td><td>
- <table border="0" summary="Simple list" class="simplelist"><tr><td>9180 (OCSP responder, non-SSL)</td></tr><tr><td>9443 (agents)</td></tr><tr><td>9444 (users, SSL)</td></tr><tr><td>9445 (administrators)</td></tr><tr><td>9446 (users, client authentication)</td></tr><tr><td>9701 (Tomcat)</td></tr><tr><td>7389 (interal LDAP database)</td></tr></table>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>9180 (OCSP responder, non-SSL)</td></tr><tr><td>9443 (agents)</td></tr><tr><td>9444 (users, SSL)</td></tr><tr><td>9445 (administrators)</td></tr><tr><td>9446 (users, client authentication)</td></tr><tr><td>9701 (Tomcat)</td></tr><tr><td>7389 (internal LDAP database)</td></tr></table>
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote" id="ft.udp-tcp"><p><sup>[<a id="ftn.ft.udp-tcp" href="#ft.udp-tcp" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote" id="ft.udp-tcp"><div class="para"><sup>[<a id="ftn.ft.udp-tcp" href="#ft.udp-tcp" class="para">a</a>] </sup>
This service uses both TCP and UDP ports.
- </p></div><div class="footnote"><p><sup>[<a id="ftn.id3064735" href="#id3064735" class="para">b</a>] </sup>
+ </div></div><div class="footnote"><div class="para"><sup>[<a id="ftn.id715368" href="#id715368" class="para">b</a>] </sup>
This service uses UDP ports only.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="prereq-ntp"><div class="titlepage"><div><div><h4 class="title" id="prereq-ntp">2.1.3.4. NTP</h4></div></div></div><div class="para">
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="prereq-ntp"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-ntp">2.1.3.5. NTP</h4></div></div></div><div class="para">
If a server is being installed on a virtual machine, that server <span class="emphasis"><em>should not</em></span> run an NTP server. To disable NTP for FreeIPA, use the <code class="option">--no-ntp</code> option.
- </div></div><div class="section" id="Preparing_for_an_IPA_Installation-DNS"><div class="titlepage"><div><div><h4 class="title" id="Preparing_for_an_IPA_Installation-DNS">2.1.3.5. DNS</h4></div></div></div><div class="para">
+ </div></div><div class="section" id="Preparing_for_an_IPA_Installation-DNS"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Preparing_for_an_IPA_Installation-DNS">2.1.3.6. DNS</h4></div></div></div><div class="para">
FreeIPA uses DNS for the FreeIPA clients to find (<span class="emphasis"><em>discover</em></span>) the FreeIPA servers. The DNS service can be managed by FreeIPA itself, or FreeIPA can use an existing DNS server. Without a properly configured and working DNS, server discovery for clients and FreeIPA services like, LDAP, Kerberos, and SSL may fail to work.
- </div><div class="section" id="dns-requirements"><div class="titlepage"><div><div><h5 class="title" id="dns-requirements">2.1.3.5.1. DNS Requirements</h5></div></div></div><div class="para">
- Regardless of whether the DNS is within the FreeIPA server or external, the server host must have DNS properly configured:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The server's machine name must be set and resolve to its public IP address. The fully-qualified domain name cannot resolve to the loopback address. It must resolve to the machine's public IP address, not to <code class="systemitem">127.0.0.1</code>. The output of the <code class="command">hostname</code> command cannot be <code class="systemitem">localhost</code> or <code class="systemitem">localhost6</code>.
- </div></li><li class="listitem"><div class="para">
- The hostname must be fully qualified. For example, <code class="systemitem">ipa.example.com</code>.
- </div></li><li class="listitem"><div class="para">
- The reverse of the address that the hostname resolves to must match the hostname.
- </div></li><li class="listitem"><div class="para">
- The DNS must be correctly configured to resolve forward and reverse addresses. The DNS does not need to be on the same machine as the FreeIPA server, but it does need to be fully functional.
- </div><div class="para">
- If you do not have a functional DNS, you can use the <code class="option">--setup-dns</code> option when you install FreeIPA to automatically configure a suitable DNS.
- </div></li><li class="listitem"><div class="para">
- The installation process checks that the FreeIPA server name is a DNS A record and that its reverse and forward addresses match. This check is not performed if a FreeIPA DNS server is installed using the <code class="option">--setup-dns</code> option because the script assumes that the FreeIPA server will use itself as a DNS.
- </div></li></ul></div></div><div class="section" id="dns-file"><div class="titlepage"><div><div><h5 class="title" id="dns-file">2.1.3.5.2. The FreeIPA-Generated DNS File</h5></div></div></div><div class="para">
+ </div><div class="section" id="dns-file"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="dns-file">2.1.3.6.1. The FreeIPA-Generated DNS File</h5></div></div></div><div class="para">
To help create and configure a suitable DNS setup, the FreeIPA installation script creates a sample zone file. During the installation, FreeIPA displays a message similar to the following:
</div><pre class="screen">Sample zone file for bind has been created in /tmp/sample.zone.F_uMf4.db
</pre><div class="para">
@@ -410,7 +414,7 @@ _kerberos._udp IN SRV 0 100 88 ipaserver.example.com
_kerberos-master._tcp IN SRV 0 100 88 ipaserver.example.com
_kerberos-master._udp IN SRV 0 100 88 ipaserver.example.com
_kpasswd._tcp IN SRV 0 100 464 ipaserver.example.com
-_kpasswd._udp IN SRV 0 100 464 ipaserver.example.com</pre></div><div class="section" id="DNS-IPA_DNS_and_NSCD"><div class="titlepage"><div><div><h5 class="title" id="DNS-IPA_DNS_and_NSCD">2.1.3.5.3. IPA, DNS, and NSCD</h5></div></div></div><div class="para">
+_kpasswd._udp IN SRV 0 100 464 ipaserver.example.com</pre></div><div class="section" id="DNS-IPA_DNS_and_NSCD"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="DNS-IPA_DNS_and_NSCD">2.1.3.6.2. IPA, DNS, and NSCD</h5></div></div></div><div class="para">
<span class="emphasis"><em>It is strongly recommended</em></span> that you avoid or restrict the use of <code class="systemitem">nscd</code> (Name Service Caching Daemon) in a FreeIPA deployment. The <code class="systemitem">nscd</code> service is extremely useful for reducing the load on the server, and for making clients more responsive, but there can be problems when a system is also using SSSD, which performs its own caching.
</div><div class="para">
<code class="systemitem">nscd</code> caches authentication and identity information for all services that perform queries through nsswitch, including <code class="command">getent</code>. Because <code class="systemitem">nscd</code> performs both positive and negative caching, if a request determines that a specific FreeIPA user does not exist, it marks this as a negative cache. Values stored in the cache remain until the cache expires, regardless of any changes that may occur on the server. The results of such caching is that new users and memberships may not be visible, and users and memberships that have been removed may still be visible.
@@ -420,16 +424,16 @@ _kpasswd._udp IN SRV 0 100 464 ipaserver.example.com</pre></div
negative-time-to-live group 60
positive-time-to-live hosts 3600
negative-time-to-live hosts 20
-</pre></div><div class="section" id="DNS-DNS_and_Kerberos"><div class="titlepage"><div><div><h5 class="title" id="DNS-DNS_and_Kerberos">2.1.3.5.4. DNS and Kerberos</h5></div></div></div><div class="para">
- The Kerberos server requires a valid DNS A record, and reverse DNS needs to work correctly. It is safe to use CNAMEs if they point to the A name that corresponds to the principal name used to create SPNs (service principal names) for the host. Avoid the use of DDNS names, however.
+</pre></div><div class="section" id="DNS-DNS_and_Kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="DNS-DNS_and_Kerberos">2.1.3.6.3. DNS and Kerberos</h5></div></div></div><div class="para">
+ The Kerberos server requires a valid DNS A record, and reverse DNS needs to work correctly. It is safe to use CNAMEs if they point to the A name that corresponds to the principal name used to create service principal names (SPN) for the host. Avoid the use of DDNS names, however.
</div><div class="para">
If necessary, add the hostname to the <code class="filename">/etc/hosts</code> file, as long as the fully qualified hostname must be listed first. For example:
<pre class="programlisting">10.0.0.1 ipa.example.com ipa</pre>
The realm name does not have to match any or all of the domain name. For example, the domain name can be <code class="systemitem">example.com</code> and the realm name can be <code class="systemitem">TESTIPA</code>. It is only a convention that they match. FreeIPA adds the appropriate domain to realm mapping in the <code class="filename">/etc/krb5.conf</code> file.
</div><div class="para">
A typical resolver looks in the <code class="filename">/etc/hosts</code> file first and DNS second. If <code class="systemitem">nscd</code> is running this may also cause issues because it caches lookups. The FreeIPA installer does not kill <code class="systemitem">nscd</code> until after the installation process has started, so there can be cached entries that interfere with any changes to the <code class="filename">/etc/hosts</code>. If you need to edit the <code class="filename">/etc/hosts</code> file, kill the <code class="systemitem">nscd</code> daemon first.
- </div></div><div class="section" id="dns-and-forwarders"><div class="titlepage"><div><div><h5 class="title" id="dns-and-forwarders">2.1.3.5.5. FreeIPA DNS and DNS Forwarders</h5></div></div></div><div class="para">
- There is an option to configure DNS <span class="emphasis"><em>forwarders</em></span> as part of the FreeIPA DNS configuration. This is beneficial if there is limited direct access to root name servers, such as an organization's main DNS server or even an externam DNS server.
+ </div></div><div class="section" id="dns-and-forwarders"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="dns-and-forwarders">2.1.3.6.4. FreeIPA DNS and DNS Forwarders</h5></div></div></div><div class="para">
+ There is an option to configure DNS <span class="emphasis"><em>forwarders</em></span> as part of the FreeIPA DNS configuration. This is beneficial if there is limited direct access to root name servers, such as an organization's main DNS server or even an external DNS server.
</div><div class="para">
Either interactively or through the install argument, forwarders can be listed as a comma-separated list of IP addresses.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
@@ -440,7 +444,7 @@ negative-time-to-live hosts 20
forwarders { 10.16.36.29; };
<strong class="userinput"><code>allow-recursion { any; };</code></strong></pre><div class="para">
This default behavior can be changed by changing the <code class="command">allow-recursion</code> statement. The name server documentation has more details on editing configuration statements.
- </div></div></div><div class="section" id="Preparing_for_an_IPA_Installation-Configuring_Networking"><div class="titlepage"><div><div><h4 class="title" id="Preparing_for_an_IPA_Installation-Configuring_Networking">2.1.3.6. Networking</h4></div></div></div><div class="section" id="Configuring_Networking-Configuring_Networking_Services"><div class="titlepage"><div><div><h5 class="title" id="Configuring_Networking-Configuring_Networking_Services">2.1.3.6.1. Configuring Networking Services</h5></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Preparing_for_an_IPA_Installation-Configuring_Networking"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Preparing_for_an_IPA_Installation-Configuring_Networking">2.1.3.7. Networking</h4></div></div></div><div class="section" id="Configuring_Networking-Configuring_Networking_Services"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="Configuring_Networking-Configuring_Networking_Services">2.1.3.7.1. Configuring Networking Services</h5></div></div></div><div class="para">
The default networking service used by Fedora is NetworkManager, and due to the way this service works, it can cause problems with FreeIPA and the KDC. Consequently, it is highly recommended that you use the <code class="systemitem">network</code> service to manage the networking requirements in a FreeIPA environment and disable the NetworkManager service.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Boot the machine into single-user mode and run the following commands:
@@ -454,7 +458,7 @@ negative-time-to-live hosts 20
Ensure that static networking is correctly configured.
</div></li><li class="listitem"><div class="para">
Restart the system.
- </div></li></ol></div></div><div class="section" id="Configuring_Networking-Configuring_the_etchosts_File"><div class="titlepage"><div><div><h5 class="title" id="Configuring_Networking-Configuring_the_etchosts_File">2.1.3.6.2. Configuring the /etc/hosts File</h5></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_Networking-Configuring_the_etchosts_File"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="Configuring_Networking-Configuring_the_etchosts_File">2.1.3.7.2. Configuring the /etc/hosts File</h5></div></div></div><div class="para">
You need to ensure that your <code class="filename">/etc/hosts</code> file is configured correctly. A misconfigured file can prevent the FreeIPA command-line tools from functioning correctly and can prevent the FreeIPA web interface from connecting to the FreeIPA server.
</div><div class="para">
Configure the <code class="filename">/etc/hosts</code> file to list the FQDN for the FreeIPA server <span class="emphasis"><em>before</em></span> any aliases. Also ensure that the hostname is not part of the <code class="literal">localhost</code> entry. The following is an example of a valid hosts file:
@@ -463,7 +467,7 @@ negative-time-to-live hosts 20
192.168.1.1 ipaserver.example.com ipaserver
</pre><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
Do not omit the <code class="systemitem">IPv4</code> entry in the <code class="filename">/etc/hosts</code> file. This entry is required by the FreeIPA web service.
- </div></div></div></div></div></div></div><div class="section" id="Installing_the_IPA_Server_Packages"><div class="titlepage"><div><div><h2 class="title" id="Installing_the_IPA_Server_Packages">2.2. Installing the FreeIPA Server Packages</h2></div></div></div><div class="para">
+ </div></div></div></div></div></div></div><div class="section" id="Installing_the_IPA_Server_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Installing_the_IPA_Server_Packages">2.2. Installing the FreeIPA Server Packages</h2></div></div></div><div class="para">
Installing only the FreeIPA server requires a single package, . If the FreeIPA server will also manage a DNS server, then it requires two additional packages to set up the DNS.
</div><div class="para">
All of these packages can be installed using the <code class="command">yum</code> command:
@@ -471,7 +475,7 @@ negative-time-to-live hosts 20
Installing the <code class="filename">freeipa-server</code> also installs a large number of dependencies, such as <span class="package">389-ds-base</span> for the LDAP service and <span class="package">krb5-server</span> for the Kerberos service, along with FreeIPA tools.
</div><div class="para">
After the packages are installed, the server instance must be created using the <code class="command">ipa-server-install</code> command. The options for configuring the new server instance are described in <a class="xref" href="#creating-server">Section 2.3, “Creating a FreeIPA Server Instance”</a>.
- </div></div><div class="section" id="creating-server"><div class="titlepage"><div><div><h2 class="title" id="creating-server">2.3. Creating a FreeIPA Server Instance</h2></div></div></div><div class="para">
+ </div></div><div class="section" id="creating-server"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="creating-server">2.3. Creating a FreeIPA Server Instance</h2></div></div></div><div class="para">
The FreeIPA setup script creates a server instance, which includes configuring all of the required services for the FreeIPA domain:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
The network time daemon (ntpd)
@@ -492,8 +496,8 @@ negative-time-to-live hosts 20
</div></li></ul></div><div class="para">
The FreeIPA setup process can be minimal, where the administrator only supplies some required information, or it can be very specific, with user-defined settings for many parts of the FreeIPA services. The configuration is passed using arguments with the <code class="command">ipa-install-server</code> script.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The port numbers and directory locations used by FreeIPA are all defined automatically, as defined in <a class="xref" href="#prereq-ports">Section 2.1.3.3, “System Ports”</a> and . These ports and directories <span class="emphasis"><em>cannot</em></span> be changed or customized.
- </div></div></div><div class="section" id="install-command"><div class="titlepage"><div><div><h3 class="title" id="install-command">2.3.1. About ipa-server-install</h3></div></div></div><div class="para">
+ The port numbers and directory locations used by FreeIPA are all defined automatically, as defined in <a class="xref" href="#prereq-ports">Section 2.1.3.4, “System Ports”</a> and . These ports and directories <span class="emphasis"><em>cannot</em></span> be changed or customized.
+ </div></div></div><div class="section" id="install-command"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="install-command">2.3.1. About ipa-server-install</h3></div></div></div><div class="para">
A FreeIPA server instance is created by running the <code class="command">ipa-server-install</code> script. This script can accept user-defined settings for services, like DNS and Kerberos, that are used by the FreeIPA instance, or it can supply predefined values for minimal input from the administrator.
</div><div class="para">
While <code class="command">ipa-server-install</code> can be run without any options, so that it prompts for the required information, it has numerous arguments which allow the configuration process to be easily scripted or to supply additional information which is not requested during an interactive installation.
@@ -551,8 +555,8 @@ negative-time-to-live hosts 20
--idstart=<span class="emphasis"><em>number</em></span>
</td><td>
Sets the lower bound (starting value) for IDs which can be assigned by the FreeIPA server. The default value is randomly selected.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="install-interactive"><div class="titlepage"><div><div><h3 class="title" id="install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</h3></div></div></div><div class="para">
- All that is required to set up a FreeIPA server is to run the <code class="command">ipa-server-install</code> script. This launchs the script interactively, which prompts for the required information to set up a server, but without more advanced configuration like DNS and CA options.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="install-interactive"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</h3></div></div></div><div class="para">
+ All that is required to set up a FreeIPA server is to run the <code class="command">ipa-server-install</code> script. This launches the script interactively, which prompts for the required information to set up a server, but without more advanced configuration like DNS and CA options.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Run the <code class="command">ipa-server-install</code> script.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install</span></pre></li><li class="listitem"><div class="para">
@@ -617,7 +621,7 @@ Restarting the web server
Sample zone <span class="perl_BString">file</span> <span class="perl_Keyword">for</span> <span class="perl_Reserved">bind</span> has been created <span class="perl_Keyword">in</span> /tmp/sample.zone.ygzij5.db
==============================================================================
Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"><div class="para">
- Restart the <code class="systemitem">SSH</code> service to retrive the Kerberos principal and to refresh the name server switch (NSS) configuration file:
+ Restart the <code class="systemitem">SSH</code> service to retrieve the Kerberos principal and to refresh the name server switch (NSS) configuration file:
<pre class="programlisting"><span class="perl_Comment"># service sshd restart</span></pre>
</div></li><li class="listitem"><div class="para">
@@ -637,9 +641,9 @@ Password <span class="perl_Keyword">for</span> admin at EXAMPLE.COM:</pre></li><li
Member of <span class="perl_BString">groups</span>: admins
----------------------------
Number of entries returned 1
- ----------------------------</pre></li></ol></div></div><div class="section" id="install-examples"><div class="titlepage"><div><div><h3 class="title" id="install-examples">2.3.3. Examples of Creating the FreeIPA Server</h3></div></div></div><div class="para">
+ ----------------------------</pre></li></ol></div></div><div class="section" id="install-examples"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="install-examples">2.3.3. Examples of Creating the FreeIPA Server</h3></div></div></div><div class="para">
The way that a FreeIPA server is installed can be different depending on the network environment, security requirements within the organization, and the desired topology. These example illustrate some common options when installing the server. These examples are not mutually exclusive; it is entirely possible to use CA options, DNS options, and FreeIPA configuration options in the same server invocation. These are called out separately simply to make it more clear what each configuration area requires.
- </div><div class="section" id="install-normal"><div class="titlepage"><div><div><h4 class="title" id="install-normal">2.3.3.1. Non-Interactive Basic Installation</h4></div></div></div><div class="para">
+ </div><div class="section" id="install-normal"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="install-normal">2.3.3.1. Non-Interactive Basic Installation</h4></div></div></div><div class="para">
As shown in <a class="xref" href="#install-interactive">Section 2.3.2, “Setting up a FreeIPA Server: Basic Interactive Installation”</a>, only a few pieces of information are required to configured a FreeIPA server. While the setup script can prompt for this information in interactive mode, this information can also be passed with the setup command to allow automated and unattended configuration:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Passwords for the FreeIPA administrative user and the Directory Server super user (Directory Manager)
@@ -660,8 +664,8 @@ Hostname: ipa2.server.example.com
IP address: 1.2.3.4
Domain name: example.com</pre><div class="para">
Then the script runs through the configuration progress for each FreeIPA service, as in <a class="xref" href="#install-interactive">Section 2.3.2, “Setting up a FreeIPA Server: Basic Interactive Installation”</a>.
- </div></div></div><br class="example-break" /></div><div class="section" id="install-ca-options"><div class="titlepage"><div><div><h4 class="title" id="install-ca-options">2.3.3.2. Using Different CAs</h4></div></div></div><div class="para">
- The default installation of FreeIPA uses an integrated Dogtag Certificate System instance as a certificate authority to issue certificates. However, this configuration is not required. FreeIPA only requires <span class="emphasis"><em>a</em></span> certificate authority. This can be an external CA like Verisign or a corporate CA inconjunction with the internal Certificate System, or it can even be the FreeIPA server itself, using a self-signed certificate.
+ </div></div></div><br class="example-break" /></div><div class="section" id="install-ca-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="install-ca-options">2.3.3.2. Using Different CAs</h4></div></div></div><div class="para">
+ The default installation of FreeIPA uses an integrated Dogtag Certificate System instance as a certificate authority to issue certificates. However, this configuration is not required. FreeIPA only requires <span class="emphasis"><em>a</em></span> certificate authority. This can be an external CA like Verisign or a corporate CA in conjunction with the internal Certificate System, or it can even be the FreeIPA server itself, using a self-signed certificate.
</div><div class="para">
For the FreeIPA server itself to work as a CA, it uses a self-signed certificate, meaning that it approved and issued its own certificate. This is done by using the <code class="option">--selfsign</code> option with the <code class="command">ipa-server-install</code> command. When the FreeIPA server uses a self-signed certificate, the setup process is exactly the same as a normal installation, except that no Dogtag Certificate System instance is created. There is still a <code class="filename">cacert.p12</code> file created that can be used by replicas and the domain functions exactly the same. The only difference is what CA issues the certificates.
</div><div class="example" id="ex.selfsigned"><h6>Example 2.2. Using a Self-Signed Certificate</h6><div class="example-contents"><pre class="programlisting"><span class="perl_Comment"># ipa-server-install -a secret12 --hostname=ipa2.server.example.com -r EXAMPLE.COM -p secret12 -n example.com -U --selfsign</span></pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
@@ -689,7 +693,7 @@ The next step is to get /root/ipa.csr signed by your CA and re-run ipa-server-in
Rerun <code class="command">ipa-server-install</code>, specifying the locations and names of the certificate and CA chain files. For example:
</div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install --external_cert_file=/tmp/servercert20110601.p12 --external_ca_file=/tmp/cacert.p12</span></pre></li><li class="listitem"><div class="para">
Complete the setup process and verify that everything is working as expected, as in <a class="xref" href="#install-interactive">Section 2.3.2, “Setting up a FreeIPA Server: Basic Interactive Installation”</a>.
- </div></li></ol></div></div></div><br class="example-break" /></div><div class="section" id="install-dns"><div class="titlepage"><div><div><h4 class="title" id="install-dns">2.3.3.3. Using DNS</h4></div></div></div><div class="para">
+ </div></li></ol></div></div></div><br class="example-break" /></div><div class="section" id="install-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="install-dns">2.3.3.3. Using DNS</h4></div></div></div><div class="para">
FreeIPA can be configured to manage its own DNS, use an existing DNS, or not use DNS services at all (which is the default). Running the setup script alone does not configure DNS; this requires the <code class="option">--setup-dns</code> option.
</div><div class="para">
As with a basic setup, the DNS setup can either prompt for the required information or the DNS information can be passed with the script to allow an automatic or unattended setup process.
@@ -727,7 +731,9 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
Some kind of forwarder information is required. If no external forwarders will be used with the FreeIPA DNS service, then use the <code class="option">--no-forwarders</code> option to indicate that only root servers will be used.
</div><div class="para">
The script always assumes that reverse DNS is configured along with DNS, so it is not necessary to use any options to <span class="emphasis"><em>enable</em></span> reverse DNS. To disable reverse DNS, use the <code class="option">--no-reverse</code> option.
- </div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install ... --setup-dns --no-reverse</span></pre></div></div><br class="example-break" /></div></div><div class="section" id="troubleshooting-install"><div class="titlepage"><div><div><h3 class="title" id="troubleshooting-install">2.3.4. Troubleshooting Installation Problems</h3></div></div></div><div class="formalpara"><h5 class="formalpara" id="id3349652">GSS Failures When Running IPA Commands</h5>
+ </div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install ... --setup-dns --no-reverse</span></pre></div></div><br class="example-break" /></div></div><div class="section" id="troubleshooting-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="troubleshooting-install">2.3.4. Troubleshooting Installation Problems</h3></div></div></div><div class="para">
+ The server installation log is located in <code class="filename">/var/log/ipaserver-install.log</code>. The FreeIPA logs, both for the server and for FreeIPA-associated services, are covered in <a class="xref" href="#logging">Section 16.1.3, “Checking FreeIPA Server Logs”</a>.
+ </div><div class="formalpara"><h5 class="formalpara" id="id748795">GSS Failures When Running IPA Commands</h5>
Immediately after installation, there can be Kerberos problems when trying to run an <code class="command">ipa-*</code> command. For example:
</div><pre class="programlisting">ipa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may provide more information', 851968)/('Decrypt integrity check failed', -1765328353)</pre><div class="para">
There are two potential causes for this:
@@ -735,7 +741,7 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
DNS is not properly configured.
</div></li><li class="listitem"><div class="para">
Active Directory is in the same domain as the FreeIPA server.
- </div></li></ul></div><div class="formalpara"><h5 class="formalpara" id="id3132000">named Daemon Fails to Start</h5>
+ </div></li></ul></div><div class="formalpara"><h5 class="formalpara" id="id662354">named Daemon Fails to Start</h5>
If a FreeIPA server is configured to manage DNS and is set up successfully, but the <code class="systemitem">named</code> service fails to start, this can indicate that there is a package conflict. Check the <code class="filename">/var/log/messages</code> file for error messages related to the <code class="command">named</code> service and the <code class="filename">ldap.so</code> library:
</div><pre class="screen">ipaserver named[6886]: failed to dynamically load driver 'ldap.so': libldap-2.4.so.2: cannot open shared object file: No such file or directory</pre><div class="para">
This usually means that the <span class="package">bind-chroot</span> package is installed and is preventing the <code class="systemitem">named</code> service from starting. To resolve this issue, remove the <span class="package">bind-chroot</span> package and then restart the FreeIPA server.
@@ -743,7 +749,7 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
<span class="perl_Comment"></span>
<span class="perl_Comment"># ipactl restart</span></pre>
- </div></div></div><div class="section" id="Setting_up_IPA_Replicas"><div class="titlepage"><div><div><h2 class="title" id="Setting_up_IPA_Replicas">2.4. Setting up FreeIPA Replicas</h2></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Setting_up_IPA_Replicas"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_up_IPA_Replicas">2.4. Setting up FreeIPA Replicas</h2></div></div></div><div class="para">
In the FreeIPA domain, there are three types of machines:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Servers, which manage all of the services used by domain members
@@ -755,7 +761,7 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
A replica is a clone of a specific FreeIPA server. The server and replica share the same internal information about users, machines, certificates, and configured policies. These data are copied from the server to the replica in a process called <span class="emphasis"><em>replication</em></span>. The two Directory Server instances used by an FreeIPA server — the Directory Server instance used by the FreeIPA server as a data store and the Directory Server instance used by the Dogtag Certificate System to store certificate information — are replicated over to corresponding consumer Directory Server instances used by the FreeIPA replica.
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
If you are using the integrated Dogtag Certificate System instance as the CA for the FreeIPA domain, then it is possible to make a replica of a replica. It is <span class="emphasis"><em>not</em></span> possible to make a replica of a replica if you use the <code class="option">--selfsign</code> option for the original FreeIPA server.
- </div></div></div><div class="section" id="installing-replica"><div class="titlepage"><div><div><h3 class="title" id="installing-replica">2.4.1. Prepping and Installing the Replica Server</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="installing-replica"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="installing-replica">2.4.1. Prepping and Installing the Replica Server</h3></div></div></div><div class="para">
Replicas are functionally the same as FreeIPA servers, so they have the same installation requirements and packages.
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Make sure that the machine meets all of the prerequisites listed in <a class="xref" href="#Preparing_for_an_IPA_Installation">Section 2.1, “Preparing to Install the FreeIPA Server”</a>.
@@ -767,12 +773,12 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
If there is an existing Dogtag Certificate System or Red Hat Certificate System instance on the replica machine, make sure that port <code class="systemitem">7389</code> is free. This port is used by the master FreeIPA server to communicate with the replica.
</div></li><li class="listitem"><div class="para">
Make sure the appropriate ports are open on both the server and the replica machine during and after the replica configuration. Servers and replicas connect to each other over ports 9443, 9444, 9445, and 7389 during the replica configuration. Once the replica is set up, the server and replica communicate over port 7389.
- </div></li></ul></div></div><div class="section" id="creating-the-replica"><div class="titlepage"><div><div><h3 class="title" id="creating-the-replica">2.4.2. Creating the Replica</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Make sure that the replica machine exists in the server's DNS <span class="emphasis"><em>before</em></span> beginning to configure the replica. If the server cannot contact the replica machine during the configuration process, then the replica configuration fails. If necessary, add a DNS entry, as in <a class="xref" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Section 10.10, “Adding Records to DNS Zones”</a>.
+ </div></li></ul></div></div><div class="section" id="creating-the-replica"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-the-replica">2.4.2. Creating the Replica</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Make sure that the replica machine exists in the server's DNS <span class="emphasis"><em>before</em></span> beginning to configure the replica. If the server cannot contact the replica machine during the configuration process, then the replica configuration fails. If necessary, add a DNS entry, as in <a class="xref" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Section 8.9, “Adding Records to DNS Zones”</a>.
</div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
On the master server, create a <span class="emphasis"><em>replica information file</em></span>. This contains realm and configuration information taken from the master server which will be used to configure the replica server.
</div><div class="para">
- Run the <code class="command">ipa-replica-repare</code> command <span class="emphasis"><em>on the master FreeIPA server</em></span>. The command requires the fully-qualified domain name of the <span class="emphasis"><em>replica</em></span> machine. Using the <code class="option">--ip-address</code> option automatically creates DNS entries for the replication, including the A and PTR records for the replica to the DNS.
+ Run the <code class="command">ipa-replica-prepare</code> command <span class="emphasis"><em>on the master FreeIPA server</em></span>. The command requires the fully-qualified domain name of the <span class="emphasis"><em>replica</em></span> machine. Using the <code class="option">--ip-address</code> option automatically creates DNS entries for the replication, including the A and PTR records for the replica to the DNS.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-replica-prepare ipareplica.example.com --ip-address 192.168.1.2</span><span class="perl_Comment"></span>
<span class="perl_Comment"></span>
Determining current realm name
@@ -821,7 +827,7 @@ $ ipa dnsrecord-add example.com @ --ns-rec ipareplica.example.com.</pre>
</div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
Use the fully-qualified domain name of the replica, including the final period (.), otherwise BIND will treat the hostname as relative to the domain.
- </div></div></div></li></ol></div></div><div class="section" id="troubleshooting-replica-install"><div class="titlepage"><div><div><h3 class="title" id="troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</h3></div></div></div><div class="para">
+ </div></div></div></li></ol></div></div><div class="section" id="troubleshooting-replica-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</h3></div></div></div><div class="para">
If the replica installation fails on step 3 (<span class="bold bold"><strong>[3/11]: configuring certificate server instance</strong></span>), that usually means that the required port is not available. This can be verified by checking the debug logs for the CA, <code class="filename">/var/log/pki-ca/debug</code>, which may show error messages about being unable to find certain entries. For example:
<pre class="screen">[04/Feb/2011:22:29:03][http-9445-Processor25]: DatabasePanel
comparetAndWaitEntries ou=people,o=ipaca not found, let's wait</pre>
@@ -832,7 +838,7 @@ comparetAndWaitEntries ou=people,o=ipaca not found, let's wait</pre>
</div><div class="para">
After uninstalling the replica, ensure that port 7389 on the replica is available, and retry the replica installation.
- </div></div></div><div class="section" id="Uninstalling_IPA_Servers"><div class="titlepage"><div><div><h2 class="title" id="Uninstalling_IPA_Servers">2.5. Uninstalling FreeIPA Servers and Replicas</h2></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Uninstalling_IPA_Servers"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Uninstalling_IPA_Servers">2.5. Uninstalling FreeIPA Servers and Replicas</h2></div></div></div><div class="para">
To uninstall both a FreeIPA server and a FreeIPA replica, pass the <code class="option">--uninstall</code> option to the <code class="command">ipa-server-install</code> command:
<pre class="programlisting"><span class="perl_Comment"># ipa-server-install --uninstall</span></pre>
@@ -844,7 +850,7 @@ comparetAndWaitEntries ou=people,o=ipaca not found, let's wait</pre>
This chapter explains how to configure a system to join a FreeIPA domain.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Clients can only be configured after at least one FreeIPA server has been installed.
- </div></div></div><div class="section" id="what-happens-clients"><div class="titlepage"><div><div><h2 class="title" id="what-happens-clients">3.1. What Happens in Client Setup</h2></div></div></div><div class="para">
+ </div></div></div><div class="section" id="what-happens-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="what-happens-clients">3.1. What Happens in Client Setup</h2></div></div></div><div class="para">
Whether the client configuration is performed automatically on Fedora systems using the client setup script or manually on other systems, the general process of configuring a machine to serve as a FreeIPA client is mostly the same, with slight variation depending on the platform:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Retrieve the CA certificate for the FreeIPA CA.
@@ -880,7 +886,7 @@ example.com = EXAMPLE.COM
Configures SSSD or LDAP/KRB5, including NSS and PAM configuration files.
</div></li><li class="listitem"><div class="para">
Configure NTP.
- </div></li></ul></div></div><div class="section" id="Installing_the_IPA_Client_on_Linux"><div class="titlepage"><div><div><h2 class="title" id="Installing_the_IPA_Client_on_Linux">3.2. Configuring a Fedora System as a FreeIPA Client</h2></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="Installing_the_IPA_Client_on_Linux"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Installing_the_IPA_Client_on_Linux">3.2. Configuring a Fedora System as a FreeIPA Client</h2></div></div></div><div class="para">
There are two elements to prepare before beginning the client setup process for the Fedora client:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
There must be a way to connect the client machine to the Kerberos domain, either by having an available Kerberos identity (such as the admin user) or by manually adding the client machine to the KDC on the server with a one-time password before beginning the enrollment process for the client machine.
@@ -900,6 +906,8 @@ example.com = EXAMPLE.COM
Run the client setup command.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-client-install --enable-dns-updates</span></pre><div class="para">
The <code class="option">--enable-dns-updates</code> option updates DNS with the client machine's IP address. Other options for <code class="command">ipa-client-install</code> are listed in <a class="xref" href="#ipa-client-install">Section B.6.1, “ipa-client-install”</a>.
+ </div><div class="para">
+ When using the <code class="option">--server</code> option to specify the FreeIPA server to register with, the server name must be a fully-qualified domain name.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
There is an <code class="option">--on-master</code> option that is used as part of configuring an FreeIPA server (which also is an FreeIPA client, since it is within the domain). This option should <span class="emphasis"><em>never</em></span> be used when configuring a regular FreeIPA client, because it results in slightly different client configuration which may not work on a non-FreeIPA server machine.
</div></div></div></li><li class="listitem"><div class="para">
@@ -961,7 +969,7 @@ $ <span class="perl_BString">getent</span> group ipausers</pre></li><li class="l
</div></li><li class="listitem"><div class="para">
Test the NFS-Kerberos configuration:
- </div><pre class="programlisting"><span class="perl_Comment"># mount -v -t nfs4 -o sec=krb5 ipaserver.example.com:/ /mnt</span></pre></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_Solaris">3.3. Configuring a Solaris System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris_10"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</h3></div></div></div><div class="orderedlist"><ol><li class="listitem" id="st.sol1"><div class="para">
+ </div><pre class="programlisting"><span class="perl_Comment"># mount -v -t nfs4 -o sec=krb5 ipaserver.example.com:/ /mnt</span></pre></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_Solaris">3.3. Configuring a Solaris System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris_10"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</h3></div></div></div><div class="orderedlist"><ol><li class="listitem" id="st.sol1"><div class="para">
As with Fedora systems, FreeIPA provides an automated method of configuring Solaris 10 to function as a FreeIPA client. On the Solaris client, run the <code class="command">ldapclient</code> with the name of the FreeIPA domain:
</div><pre class="programlisting"><span class="perl_Comment"># ldapclient init ipa.example.com -v</span></pre><div class="para">
When the command is run, it creates a configuration profile that will automatically set up the necessary PAM and <code class="filename">/etc/ldap.conf</code> configuration.
@@ -1044,7 +1052,7 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
ktutil: <span class="perl_BString">write</span>_kt /etc/krb5/krb5.keytab
ktutil: q</pre>
- </div></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Perform steps <a class="xref" href="#st.sol1">1</a> through <a class="xref" href="#st.sol3">4</a> in <a class="xref" href="#Configuring_an_IPA_Client_on_Solaris_10">Section 3.3.1, “Configuring Solaris 10”</a> to set up the Solaris 9 client.
</div></li><li class="listitem"><div class="para">
Configure the <code class="filename">/etc/pam.conf</code> file to use PAM Kerberos. For example:
@@ -1054,11 +1062,11 @@ login auth sufficient pam_unix.so.1 use_first_pass
login auth required pam_dhkeys.so.1
login auth required pam_unix_auth.so.1
login auth required pam_dial_auth.so.1
-</pre></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_HP_UX">3.4. Configuring an HP-UX System as a FreeIPA</h2></div></div></div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
+</pre></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_HP_UX">3.4. Configuring an HP-UX System as a FreeIPA</h2></div></div></div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
The FreeIPA client installation process requires that a FreeIPA server already exist.
- </div></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</h3></div></div></div><div class="para">
Configure and enable NTP and make sure that time is synchronized between the client and the FreeIPA server.
- </div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Install the <code class="filename">ldapux</code> client.
</div><pre class="programlisting"> <span class="perl_Comment"># swinstall -s J4269AA_B.04.15.01_HP-UX_B.11.23_IA_PA.depot</span></pre></li><li class="listitem"><div class="para">
Change to the configuration directory, and run the setup script.
@@ -1116,7 +1124,7 @@ Do you want to create custom search descriptors? [ No ]
enable=yes
</pre>
- </div></li></ol></div></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</h3></div></div></div><div class="para">
Edit the <code class="filename">/etc/krb5.conf</code> file to reflect the Kerberos domain used by the FreeIPA server. Setting up the Kerberos configuration includes specifying the realm and domain details, and default ticket attributes. Forwardable tickets are configured by default, which facilitates connection to the administration interface from any operating system, and also provides for auditing of administration operations. For example:
</div><pre class="programlisting">[libdefaults]
default_realm = EXAMPLE.COM
@@ -1140,9 +1148,9 @@ example.com = EXAMPLE.COM
kinit = {
forwardable = true
}
-</pre></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_PAM"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</h3></div></div></div><div class="para">
+</pre></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_PAM"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</h3></div></div></div><div class="para">
The PAM configuration differs slightly between different versions of HP-UX.
- </div><div class="section" id="Configuring_PAM-HP_UX_11i_v2"><div class="titlepage"><div><div><h4 class="title" id="Configuring_PAM-HP_UX_11i_v2">3.4.4.1. HP-UX 11i v2</h4></div></div></div><div class="para">
+ </div><div class="section" id="Configuring_PAM-HP_UX_11i_v2"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_PAM-HP_UX_11i_v2">3.4.4.1. HP-UX 11i v2</h4></div></div></div><div class="para">
Edit the <code class="filename">/etc/pam.conf</code> file so that all of the required modules are loaded for authentication. For example:
</div><pre class="programlisting">#
# PAM configuration
@@ -1228,7 +1236,7 @@ dtaction password required libpam_hpsec.so.1
dtaction password sufficient libpam_krb5.so.1
dtaction password required libpam_unix.so.1
OTHER password required libpam_unix.so.1
-</pre></div><div class="section" id="Configuring_PAM-HP_UX_11i_v1"><div class="titlepage"><div><div><h4 class="title" id="Configuring_PAM-HP_UX_11i_v1">3.4.4.2. HP-UX 11i v1</h4></div></div></div><div class="para">
+</pre></div><div class="section" id="Configuring_PAM-HP_UX_11i_v1"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_PAM-HP_UX_11i_v1">3.4.4.2. HP-UX 11i v1</h4></div></div></div><div class="para">
Edit the <code class="filename">/etc/pam.conf</code> file to reflect the following example:
</div><pre class="programlisting">#
# PAM configuration
@@ -1289,7 +1297,7 @@ dtlogin password required /usr/lib/security/libpam_unix.1
dtaction password sufficient /usr/lib/security/libpam_krb5.1
dtaction password required /usr/lib/security/libpam_unix.1
OTHER password required /usr/lib/security/libpam_unix.1
-</pre></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+</pre></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Ensure that you have version A.05.10.007 or later of <code class="command">ssh</code> installed. A current package can be downloaded from the HP website at <a href="http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA">http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA</a>.
</div></li><li class="listitem"><div class="para">
Edit the <code class="filename">/etc/opt/ssh/ssh_config</code> file:
@@ -1315,8 +1323,8 @@ OTHER password required /usr/lib/security/libpam_unix.1
Create the host keytab file.
</div><pre class="programlisting"> <span class="perl_Comment"># ipa-getkeytab -s ipaserver.example.com -p host/hpuxipaclient.example.com -k /tmp/krb5.keytab -e des-cbc-crc</span></pre></li><li class="listitem"><div class="para">
Copy this keytab to the HP-UX machine, and save it as <code class="filename">/etc/krb5/krb5.keytab</code>.
- </div><pre class="programlisting"> <span class="perl_Comment"># scp /tmp/krb5.keytab root at hpuxipaclient.example.com:/etc/krb5/krb5.keytab</span></pre></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</h3></div></div></div><div class="para">
- HP-UX systems provide the <code class="systemitem">pam_authz</code> PAM module, which can be used to control login access to the system based on a user's group membership. For details on how to configure access control with this module, see the HP documenttion at <a href="http://docs.hp.com/en/B3921-60631/pam_authz.5.html">http://docs.hp.com/en/B3921-60631/pam_authz.5.html</a>.
+ </div><pre class="programlisting"> <span class="perl_Comment"># scp /tmp/krb5.keytab root at hpuxipaclient.example.com:/etc/krb5/krb5.keytab</span></pre></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</h3></div></div></div><div class="para">
+ HP-UX systems provide the <code class="systemitem">pam_authz</code> PAM module, which can be used to control login access to the system based on a user's group membership. For details on how to configure access control with this module, see the HP documentation at <a href="http://docs.hp.com/en/B3921-60631/pam_authz.5.html">http://docs.hp.com/en/B3921-60631/pam_authz.5.html</a>.
</div><div class="example" id="ex.hp-pam-authz-mod"><h6>Example 3.1. pam_authz.policy File: Allow User Access, Deny Admin Access</h6><div class="example-contents"><div class="para">
This configuration in <code class="filename">/etc/opt/ldapux/pam_authz.policy</code> prevents the admin user from logging in while still allowing regular users to log in.
</div><pre class="programlisting">
@@ -1353,7 +1361,7 @@ OTHER password required /usr/lib/security/libpam_unix.1
deny:unix_group:admins
allow:unix_local_user
-</pre></div></div><br class="example-break" /></div><div class="section" id="hp-test"><div class="titlepage"><div><div><h3 class="title" id="hp-test">3.4.7. Testing the Configuration</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+</pre></div></div><br class="example-break" /></div><div class="section" id="hp-test"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hp-test">3.4.7. Testing the Configuration</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
By default, the admin user is given <code class="command">/bin/bash</code> as the shell to use and <code class="filename">/home/admin</code> as the home directory. It may be necessary to install bash to be able to log in.
</div></div></div><div class="para">
There are three quick ways to check the Kerberos and PAM configuration for the HP client:
@@ -1364,7 +1372,7 @@ allow:unix_local_user
Attempt to log into the HP machine from another machine in the domain using SSH. The admin user should be able to log in using SSH without being asked for a password.
</div><pre class="programlisting"> <span class="perl_Comment"># ssh admin at hpuxipaclient.example.com</span></pre></li><li class="listitem"><div class="para">
Log into the FreeIPA web UI using the administrator credentials on the HP machine.
- </div></li></ul></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_AIX">3.5. Configuring an AIX System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Prerequisites"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</h3></div></div></div><div class="para">
+ </div></li></ul></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_AIX">3.5. Configuring an AIX System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Prerequisites"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</h3></div></div></div><div class="para">
Make sure that all of these packages are installed on the AIX machine before beginning the client configuration:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
v5.3 OS
@@ -1388,7 +1396,7 @@ allow:unix_local_user
modcrypt.base (for gssd)
</div></li></ul></div><div class="para">
Configure and enable NTP and make sure that time is synchronized between the client and the FreeIPA server.
- </div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</h3></div></div></div><div class="para">
Setting up an AIX client requires setting up the client to work in the FreeIPA Kerberos domain and, optionally, to enable SSH authentication to the AIX client using FreeIPA credentials.
</div><div class="para">
Kerberos configuration includes specifying the realm and domain details, and default ticket attributes. Forwardable tickets are configured by default, which facilitates connection to the administration interface from any operating system, and also provides for auditing of administration operations. For example:
@@ -1514,11 +1522,11 @@ userPassword: secretpassword
To test the SSH configuration, try to log in as the admin user using SSH without providing a password.
</div><pre class="programlisting"> <span class="perl_Comment"># ssh admin at ipaclient.example.com</span></pre></li></ol></div></li></ol></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
By default, the admin user is given <code class="command">/bin/bash</code> as the shell to use and <code class="filename">/home/admin</code> as the home directory. It may be necessary to install bash to be able to log in.
- </div></div></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</h2></div></div></div><div class="para">
+ </div></div></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</h2></div></div></div><div class="para">
These instructions are specific to Mac OS X 10.4 (Tiger) because this version includes the required Kerberos tools by default.
- </div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</h3></div></div></div><div class="para">
+ </div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</h3></div></div></div><div class="para">
Configuring the Macintosh to use Kerberos for authentication with FreeIPA is a two-step process. First, Kerberos needs to be correctly installed and configured. Then, Kerberos authentication needs to be enabled.
- </div><div class="section" id="Configuring_Kerberos_Authentication-Configuring_Kerberos"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Kerberos_Authentication-Configuring_Kerberos">3.6.1.1. Configuring Kerberos</h4></div></div></div><div class="para">
+ </div><div class="section" id="Configuring_Kerberos_Authentication-Configuring_Kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Kerberos_Authentication-Configuring_Kerberos">3.6.1.1. Configuring Kerberos</h4></div></div></div><div class="para">
Setting up the Kerberos configuration includes specifying the realm and domain details, and default ticket attributes. Forwardable tickets are configured by default, which facilitates connection to the administration interface from any operating system, and also provides for auditing of administration operations. For example, this is the Kerberos configuration for Fedora systems:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Make sure that the Kerberos version is 4.2 or higher. The Kerberos directory is <code class="filename">/System/Library/CFMSupport/Kerberos</code>. If that directory does not exist or is the wrong version, install the Kerberos Extras support.
@@ -1557,7 +1565,7 @@ EXAMPLE.COM = {
default_domain = example.com
kdc = ipaserver.example.com:88
}
-</pre></li></ol></div></div><div class="section" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication">3.6.1.2. Enabling Kerberos Authentication</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+</pre></li></ol></div></div><div class="section" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication">3.6.1.2. Enabling Kerberos Authentication</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as the admin user and launch a terminal.
</div></li><li class="listitem"><div class="para">
Change to the <code class="filename">/private/etc</code> directory and make a backup of the existing authorization file.
@@ -1579,7 +1587,7 @@ EXAMPLE.COM = {
GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
Restart the machine to enable Kerberos authentication.
- </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</h3></div></div></div><div class="section" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration"><div class="titlepage"><div><div><h4 class="title" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration">3.6.2.1. Creating the LDAP Configuration</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</h3></div></div></div><div class="section" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration">3.6.2.1. Creating the LDAP Configuration</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Launch the Directory Access utility.
</div></li><li class="listitem"><div class="para">
In the <span class="guilabel"><strong>Services</strong></span> tab, clear all check boxes except LDAPv3 and Bonjour.
@@ -1597,7 +1605,7 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
Enter the configuration name, such as <code class="command">FreeIPA LDAP</code>.
</div></li><li class="listitem"><div class="para">
Select the <span class="guilabel"><strong>Enable</strong></span> checkbox, and clear the <span class="guilabel"><strong>SSL</strong></span> checkbox.
- </div></li></ol></div></div><div class="section" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options"><div class="titlepage"><div><div><h4 class="title" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options">3.6.2.2. Setting up the LDAP Service Configuration Options</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options">3.6.2.2. Setting up the LDAP Service Configuration Options</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Select the newly-created LDAP configuration, and click <span class="guibutton"><strong>Edit</strong></span>.
</div></li><li class="listitem"><div class="para">
In the <span class="guilabel"><strong>Connection</strong></span> tab, specify the connection settings:
@@ -1667,7 +1675,7 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
UniqueID and uidNumber
</div></li></ul></div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>OK</strong></span> to finish setting up the LDAP service configuration options.
- </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
In the <span class="guilabel"><strong>Authentication</strong></span> tab, change the <span class="guilabel"><strong>Search</strong></span> value to <span class="guilabel"><strong>Custom path</strong></span>.
</div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>Add</strong></span>.
@@ -1675,9 +1683,9 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
Select the configuration created in <a class="xref" href="#Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options">Section 3.6.2.2, “Setting up the LDAP Service Configuration Options”</a>, and click <span class="guibutton"><strong>Add</strong></span>.
</div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>Apply</strong></span> to update the LDAP configuration.
- </div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</h3></div></div></div><div class="para">
Open the Date and Time utility and point it to the FreeIPA server URL to set the date and time automatically.
- </div></div><div class="section" id="testing-config-on-mac"><div class="titlepage"><div><div><h3 class="title" id="testing-config-on-mac">3.6.5. Testing the Configuration</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="testing-config-on-mac"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="testing-config-on-mac">3.6.5. Testing the Configuration</h3></div></div></div><div class="para">
If client authentication is properly configured, a user can connect to the FreeIPA server using SSH without being prompted for a password.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Obtain a Kerberos ticket for the admin user.
@@ -1706,13 +1714,15 @@ Valid starting Expires Service principal
Kerberos 4 ticket cache: /tmp/tkt10678
klist: You have no tickets cached</pre>
- </div></li></ol></div></div></div><div class="section" id="troubleshooting-client-install"><div class="titlepage"><div><div><h2 class="title" id="troubleshooting-client-install">3.7. Troubleshooting Client Installations</h2></div></div></div><a id="id3374826" class="indexterm"></a><a id="id3374842" class="indexterm"></a><div class="para">
+ </div></li></ol></div></div></div><div class="section" id="troubleshooting-client-install"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="troubleshooting-client-install">3.7. Troubleshooting Client Installations</h2></div></div></div><a id="id651459" class="indexterm"></a><a id="id651475" class="indexterm"></a><div class="para">
+ The client installation log is located in <code class="filename">/var/log/ipaclient-install.log</code>. The FreeIPA logs, both for the server and client and for FreeIPA-associated services, are covered in <a class="xref" href="#logging">Section 16.1.3, “Checking FreeIPA Server Logs”</a>.
+ </div><div class="para">
These are some issues and workarounds for client installation problems.
- </div><div class="formalpara"><h5 class="formalpara" id="id3086267">The client can't resolve reverse hostnames when using an external DNS.</h5>
+ </div><div class="formalpara"><h5 class="formalpara" id="id589703">The client can't resolve reverse hostnames when using an external DNS.</h5>
While FreeIPA can host its own DNS server as part of the domain services, it can also use external DNS name server. However, because of some of the limitations of reverse DNS, there can be problems with resolving reverse lookups if the external DNS is listed in the client's <code class="filename">/etc/resolv.conf</code> file or if there are other resources on the network with SRV records, like Active Directory.
</div><div class="para">
The problem is that the external DNS name server returns the wrong hostname for the FreeIPA server.
- </div><a id="id3086295" class="indexterm"></a><a id="id3392421" class="indexterm"></a><div class="para">
+ </div><a id="id986171" class="indexterm"></a><a id="id986182" class="indexterm"></a><div class="para">
One way this exhibits is errors with finding the FreeIPA server in the Kerberos database:
</div><pre class="screen">Jun 30 11:11:48 server1 krb5kdc[1279](info): AS_REQ (4 etypes {18 17 16 23}) 192.168.60.135: NEEDED_PREAUTH: admin EXAMPLE COM for krbtgt/EXAMPLE COM EXAMPLE COM, Additional pre-authentication required
Jun 30 11:11:48 server1 krb5kdc[1279](info): AS_REQ (4 etypes {18 17 16 23}) 192.168.60.135: ISSUE: authtime 1309425108, etypes {rep=18 tkt=18 ses=18}, admin EXAMPLE COM for krbtgt/EXAMPLE COM EXAMPLE COM
@@ -1724,24 +1734,135 @@ Jun 30 11:11:49 server1 krb5kdc[1279](info): TGS_REQ (4 etypes {18 17 16 23}) 19
Add reverse lookup records for each FreeIPA server.
</div></li><li class="listitem"><div class="para">
Give the FreeIPA client or domain a subnet and forward all requests for that subnet.
- </div></li></ul></div></div><div class="section" id="uninstalling-clients"><div class="titlepage"><div><div><h2 class="title" id="uninstalling-clients">3.8. Uninstalling a FreeIPA Client</h2></div></div></div><a id="id3096595" class="indexterm"></a><a id="id3096607" class="indexterm"></a><div class="para">
+ </div></li></ul></div></div><div class="section" id="uninstalling-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="uninstalling-clients">3.8. Uninstalling a FreeIPA Client</h2></div></div></div><a id="id899637" class="indexterm"></a><a id="id828244" class="indexterm"></a><div class="para">
For Fedora clients, the <code class="command">ipa-client-install</code> utility can be used to uninstall the client and remove it from the FreeIPA domain. To remove the client, use the <code class="option">--uninstall</code> option.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-client-install --uninstall</span></pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
There is an uninstall option with the <code class="command">ipa-join</code> command. This is called by <code class="command">ipa-client-install --uninstall</code> as part of the uninstallation process. However, while the <code class="command">ipa-join</code> option removes the client from the domain, it does not actually uninstall the client or properly remove all of the FreeIPA-related configuration. Do not run <code class="command">ipa-join -u</code> to attempt to uninstall the FreeIPA client. The only way to uninstall a client completely is to use <code class="command">ipa-client-install --uninstall</code>.
- </div></div></div></div></div><div xml:lang="en-US" class="chapter" id="basic-usage" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 4. Basic Usage</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#running-scripts">4.1. Running FreeIPA Tools</a></span></dt><dt><span class="section"><a href="#logging-in">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="#checking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="#opening-the-web-ui">4.3. Opening the FreeIPA Web UI</a></span></dt><dt
><span class="section"><a href="#config-browser">4.4. Configuring the Browser</a></span></dt><dt><span class="section"><a href="#Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System">4.5. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="#Enabling_UsernamePassword_Authentication_in_Your_Browser">4.6. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="#Troubleshooting-UI">4.7. Troubleshooting UI Connection Problems</a></span></dt></dl></div><div class="para">
+ </div></div></div></div></div><div xml:lang="en-US" class="chapter" id="basic-usage" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 4. Basic Usage</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-client-tools">4.1. About the FreeIPA Client Tools</a></span></dt><dd><dl><dt><span class="section"><a href="#about-cli-tools">4.1.1. About the FreeIPA Command-Line Tools</a></span></dt><dt><span class="section"><a href="#ipa-ui">4.1.2. Looking at the FreeIPA UI</a></span></dt></dl></dd><dt><span class="section"><a href="#logging-in">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="#checking-current-creds">4.2.3. Checking the Current Logged in User</a
></span></dt><dt><span class="section"><a href="#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="#using-the-ui">4.3. Using the FreeIPA Web UI</a></span></dt><dd><dl><dt><span class="section"><a href="#opening-the-web-ui">4.3.1. Opening the FreeIPA Web UI</a></span></dt><dt><span class="section"><a href="#config-browser">4.3.2. Configuring the Browser</a></span></dt><dt><span class="section"><a href="#Using_a_Browser_on_Another_System">4.3.3. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="#Enabling_UsernamePassword_Authentication_in_Your_Browser">4.3.4. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="#Troubleshooting-UI">4.3.5. Troubleshooting UI Connection Problems</a></span></dt></dl></dd></dl></div><div class="para">
All of the access to FreeIPA, both through the web UI and through the command line, is done by a user authenticating to the FreeIPA domain. This chapter covers the basics of setting up browsers to handle Kerberos authentication, logging into FreeIPA, and troubleshooting some common connection issues.
- </div><div class="section" id="running-scripts"><div class="titlepage"><div><div><h2 class="title" id="running-scripts">4.1. Running FreeIPA Tools</h2></div></div></div><div class="para">
- The FreeIPA command-line tools are run as any other utilities in a shell. If there are special characters in the command — such as angle brackets (> and <), ampersands (&), asterisks (*), and pipes (|) — the characters must be escaped. Otherwise, the command fails because the shell cannot properly parse the unescaped characters.
- </div></div><div class="section" id="logging-in"><div class="titlepage"><div><div><h2 class="title" id="logging-in">4.2. Logging into FreeIPA</h2></div></div></div><div class="para">
+ </div><div class="section" id="about-client-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-client-tools">4.1. About the FreeIPA Client Tools</h2></div></div></div><div class="para">
+ FreeIPA creates a domain of recognized services, host machines, and users with universally-applied authentication sources and common policies. From the perspective of a client machine and a FreeIPA user, the domain itself is fairly transparent after the initial configuration. All users need to do is log into the domain using Kerberos, and that's it.
+ </div><div class="para">
+ However, an administrator has two ongoing tasks: add principals to the FreeIPA Kerberos domain and set the domain policies and server configuration that govern domain interactions. FreeIPA has both command-line and web-based interfaces for administrators to use to manage the domain, services, and FreeIPA entries.
+ </div><div class="section" id="about-cli-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-cli-tools">4.1.1. About the FreeIPA Command-Line Tools</h3></div></div></div><div class="para">
+ The most common method to maintain the domain is using the command-line tools. FreeIPA has an incredibly broad set of scripts and commands that are available to administrators. The command-line scripts offer a number of benefits:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The scripts allow management tasks to be automated and performed repeatedly in a consistent way without manual intervention.
+ </div></li><li class="listitem"><div class="para">
+ Entries can be added with all possible attributes configured (or a desired subset of attributes) in a single step. The web UI frequently requires two steps to fully configure an entry: the first to create the entry and the next to add optional attributes.
+ </div></li><li class="listitem"><div class="para">
+ The command-line scripts support adding additional attributes which may not be available in the UI or even custom attributes to entries, if the schema is configured.
+ </div></li></ul></div><div class="para">
+ The potential disadvantage to the command-line scripts is that they are complex, which makes them difficult to use.
+ </div><div class="section" id="ipa-tool"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-tool">4.1.1.1. ipa and Other Command-Line Scripts</h4></div></div></div><div class="para">
+ There are two basic categories of command-line scripts that FreeIPA has available.
+ </div><div class="para">
+ The first is a selection of independent configuration scripts which are used to set up machines that operate within the domain. Most commonly, these are scripts to add machines to the domain (including <code class="command">ipa-server-install</code>, <code class="command">ipa-client-install</code>, and <code class="command">ipa-replica-install</code>). Some scripts are also available to enable services within the FreeIPA server. The domain server has a large number of different installation options and services — such as DNS, certificate services, and NIS management. All of these can be enabled at the time the server is set up, but none of those services are required. If a server is configured without a service like DNS, that service can be enabled later using a specific installation script, such as <code class="command">ipa-dns-install</code>.
+ </div><div class="para">
+ The real management functions of the domain are carried out with a single script: <code class="command">ipa</code>. The <code class="command">ipa</code> command is essentially a big plug-in container, and it supports dozens of plug-ins which it executes as subcommands. For example, adding a user is done using the <code class="command">user-add</code> plug-in, which is run like a <code class="command">user-add</code> subcommand:
+ </div><pre class="screen">ipa user-add <em class="replaceable"><code>options</code></em></pre><div class="para">
+ Related subcommands are grouped together into <span class="emphasis"><em>plug-in modules</em></span>. Commands for managing DNS entries like <code class="command">dnszone-add</code> and <code class="command">dnsrecord-add</code> all belong to the <span class="emphasis"><em>dns</em></span> module or <span class="emphasis"><em>topic</em></span>. All of the information for managing a specific area, with all of the supported commands and examples for each, are available by viewing the help for that topic:
+ </div><pre class="screen">ipa help <em class="replaceable"><code>topic</code></em></pre></div><div class="section" id="running-scripts"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="running-scripts">4.1.1.2. Tips for Running FreeIPA Tools</h4></div></div></div><div class="para">
+ The FreeIPA command-line tools are run as any other utilities in a shell. If there are special characters in the command — such as angle brackets (> and <), ampersands (&), asterisks (*), and pipes (|) — the characters must be escaped. Otherwise, the command fails because the shell cannot properly parse the unescaped characters.
+ </div></div></div><div class="section" id="ipa-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-ui">4.1.2. Looking at the FreeIPA UI</h3></div></div></div><div class="para">
+ The FreeIPA web UI is designed for simplicity. This was the primary design goal, and this means that the web UI offers benefits that make using FreeIPA simpler and clearer:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ It shows instant, visual relationships between entries (such as a user and all the groups, sudo rules, netgroups, and policies which are associated with that user).
+ </div></li><li class="listitem"><div class="para">
+ All entries are listed immediately without having to run a search. This makes it possible to browse entries. The UI also has a simple search box which quickly filters the list of entries.
+ </div></li><li class="listitem"><div class="para">
+ The interface is intuitive to use, without having to learn the command-line tools.
+ </div></li><li class="listitem"><div class="para">
+ The web UI can be accessed from machines outside the FreeIPA domain, so the domain can be managed from anywhere.
+ </div></li></ul></div><div class="section" id="ui-layout"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ui-layout">4.1.2.1. The UI Layout</h4></div></div></div><div class="para">
+ The web UI has three major functional areas which correspond to each of the major functions of FreeIPA: identity management, policy management, and domain configuration.
+ </div><div class="table" id="tab.ui-tasks"><h6>Table 4.1. Configuration Areas Per Tab</h6><div class="table-contents"><table summary="Configuration Areas Per Tab" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Main Menu Tab
+ </th><th>
+ Configuration Areas
+ </th></tr></thead><tbody><tr><td>
+ Identity
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ User entries
+ </div></li><li class="listitem"><div class="para">
+ User groups entries
+ </div></li><li class="listitem"><div class="para">
+ Host/client entries
+ </div></li><li class="listitem"><div class="para">
+ Host group entries
+ </div></li><li class="listitem"><div class="para">
+ Netgroups entries
+ </div></li><li class="listitem"><div class="para">
+ Domain services entries
+ </div></li><li class="listitem"><div class="para">
+ DNS (if configured)
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ Policy
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Host-based access control
+ </div></li><li class="listitem"><div class="para">
+ Sudo rules
+ </div></li><li class="listitem"><div class="para">
+ Automount locations
+ </div></li><li class="listitem"><div class="para">
+ User password policies
+ </div></li><li class="listitem"><div class="para">
+ Kerberos ticket policies
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ Configuration
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Role-based access control (permissions based on group membership)
+ </div></li><li class="listitem"><div class="para">
+ Self permissions
+ </div></li><li class="listitem"><div class="para">
+ Delegations (user access control over other users)
+ </div></li><li class="listitem"><div class="para">
+ Server-wide configuration
+ </div></li></ul></div>
+
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
+ The <span class="emphasis"><em>main menu</em></span> at the top of every page has three tabs which correspond to the functional areas listed in <a class="xref" href="#tab.ui-tasks">Table 4.1, “Configuration Areas Per Tab”</a>. When a tab is selected, there is a submenu of the different configuration areas. Some configuration areas may have multiple possible entries; for example, role-based access controls define user roles/groups, the areas that access can be granted or denied (privileges), and then the permissions granted to those areas. Each separate configuration entry has its own task area beneath the primary configuration area.
+ </div><div class="figure" id="fig.ui-tabs"><div class="figure-contents"><div class="mediaobject"><img src="images/ui-tabs.png" width="444" alt="The Main Menu" /></div></div><h6>Figure 4.1. The Main Menu</h6></div><br class="figure-break" /><div class="para">
+ All entries for a configuration area are listed together on the main page for that area. This page provides direct links to individual entry pages, as well as basic information (the <span class="emphasis"><em>attributes</em></span>) about the entry. (This is usually just the description, but user entries show a lot more information.)
+ </div><div class="para">
+ The page also has some tasks that can be performed on it. For a list page that shows entries, this can be creating or deleting an entry. For a list page for groups, the tasks are for establishing relationships between entities, either by adding (<span class="emphasis"><em>enrolling</em></span>) or removing an entity from that group. Both individual entries and groups can be searched for through the list page.
+ </div><div class="figure" id="fig.ui-list"><div class="figure-contents"><div class="mediaobject"><img src="images/ui-full-list.png" width="444" alt="List View" /></div></div><h6>Figure 4.2. List View</h6></div><br class="figure-break" /><div class="para">
+ Each entry page is a form which allows that entry to be edited. This is done by editing text <span class="emphasis"><em>fields</em></span> or by selecting items from drop-down menus.
+ </div><div class="figure" id="fig.ui-form"><div class="figure-contents"><div class="mediaobject"><img src="images/ui-full-form.png" width="444" alt="Form/Entry View" /></div></div><h6>Figure 4.3. Form/Entry View</h6></div><br class="figure-break" /></div><div class="section" id="page-elements"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="page-elements">4.1.2.2. Page Elements</h4></div></div></div><div class="para">
+ The web UI uses common elements on all pages.
+ </div><div class="para">
+ The most basic is that all blue text is a link to an entry or to an action.
+ </div><div class="para">
+ When a task like adding an entry or saving a change is possible, the task link it blue. When it is not possible (such as no items have been selected to be deleted) then the task is grayed out.
+ </div><div class="figure" id="fig.ui-task-links"><div class="figure-contents"><div class="mediaobject"><img src="images/update-link.png" alt="Active Task Link" /></div></div><h6>Figure 4.4. Active Task Link</h6></div><br class="figure-break" /><div class="para">
+ All list pages display direct links to entry pages. However, some entries are essentially nested. For example, in automount configuration, the primary entry is the location, and then keys, mount points, and maps are associated with that location as children entries. This hierarchy is reflected in breadcrumb navigation near the top of the page, so it is easy to identify where you are in the UI and how this entry relates to any other related entries.
+ </div><div class="figure" id="fig.ui-breadcrumbs"><div class="figure-contents"><div class="mediaobject"><img src="images/automount-breadcrumbs.png" alt="Entry Breadcrumbs" /></div></div><h6>Figure 4.5. Entry Breadcrumbs</h6></div><br class="figure-break" /><div class="para">
+ Most entries have a variety of different configuration areas. A simple user entry has account activity settings, personal information, address information, organizational information, and other contact information. Related attributes are grouped together logically in the UI. These entry form areas can be collapsed or expanded using the arrows to control the amount of information displayed on the page.
+ </div><div class="figure" id="fig.ui-arrows"><div class="figure-contents"><div class="mediaobject"><img src="images/collapse-arrows.png" alt="Collapsing and Expanding Form Elements" /></div></div><h6>Figure 4.6. Collapsing and Expanding Form Elements</h6></div><br class="figure-break" /><div class="para">
+ When entries are created, they are added with only the required attributes. Additional attributes can be added manually. Some attributes have default values added to the entry and simply need to be edited; other attributes may not exist at all in the new entry and need to be added.
+ </div><div class="figure" id="fig.ui-add-attr"><div class="figure-contents"><div class="mediaobject"><img src="images/user-addcontact.png" alt="Add an Attribute" /></div></div><h6>Figure 4.7. Add an Attribute</h6></div><br class="figure-break" /><div class="para">
+ Any changes to any attribute can be undone. A single attribute change can be undone by clicking the dynamic <span class="guibutton"><strong>undone</strong></span> button; all changes can be undone by clicking the <span class="guilabel"><strong>Reset</strong></span> link at the top of the entry details page.
+ </div><div class="figure" id="fig.ui-undo"><div class="figure-contents"><div class="mediaobject"><img src="images/undo-button.png" width="444" alt="Undo Edits" /></div></div><h6>Figure 4.8. Undo Edits</h6></div><br class="figure-break" /></div><div class="section" id="abt-members"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="abt-members">4.1.2.3. Showing and Changing Group Members</h4></div></div></div><div class="para">
+ Members can be added to a group through the group configuration. There are tabs for all the member types which can belong to the group, and an administrator picks all of the marching entries and adds them as members.
+ </div><div class="para">
+ However, it is also possible for an entity to be added to a group through its own configuration. Each entry has a list of tabs that displays group types that the entry can join. The list of all groups of that type are displayed, and the entity can be added to multiple groups at the same time.
+ </div><div class="figure" id="fig.ui-member-menu"><div class="figure-contents"><div class="mediaobject"><img src="images/groups-menu2.png" width="444" alt="Member Of..." /></div></div><h6>Figure 4.9. Member Of...</h6></div><br class="figure-break" /></div></div></div><div class="section" id="logging-in"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="logging-in">4.2. Logging into FreeIPA</h2></div></div></div><div class="para">
Users are authenticated to FreeIPA services, including the command-line tools and the web UI, using Kerberos authentication. This means that logging into FreeIPA requires running <code class="command">kinit</code>.
</div><div class="para">
Running <code class="command">kinit</code> issues the user a Kerberos <span class="emphasis"><em>ticket</em></span>. This ticket is checked by any FreeIPA or Kerberos-aware service, so that a user only needs to log in once to access all domain services. Domain services include the FreeIPA web UI, mounted file shares, wikis, or any other application which uses FreeIPA as its identity/authentication store.
- </div><div class="section" id="logging-in-kinit"><div class="titlepage"><div><div><h3 class="title" id="logging-in-kinit">4.2.1. Logging into FreeIPA</h3></div></div></div><div class="para">
+ </div><div class="section" id="logging-in-kinit"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="logging-in-kinit">4.2.1. Logging into FreeIPA</h3></div></div></div><div class="para">
Logging into FreeIPA requires running <code class="command">kinit</code>. Simply running <code class="command">kinit</code> logs into FreeIPA as the currently logged-in user account. This user account must also be an FreeIPA user for them to authenticate to the FreeIPA Kerberos domain successfully. For example, if you are logged into the machine as <code class="command">jsmith</code>:
</div><pre class="screen">$ kinit
Password for jsmith at EXAMPLE.COM:</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- If SSSD or <code class="systemitem">pam_krb5</code> is configured on the FreeIPA client machine, then when a user logs into the machine, a ticket is created which can be used for machine serivces which require authentication, such as <code class="command">sudo</code>.
- </div></div></div></div><div class="section" id="switching-users"><div class="titlepage"><div><div><h3 class="title" id="switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</h3></div></div></div><div class="para">
+ If SSSD or <code class="systemitem">pam_krb5</code> is configured on the FreeIPA client machine, then when a user logs into the machine, a ticket is created which can be used for machine services which require authentication, such as <code class="command">sudo</code>.
+ </div></div></div></div><div class="section" id="switching-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</h3></div></div></div><div class="para">
To specify an FreeIPA username — because a person's system username is different then the FreeIPA username or to switch FreeIPA user accounts — simply rerun the <code class="command">kinit</code> command, specifying the new user. For example:
</div><pre class="screen">$ kinit <em class="replaceable"><code>userName</code></em>
Password for <em class="replaceable"><code>userName</code></em>@EXAMPLE.COM:</pre><div class="para">
@@ -1750,7 +1871,7 @@ Password for <em class="replaceable"><code>userName</code></em>@EXAMPLE.COM:</pr
Only one set of tickets can be stored per logged-in user. The current stored credentials are the ones that will be used when accessing FreeIPA services.
</div><div class="para">
If you were already connected to the FreeIPA web UI as another user, refresh the browser to display the updated details for the new user.
- </div></div></div></div><div class="section" id="checking-current-creds"><div class="titlepage"><div><div><h3 class="title" id="checking-current-creds">4.2.3. Checking the Current Logged in User</h3></div></div></div><div class="para">
+ </div></div></div></div><div class="section" id="checking-current-creds"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="checking-current-creds">4.2.3. Checking the Current Logged in User</h3></div></div></div><div class="para">
Use the <code class="command">klist</code> command to verify the identity and the ticket granting ticket (TGT) from the server:
</div><pre class="screen">$ klist
Ticket cache: FILE:/tmp/krb5cc_500
@@ -1762,135 +1883,149 @@ Valid starting Expires Service principal
Kerberos 4 ticket cache: /tmp/tkt500
klist: You have no tickets cached
</pre><div class="para">
- It's important to know who the authenticated user is because the currently-authenticated user is the only one who can access the FreeIPA services. The Kerberos client libraries for <code class="command">kinit</code> have some limitation, one of them being that the current ticket is overwritten with any new invocation of <code class="command">kinit</code>. Authenticating as User A and then authenticating as User B overwites User A's ticket.
+ It's important to know who the authenticated user is because the currently-authenticated user is the only one who can access the FreeIPA services. The Kerberos client libraries for <code class="command">kinit</code> have some limitation, one of them being that the current ticket is overwritten with any new invocation of <code class="command">kinit</code>. Authenticating as User A and then authenticating as User B overwrites User A's ticket.
</div><div class="para">
To allow there to be multiple authenticated users on a machine, set the <code class="varname">KRB5CCNAME</code> environment variable. This variable keeps credential caches separate in different shells.
- </div></div><div class="section" id="caching-tickets"><div class="titlepage"><div><div><h3 class="title" id="caching-tickets">4.2.4. Caching User Kerberos Tickets</h3></div></div></div><a id="id3054578" class="indexterm"></a><a id="id3054589" class="indexterm"></a><a id="id3054601" class="indexterm"></a><div class="para">
+ </div></div><div class="section" id="caching-tickets"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="caching-tickets">4.2.4. Caching User Kerberos Tickets</h3></div></div></div><a id="id816380" class="indexterm"></a><a id="id816392" class="indexterm"></a><a id="id816404" class="indexterm"></a><div class="para">
Only one set of tickets can be stored per logged-in user. The current stored credentials are the ones that will be used when accessing FreeIPA services.
</div><div class="para">
For example, if you authenticated as <code class="command">admin</code>, added a new user, set the password, and then tried to authenticate as that user, the administrator's ticket is lost.
</div><div class="para">
To keep separate credential caches in different shells, a special environment variable, <code class="varname">KRB5CCNAME</code>, can be used.
- </div></div></div><div class="section" id="opening-the-web-ui"><div class="titlepage"><div><div><h2 class="title" id="opening-the-web-ui">4.3. Opening the FreeIPA Web UI</h2></div></div></div><div class="para">
- The browser must be properly configured, as described in <a class="xref" href="#config-browser">Section 4.4, “Configuring the Browser”</a>, to support Kerberos authentication so that the user can connect to the UI.
- </div><div class="para">
- To open the web UI:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Get a valid Kerberos ticket using <code class="command">kinit</code>, as in <a class="xref" href="#logging-in">Section 4.2, “Logging into FreeIPA”</a>.
- </div></li><li class="listitem"><div class="para">
- Open the FreeIPA URL. The full URL is <code class="command">http://</code><span class="emphasis"><em>IPAserver-FQDN</em></span><code class="command">/ipa/ui</code>, but this service is also accessed simply by opening <code class="command">http://</code><span class="emphasis"><em>IPAserver-FQDN</em></span>. For example:
- </div><pre class="screen">http://server.example.com
-http://server.example.com/ipa/ui</pre></li></ol></div></div><div class="section" id="config-browser"><div class="titlepage"><div><div><h2 class="title" id="config-browser">4.4. Configuring the Browser</h2></div></div></div><div class="para">
- Firefox can use Kerberos credentials to authenticate to the FreeIPA UI, but Kerberos negotiation needs to be configured to use the FreeIPA domain.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open Firefox.
- </div></li><li class="listitem"><div class="para">
- Type <code class="command">about:config</code> in the address bar.
- </div></li><li class="listitem"><div class="para">
- In the <span class="guilabel"><strong>Search</strong></span> field, type <code class="command">negotiate</code> to filter out the Kerberos-related parameters.
- </div></li><li class="listitem"><div class="para">
- On Fedora, enter the domain name for the URI parameters, including the preceding period (.) and set the <code class="command">gsslib</code> parameter to true:
+ </div></div></div><div class="section" id="using-the-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="using-the-ui">4.3. Using the FreeIPA Web UI</h2></div></div></div><div class="para">
+ In order to use the web UI, the user must be authenticated with the FreeIPA Kerberos domain and have an active Kerberos ticket (<a class="xref" href="#logging-in">Section 4.2, “Logging into FreeIPA”</a>). Generally, the web UI can only be accessed from a FreeIPA server or client machine and the user must be locally authenticated. There are a couple of ways to work around this, either by configuring Kerberos on a non-domain machine to connect to the Kerberos domain (<a class="xref" href="#Using_a_Browser_on_Another_System">Section 4.3.3, “Using a Browser on Another System”</a>) or by enabling password authentication to the UI (<a class="xref" href="#Enabling_UsernamePassword_Authentication_in_Your_Browser">Section 4.3.4, “Enabling Username/Password Authentication in Your Browser”</a>).
+ </div><div class="section" id="opening-the-web-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="opening-the-web-ui">4.3.1. Opening the FreeIPA Web UI</h3></div></div></div><div class="para">
+ The browser must be properly configured, as described in <a class="xref" href="#config-browser">Section 4.3.2, “Configuring the Browser”</a>, to support Kerberos authentication so that the user can connect to the UI.
+ </div><div class="para">
+ To open the web UI:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Get a valid Kerberos ticket using <code class="command">kinit</code>, as in <a class="xref" href="#logging-in">Section 4.2, “Logging into FreeIPA”</a>.
+ </div></li><li class="listitem"><div class="para">
+ Open the FreeIPA URL. The full URL is <code class="command">http://</code><span class="emphasis"><em>IPAserver-FQDN</em></span><code class="command">/ipa/ui</code>, but this service is also accessed simply by opening <code class="command">http://</code><span class="emphasis"><em>IPAserver-FQDN</em></span>. For example:
+ </div><pre class="screen">http://server.example.com
+http://server.example.com/ipa/ui</pre></li></ol></div></div><div class="section" id="config-browser"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="config-browser">4.3.2. Configuring the Browser</h3></div></div></div><div class="para">
+ Firefox can use Kerberos credentials to authenticate to the FreeIPA UI, but Kerberos negotiation needs to be configured to use the FreeIPA domain. At the first log-in attempt, if Firefox has not been configured to support Kerberos authentication, then an error message appears.
+ </div><div class="figure" id="fig.kerb-error-browser"><div class="figure-contents"><div class="mediaobject"><img src="images/browser-kinit-rhel.png" width="444" alt="Kerberos Authentication Error" /></div></div><h6>Figure 4.10. Kerberos Authentication Error</h6></div><br class="figure-break" /><div class="para">
+ If you see that error, then the FreeIPA web UI can perform the required configuration:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>follow these directions</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the link to import the CA certificate for the FreeIPA server.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/configuring-browser1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Set the web site and software developer (first and last) trust bits for the CA certificate.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/Accept_CA_No_Exception.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Configure Firefox</strong></span> button. This automatically fills out all the <code class="command">negotiate</code> settings in the Firefox configuration to use the FreeIPA domain settings.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/configuring-browser2.png" /></div></div><div class="para">
+ When the process is complete, a success box pops up saying that Firefox has been configured for single sign-on. For there, you are redirected to the FreeIPA web UI.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/configuring-browser3.png" /></div></div></li></ol></div><div class="para">
+ This can also be done manually:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open Firefox.
+ </div></li><li class="listitem"><div class="para">
+ Type <code class="command">about:config</code> in the address bar.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Search</strong></span> field, type <code class="command">negotiate</code> to filter out the Kerberos-related parameters.
+ </div></li><li class="listitem"><div class="para">
+ On Fedora, enter the domain name for the URI parameters, including the preceding period (.) and set the <code class="command">gsslib</code> parameter to true:
<pre class="programlisting">network.negotiate-auth.trusted-uris .example.com
network.negotiate-auth.delegation-uris .example.com
network.negotiate-auth.using-native-gsslib true</pre>
- </div><div class="para">
- On Windows, enter the domain name for the URI parameters, including the preceding period (.) and set the <code class="command">sspi</code> parameter to false:
+ </div><div class="para">
+ On Windows, enter the domain name for the URI parameters, including the preceding period (.) and set the <code class="command">sspi</code> parameter to false:
<pre class="programlisting">network.negotiate-auth.trusted-uris .example.com
network.auth.use-sspi false
network.negotiate-auth.delegation-uris .example.com
</pre>
- </div></li><li class="listitem"><div class="para">
- Open the web UI by going to the fully-qualified domain name of the FreeIPA server such as <code class="systemitem">http://ipaserver.example.com</code>. Make sure that you can open the web UI and that there are no Kerberos authentication errors.
- </div></li><li class="listitem"><div class="para">
- Next, download the FreeIPA server's CA certificate from <code class="systemitem">http://ipa.example.com/ipa/config/ca.crt</code>.
- </div></li><li class="listitem"><div class="para">
- Select the first (<span class="guilabel"><strong>Trust this CA to identify web sites</strong></span>) and third (<span class="guilabel"><strong>Trust this CA to identify software developers</strong></span>) check boxes.
- </div></li><li class="listitem"><div class="para">
- Click <span class="guibutton"><strong>OK</strong></span>.
- </div><div class="informalfigure"><div class="mediaobject"><img src="images/Accept_CA_No_Exception.png" width="600" /></div></div></li></ol></div></div><div class="section" id="Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System"><div class="titlepage"><div><div><h2 class="title" id="Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System">4.5. Using a Browser on Another System</h2></div></div></div><div class="para">
- It is possible to connect to the FreeIPA web UI from a system which is <span class="emphasis"><em>not</em></span> a member of the FreeIPA domain. In this case, it is possible to specify a FreeIPA-specific Kerberos configuration file on the external (non-FreeIPA) machine before running <code class="command">kinit</code>, and then the user can authenticate against the FreeIPA server domain.
- </div><div class="para">
- This is especially useful there are multiple realms or overlapping domains across your infrastructure.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Copy the <code class="filename">/etc/krb5.conf</code> file from the FreeIPA server.
- </div><div class="para">
-
+ </div></li><li class="listitem"><div class="para">
+ Open the web UI by going to the fully-qualified domain name of the FreeIPA server such as <code class="systemitem">http://ipaserver.example.com</code>. Make sure that you can open the web UI and that there are no Kerberos authentication errors.
+ </div></li><li class="listitem"><div class="para">
+ Next, download the FreeIPA server's CA certificate from <code class="systemitem">http://ipa.example.com/ipa/config/ca.crt</code>.
+ </div></li><li class="listitem"><div class="para">
+ Select the first (<span class="guilabel"><strong>Trust this CA to identify web sites</strong></span>) and third (<span class="guilabel"><strong>Trust this CA to identify software developers</strong></span>) check boxes.
+ </div></li></ol></div></div><div class="section" id="Using_a_Browser_on_Another_System"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Using_a_Browser_on_Another_System">4.3.3. Using a Browser on Another System</h3></div></div></div><div class="para">
+ It is possible to connect to the FreeIPA web UI from a system which is <span class="emphasis"><em>not</em></span> a member of the FreeIPA domain. In this case, it is possible to specify a FreeIPA-specific Kerberos configuration file on the external (non-FreeIPA) machine before running <code class="command">kinit</code>, and then the user can authenticate against the FreeIPA server domain.
+ </div><div class="para">
+ This is especially useful there are multiple realms or overlapping domains across your infrastructure.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Copy the <code class="filename">/etc/krb5.conf</code> file from the FreeIPA server.
+ </div><div class="para">
+
<pre class="screen"># scp /etc/krb5.conf root at externalmachine.example.com:/etc/krb5_ipa.conf</pre>
- </div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
- Do not overwrite the existing <code class="filename">krb5.conf</code> file.
- </div></div></div></li><li class="listitem"><div class="para">
- On the external machine, set the terminal session to use the copied FreeIPA Kerberos configuration file:
+ </div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ Do not overwrite the existing <code class="filename">krb5.conf</code> file.
+ </div></div></div></li><li class="listitem"><div class="para">
+ On the external machine, set the terminal session to use the copied FreeIPA Kerberos configuration file:
<pre class="screen">$ export KRB5_CONFIG=/etc/krb5_ipa.conf</pre>
- </div></li><li class="listitem"><div class="para">
- Configure Firefox on the external machine as in <a class="xref" href="#config-browser">Section 4.4, “Configuring the Browser”</a>.
- </div></li></ol></div></div><div class="section" id="Enabling_UsernamePassword_Authentication_in_Your_Browser"><div class="titlepage"><div><div><h2 class="title" id="Enabling_UsernamePassword_Authentication_in_Your_Browser">4.6. Enabling Username/Password Authentication in Your Browser</h2></div></div></div><div class="para">
- If Kerberos authentication fails, then browser login also fails. That prevents access to the FreeIPA web UI. Configuring username/password authentication for the UI allows users to log in even if there are problems with the Kerberos service.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open the <code class="filename">ipa.conf</code> file used by the Apache web service.
- </div><pre class="screen">vim /etc/httpd/conf.d/ipa.conf</pre></li><li class="listitem"><div class="para">
- In the <code class="command"><Location "/ipa"></code> location definition, change the <em class="parameter"><code>KrbMethodK5Passwd</code></em> attribute from off to on.
- </div><pre class="screen">KrbMethodK5Passwd on</pre></li><li class="listitem"><div class="para">
- Restart the <code class="systemitem">httpd</code> service:
+ </div></li><li class="listitem"><div class="para">
+ Configure Firefox on the external machine as in <a class="xref" href="#config-browser">Section 4.3.2, “Configuring the Browser”</a>.
+ </div></li></ol></div></div><div class="section" id="Enabling_UsernamePassword_Authentication_in_Your_Browser"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Enabling_UsernamePassword_Authentication_in_Your_Browser">4.3.4. Enabling Username/Password Authentication in Your Browser</h3></div></div></div><div class="para">
+ If Kerberos authentication fails, then browser login also fails. That prevents access to the FreeIPA web UI. Configuring username/password authentication for the UI allows users to log in even if there are problems with the Kerberos service.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <code class="filename">ipa.conf</code> file used by the Apache web service.
+ </div><pre class="screen">vim /etc/httpd/conf.d/ipa.conf</pre></li><li class="listitem"><div class="para">
+ In the <code class="command"><Location "/ipa"></code> location definition, change the <em class="parameter"><code>KrbMethodK5Passwd</code></em> attribute from off to on.
+ </div><pre class="screen">KrbMethodK5Passwd on</pre></li><li class="listitem"><div class="para">
+ Restart the <code class="systemitem">httpd</code> service:
<pre class="screen"># service httpd restart</pre>
- </div></li></ol></div><div class="para">
- When this is configured, the web UI prompts for a FreeIPA username and password if it can't detect any Kerberos credentials.
- </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/password-prompt.png" width="600" alt="FreeIPA Password Prompt" /></div></div><h6>Figure 4.1. FreeIPA Password Prompt</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- This must be configured on every FreeIPA server in the domain.
- </div></div></div></div><div class="section" id="Troubleshooting-UI"><div class="titlepage"><div><div><h2 class="title" id="Troubleshooting-UI">4.7. Troubleshooting UI Connection Problems</h2></div></div></div><div class="para">
- If negotiate authentication is not working, turn on verbose logging for the authentication process to help diagnose the issue:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Close all browser windows.
- </div></li><li class="listitem"><div class="para">
- In a terminal, set the new log levels for Firefox:
+ </div></li></ol></div><div class="para">
+ When this is configured, the web UI prompts for a FreeIPA username and password if it can't detect any Kerberos credentials.
+ </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/password-prompt.png" width="444" alt="FreeIPA Password Prompt" /></div></div><h6>Figure 4.11. FreeIPA Password Prompt</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This must be configured on every FreeIPA server in the domain.
+ </div></div></div></div><div class="section" id="Troubleshooting-UI"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Troubleshooting-UI">4.3.5. Troubleshooting UI Connection Problems</h3></div></div></div><div class="para">
+ If negotiate authentication is not working, turn on verbose logging for the authentication process to help diagnose the issue:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Close all browser windows.
+ </div></li><li class="listitem"><div class="para">
+ In a terminal, set the new log levels for Firefox:
<pre class="screen">export NSPR_LOG_MODULES=negotiateauth:5
export NSPR_LOG_FILE=/tmp/moz.log
</pre>
- </div><div class="para">
- This enables verbose logging and logs all information to <code class="filename">/tmp/moz.log</code>.
- </div></li><li class="listitem"><div class="para">
- Restart the browser from the same terminal window and attempt t .
- </div></li></ol></div><div class="para">
- Some of the common error messages and workarounds are in <a class="xref" href="#tab.ui-troubleshooting">Table 4.1, “UI Error Log Messages”</a>.
- </div><div class="table" id="tab.ui-troubleshooting"><h6>Table 4.1. UI Error Log Messages</h6><div class="table-contents"><table summary="UI Error Log Messages" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- Error Log Message
- </th><th>
- Description and Fix
- </th></tr></thead><tbody><tr><td>
-
+ </div><div class="para">
+ This enables verbose logging and logs all information to <code class="filename">/tmp/moz.log</code>.
+ </div></li><li class="listitem"><div class="para">
+ Restart the browser from the same terminal window and attempt t .
+ </div></li></ol></div><div class="para">
+ Some of the common error messages and workarounds are in <a class="xref" href="#tab.ui-troubleshooting">Table 4.2, “UI Error Log Messages”</a>.
+ </div><div class="table" id="tab.ui-troubleshooting"><h6>Table 4.2. UI Error Log Messages</h6><div class="table-contents"><table summary="UI Error Log Messages" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Error Log Message
+ </th><th>
+ Description and Fix
+ </th></tr></thead><tbody><tr><td>
+
<pre class="screen">-1208550944[90039d0]: entering nsNegotiateAuth::GetNextToken()
-1208550944[90039d0]: gss_init_sec_context() failed: Miscellaneous failure
No credentials cache found</pre>
- </td><td>
- There are no Kerberos tickets. Run <code class="command">kinit</code>.
- </td></tr><tr><td>
-
+ </td><td>
+ There are no Kerberos tickets. Run <code class="command">kinit</code>.
+ </td></tr><tr><td>
+
<pre class="screen">-1208994096[8d683d8]: entering nsAuthGSSAPI::GetNextToken()
-1208994096[8d683d8]: gss_init_sec_context() failed: Miscellaneous failure
Server not found in Kerberos database</pre>
- </td><td>
- This can occur when you have successfully obtained Kerberos tickets but are still unable to authenticate to the UI. This indicates that there is a problem with the Kerberos configuration. The first place to check is the <code class="command">[domain_realm]</code> section in the <code class="filename">/etc/krb5.conf</code> file. Make sure that the FreeIPA Kerberos domain entry is correct and matches the configuration in the Firefox negotiation parameters. For example:
+ </td><td>
+ This can occur when you have successfully obtained Kerberos tickets but are still unable to authenticate to the UI. This indicates that there is a problem with the Kerberos configuration. The first place to check is the <code class="command">[domain_realm]</code> section in the <code class="filename">/etc/krb5.conf</code> file. Make sure that the FreeIPA Kerberos domain entry is correct and matches the configuration in the Firefox negotiation parameters. For example:
<pre class="screen">.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM</pre>
- </td></tr><tr><td>
- Nothing is in the log file.
- </td><td>
- It is possible that you are behind a proxy which is removing the HTTP headers required for negotiate authentication. Try to connect to the server using HTTPS instead, which allows the request to pass through unmodified. Then check the log file again.
- </td></tr></tbody></table></div></div><br class="table-break" /></div></div><div xml:lang="en-US" class="chapter" id="users" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 5. Identity: Managing Users and User Groups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#managing-users">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="#about-user-entries">5.2.1. About User Entries</a></span></dt><dt><span class="section"><a href="#adding-
users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Users-Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_IPA_Users-Specifying_Default_User_Settings">5.3. Specifying Default User Settings</a></span></dt><dd><dl><dt><span class="section"><a href="#config-show">5.3.1. Showing the Settings Configuration</a></span></dt><dt><span class="section"><a href="#adding-custom-objclasses">5.3.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="#search-limits">5.3.3. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="#search-fields">5.3.4. Setting Search
Attributes</a></span></dt></dl></dd><dt><span class="section"><a href="#changing-pwds">5.4. Changing Passwords</a></span></dt><dt><span class="section"><a href="#user-pwdpolicy">5.5. Defining Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#about-pwd-policy">5.5.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="#viewing-the_Password_Policy">5.5.2. Viewing Password Policies</a></span></dt><dt><span class="section"><a href="#The_IPA_Password_Policy-Editing_the_Password_Policy">5.5.3. Editing the Global Password Policy</a></span></dt><dt><span class="section"><a href="#Setting_Different_Password_Policies_for_Different_User_Groups">5.5.4. Setting Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="#Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies">5.5.5. Setting the Priority of Group Password Policies</a></span></dt><dt><
span class="section"><a href="#The_IPA_Password_Policy-Using_SSH_for_Password_Authentication">5.5.6. Enabling a Password Change Dialog</a></span></dt></dl></dd><dt><span class="section"><a href="#user-groups">5.6. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_IPA_Groups-Creating_IPA_Groups">5.6.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="#adding-members">5.6.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Groups-Deleting_IPA_Groups">5.6.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#searching">5.7. Searching for Users and Groups</a></span></dt></dl></div><div class="para">
+ </td></tr><tr><td>
+ Nothing is in the log file.
+ </td><td>
+ It is possible that you are behind a proxy which is removing the HTTP headers required for negotiate authentication. Try to connect to the server using HTTPS instead, which allows the request to pass through unmodified. Then check the log file again.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div></div><div xml:lang="en-US" class="chapter" id="users" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 5. Identity: Managing Users and User Groups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="#managing-users">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="#about-user-entries">5.2.1. About User Entries</a></span></dt><dt><span class="section"><a href="#
adding-users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="#Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="#Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="#changing-pwds">5.3. Changing Passwords</a></span></dt><dd><dl><dt><span class="section"><a href="#pwd-reset-ui">5.3.1. From the Web UI</a></span></dt><dt><span class="section"><a href="#pwd-reset-cmd">5.3.2. From the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Managing-Unique_UID_and_GID_Attributes">5.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="#id-ranges-at-install">5.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="#As
signing_UIDs_and_GIDs-Adding_New_Ranges">5.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="#user-groups">5.5. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_IPA_Groups-Creating_IPA_Groups">5.5.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="#adding-members">5.5.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="#Configuring_IPA_Groups-Deleting_IPA_Groups">5.5.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#searching">5.6. Searching for Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#user-search-ui">5.6.1. With the UI</a></span></dt><dt><span class="section"><a href="#user-search-cmd">5.6.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_IPA_Users-Specifying_Default_User_Settings">5.7. Specifying Default User and Group Settings</a></span>
</dt><dd><dl><dt><span class="section"><a href="#config-show">5.7.1. Viewing the Settings Configuration</a></span></dt><dt><span class="section"><a href="#adding-custom-objclasses">5.7.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="#adding-custom-objclasses-groups">5.7.3. Applying Custom Object Classes to New Group Entries</a></span></dt><dt><span class="section"><a href="#search-limits">5.7.4. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="#search-fields">5.7.5. Setting User Search Attributes</a></span></dt><dt><span class="section"><a href="#search-fields-groups">5.7.6. Setting Group Search Attributes</a></span></dt></dl></dd></dl></div><div class="para">
Users in FreeIPA are able to access services and servers within the domain through Kerberos authentication. A number of configuration settings — like search limits and password policies — can be applied to user accounts. User groups can be used for access control and other management tasks.
</div><div class="para">
This chapter covers general management tasks for users, groups, password policies, and other configuration for users.
- </div><div class="section" id="home-directories"><div class="titlepage"><div><div><h2 class="title" id="home-directories">5.1. Setting up User Home Directories</h2></div></div></div><div class="para">
+ </div><div class="section" id="home-directories"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="home-directories">5.1. Setting up User Home Directories</h2></div></div></div><div class="para">
A home directory is required for any FreeIPA user. Without a home directory in the expected location, a user may be unable to log into the domain. While systems administrators can manage home directories outside of FreeIPA, it is also possible to use a PAM module to create home directories automatically on both FreeIPA servers and clients.
- </div><div class="section" id="homedir-reqs"><div class="titlepage"><div><div><h3 class="title" id="homedir-reqs">5.1.1. About Home Directories</h3></div></div></div><div class="para">
+ </div><div class="section" id="homedir-reqs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="homedir-reqs">5.1.1. About Home Directories</h3></div></div></div><div class="para">
FreeIPA, as part of managing users, can manage user home directories. However, FreeIPA has certain defined parameters for any managed home directories:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
The default prefix for users' home directories is <code class="filename">/home</code>.
@@ -1902,10 +2037,10 @@ example.com = EXAMPLE.COM</pre>
It is possible to use an NFS file server that provides <code class="filename">/home</code> that can be made available to all machines in the domain and then automounted on the FreeIPA server. Using automounts for home directories is described in <a class="xref" href="#automounting-home-dirs">Section 5.1.3, “Manually Automounting Home Directories”</a>.
</div></li><li class="listitem"><div class="para">
If a suitable directory and mechanism are not available for to create home directories, users may not be able to log in.
- </div></li></ul></div></div><div class="section" id="homedir-pammod"><div class="titlepage"><div><div><h3 class="title" id="homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</h3></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="homedir-pammod"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</h3></div></div></div><div class="para">
For a home directory to be created automatically when a user logs in, FreeIPA can use either the <code class="systemitem module">pam_oddjob_mkhomedir</code> module or the <code class="systemitem module">pam_mkhomedir</code> module. Because it requires fewer permissions and works well with SELinux, FreeIPA preferentially uses the <code class="systemitem module">pam_oddjob_mkhomedir</code> module. If that module is not installed, then it falls back to the <code class="systemitem module">pam_mkhomedir</code> module.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA does not require the <code class="systemitem module">pam_oddjob_mkhomedir</code> module or <code class="systemitem module">pam_mkhomedir</code> module. The <code class="systemitem">*_mkhomedir</code> module may try to create home directories even when the shared storage is not available.
+ FreeIPA does not require the <code class="systemitem module">pam_oddjob_mkhomedir</code> module or <code class="systemitem module">pam_mkhomedir</code> module. This is because the <code class="systemitem">*_mkhomedir</code> module may try to create home directories even when the shared storage is not available. If the module is unable to create the home directory, then users can be blocked from logging into the FreeIPA domain.
</div><div class="para">
The system administrator must activate this module on each client or server as needed.
</div></div></div><div class="para">
@@ -1916,7 +2051,7 @@ example.com = EXAMPLE.COM</pre>
The <code class="systemitem module">pam_oddjob_mkhomedir</code> module can be enabled using the system's <code class="command">authconfig</code> command. For example:
</div><pre class="programlisting">authconfig --enablemkhomedir</pre><div class="para">
This option can be used for both server and client machines post-installation.
- </div></li></ul></div></div><div class="section" id="automounting-home-dirs"><div class="titlepage"><div><div><h3 class="title" id="automounting-home-dirs">5.1.3. Manually Automounting Home Directories</h3></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="automounting-home-dirs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="automounting-home-dirs">5.1.3. Manually Automounting Home Directories</h3></div></div></div><div class="para">
While PAM modules can be used to create home directories for user automatically, this may not be desirable behavior in every environment. In that case, home directories can be manually added to the FreeIPA server from separate locations using NFS shares and <code class="command">automount</code>.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create a new location for the user directory maps:
@@ -1927,10 +2062,10 @@ Location: userdirs</pre></li><li class="listitem"><div class="para">
Key: /share
Mount information: -ro,soft, ipaserver.example.com:/home/share</pre></li></ol></div><div class="para">
- Using automounts with FreeIPA is described in detail in <a class="xref" href="#automount">Chapter 7, <i>Identity: Using Automount</i></a>.
- </div></div></div><div class="section" id="managing-users"><div class="titlepage"><div><div><h2 class="title" id="managing-users">5.2. Managing User Accounts</h2></div></div></div><div class="section" id="about-user-entries"><div class="titlepage"><div><div><h3 class="title" id="about-user-entries">5.2.1. About User Entries</h3></div></div></div><div class="para">
+ Using automounts with FreeIPA is described in detail in <a class="xref" href="#automount">Chapter 9, <em>Policy: Using Automount</em></a>.
+ </div></div></div><div class="section" id="managing-users"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="managing-users">5.2. Managing User Accounts</h2></div></div></div><div class="section" id="about-user-entries"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-user-entries">5.2.1. About User Entries</h3></div></div></div><div class="para">
User accounts in FreeIPA are ultimately stored as user accounts in an LDAP directory. This grants both flexibility and certain restrictions on the structure and information stored in FreeIPA user entries.
- </div><div class="section" id="user-schema"><div class="titlepage"><div><div><h4 class="title" id="user-schema">5.2.1.1. About User Schema</h4></div></div></div><div class="para">
+ </div><div class="section" id="user-schema"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="user-schema">5.2.1.1. About User Schema</h4></div></div></div><div class="para">
When a user entry is created, it is automatically assigned certain LDAP object classes which, in turn, make available certain attributes. LDAP attributes are the way that information is stored in the directory. (This is discussed in detail in the <em class="citetitle">Directory Server Deployment Guide</em> and the <em class="citetitle">Directory Server Schema Reference</em>.)
</div><div class="table" id="tab.default-objclasses"><h6>Table 5.1. Default FreeIPA User Object Classes</h6><div class="table-contents"><table summary="Default FreeIPA User Object Classes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
@@ -1955,13 +2090,13 @@ Mount information: -ro,soft, ipaserver.example.com:/home/share</pre></li></ol></
</td><td>
mepOriginEntry
</td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- A number of attributes are available to user entries. Some are set manually and some are set based on defaults if a specific value is not set. There is also an option to add any attributes available in the object classes in <a class="xref" href="#tab.default-objclasses">Table 5.1, “Default FreeIPA User Object Classes”</a>, even if there is not a UI or command-line argument for that attribute. Additionally, th values generated or used by the default attributes can be configured, as in <a class="xref" href="#Configuring_IPA_Users-Specifying_Default_User_Settings">Section 5.3, “Specifying Default User Settings”</a>.
+ A number of attributes are available to user entries. Some are set manually and some are set based on defaults if a specific value is not set. There is also an option to add any attributes available in the object classes in <a class="xref" href="#tab.default-objclasses">Table 5.1, “Default FreeIPA User Object Classes”</a>, even if there is not a UI or command-line argument for that attribute. Additionally, the values generated or used by the default attributes can be configured, as in <a class="xref" href="#Configuring_IPA_Users-Specifying_Default_User_Settings">Section 5.7, “Specifying Default User and Group Settings”</a>.
</div><div class="table" id="tab.default-attrs"><h6>Table 5.2. Default FreeIPA User Attributes</h6><div class="table-contents"><table summary="Default FreeIPA User Attributes" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
UI Field
</th><th>
Command-Line Option
</th><th>
- Required, Optional, or Default<sup>[<a id="id3060602" href="#ftn.id3060602" class="footnote">a</a>]</sup>
+ Required, Optional, or Default<sup>[<a id="id584092" href="#ftn.id584092" class="footnote">a</a>]</sup>
</th></tr></thead><tbody><tr><td>
User login
</td><td>
@@ -2041,7 +2176,7 @@ Mount information: -ro,soft, ipaserver.example.com:/home/share</pre></li></ol></
</td></tr><tr><td>
User ID number
<div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created without specifying a UID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ When a user is created without specifying a UID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
</div><div class="para">
If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
</div><div class="para">
@@ -2055,7 +2190,7 @@ Mount information: -ro,soft, ipaserver.example.com:/home/share</pre></li></ol></
</td></tr><tr><td>
Group ID number
<div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created without specifying a GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ When a user is created without specifying a GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
</div><div class="para">
If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
</div><div class="para">
@@ -2144,19 +2279,27 @@ Mount information: -ro,soft, ipaserver.example.com:/home/share</pre></li></ol></
--addattr
</td><td>
Optional
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><p><sup>[<a id="ftn.id3060602" href="#id3060602" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><div class="para"><sup>[<a id="ftn.id584092" href="#id584092" class="para">a</a>] </sup>
Required attributes must be set for every entry. Optional attributes may be set, while default attributes are automatically added with a pre-defined value unless a specific value is given.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="username-format"><div class="titlepage"><div><div><h4 class="title" id="username-format">5.2.1.2. About Username Formats</h4></div></div></div><div class="para">
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="username-format"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="username-format">5.2.1.2. About Username Formats</h4></div></div></div><div class="para">
FreeIPA supports a wide range of username formats, based on this regular expression:
</div><pre class="screen">[a-zA-Z0-9_.][a-zA-Z0-9_.-]{0,252}[a-zA-Z0-9_.$-]</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
The trailing $ symbol is permitted for Samba 3.x machine support.
</div></div></div><div class="para">
Any system limits — such as starting a username with a number on Unix systems — apply to the usernames in FreeIPA.
- </div></div></div><div class="section" id="adding-users"><div class="titlepage"><div><div><h3 class="title" id="adding-users">5.2.2. Adding Users</h3></div></div></div><div class="para">
- New user entries are added with the <code class="command">user-add</code> command. Attributes (listed in <a class="xref" href="#tab.default-attrs">Table 5.2, “Default FreeIPA User Attributes”</a>) can be added to the entry with specific values or the command can be run with no arguments.
- </div><pre class="screen">$ ipa user-add [<em class="replaceable"><code>username</code></em>] [<em class="replaceable"><code>attributes</code></em>]</pre><div class="para">
- When no arguments are used, the command prompts for the required user account information and uses the defaults for the other attributes, with the defaults printed below. For example:
- </div><pre class="screen">$ ipa user-add
+ </div></div></div><div class="section" id="adding-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-users">5.2.2. Adding Users</h3></div></div></div><div class="section" id="adding-users-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-users-ui">5.2.2.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Fill in the user's first and last names. The user login (UID) is automatically generated based on the user's full name, but this can be set manually by clicking the <span class="guilabel"><strong>Optional field</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the expanded entry page and fill in more attribute information, as in <a class="xref" href="#editing-users-ui">Section 5.2.3.1, “From the Web UI”</a>. The user entry is created with some basic information already filled in, based on the given user information and the user entry template.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-attr.png" width="444" /></div></div></li></ol></div></div><div class="section" id="adding-users-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-users-cmd">5.2.2.2. From the Command Line</h4></div></div></div><div class="para">
+ New user entries are added with the <code class="command">user-add</code> command. Attributes (listed in <a class="xref" href="#tab.default-attrs">Table 5.2, “Default FreeIPA User Attributes”</a>) can be added to the entry with specific values or the command can be run with no arguments.
+ </div><pre class="screen">$ ipa user-add [<em class="replaceable"><code>username</code></em>] [<em class="replaceable"><code>attributes</code></em>]</pre><div class="para">
+ When no arguments are used, the command prompts for the required user account information and uses the defaults for the other attributes, with the defaults printed below. For example:
+ </div><pre class="screen">$ ipa user-add
First name: John
Last name: Smith
User login [jsmith]: jsmith
@@ -2171,41 +2314,61 @@ GECOS field: jsmith
Login shell: /bin/sh
Kerberos principal: jsmith at EXAMPLE.COM
UID: 387115841</pre><div class="para">
- Any of the user attributes can be passed with the command. This will either set values for optional attributes or override the default values for default attributes.
- </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --manager=bjensen --email=johnls at example.com --homedir=/home/work/johns --password</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created without specifying a UID or GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
- </div><div class="para">
- If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ Any of the user attributes can be passed with the command. This will either set values for optional attributes or override the default values for default attributes.
+ </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --manager=bjensen --email=johnls at example.com --homedir=/home/work/johns --password</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ When a user is created without specifying a UID or GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ </div><div class="para">
+ If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ </div><div class="para">
+ If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
+ </div></div></div></div></div><div class="section" id="editing-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="editing-users">5.2.3. Editing Users</h3></div></div></div><div class="section" id="editing-users-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="editing-users-ui">5.2.3.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ There are a number of different types of attributes that can be edited for the user. All of the default attributes are listed in <a class="xref" href="#tab.default-attrs">Table 5.2, “Default FreeIPA User Attributes”</a>. Most of the attributes in the <span class="guilabel"><strong>Identity Settings</strong></span> and <span class="guilabel"><strong>Account Settings</strong></span> areas have default values filled in for them, based on the user information or on the user entry template.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-additional-attr.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Edit the fields or, if necessary, click the <span class="guilabel"><strong>Add</strong></span> link by an attribute to create the attribute on the entry.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-addcontact.png" /></div></div></li><li class="listitem"><div class="para">
+ When the edits are done, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the page.
+ </div></li></ol></div></div><div class="section" id="editing-users-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="editing-users-cmd">5.2.3.2. From the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">user-mod</code> command edits user accounts by adding or changing attributes. At its most basic, the <code class="command">user-mod</code> specifies the user account by login ID, the attribute to edit, and the new value:
+ </div><pre class="screen">$ ipa user-mod <em class="replaceable"><code>loginID</code></em> --<em class="replaceable"><code>attributeName=newValue</code></em></pre><div class="para">
+ For example, to change a user's work title from <span class="emphasis"><em>Editor II</em></span> to <span class="emphasis"><em>Editor III</em></span>:
+ </div><pre class="screen">$ ipa user-mod jsmith --title="Editor III"</pre><a id="id769780" class="indexterm"></a><a id="id794536" class="indexterm"></a><div class="para">
+ FreeIPA allows <span class="emphasis"><em>multi-valued</em></span> attributes, based on attributes in LDAP that are allowed to have multiple values. For example, a person may have two email addresses, one for work and one for personal, that are both stored in the mail attribute. Managing multi-valued attributes can be done using the <code class="option">--addattr</code> option.
</div><div class="para">
- If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
- </div></div></div></div><div class="section" id="editing-users"><div class="titlepage"><div><div><h3 class="title" id="editing-users">5.2.3. Editing Users</h3></div></div></div><div class="para">
- The <code class="command">user-mod</code> command edits user accounts by adding or changing attributes. At its most basic, the <code class="command">user-mod</code> specifies the user account by login ID, the attribute to edit, and the new value:
- </div><pre class="screen">$ ipa user-mod <em class="replaceable"><code>loginID</code></em> --<em class="replaceable"><code>attributeName=newValue</code></em></pre><div class="para">
- For example, to change a user's work title from <span class="emphasis"><em>Editor II</em></span> to <span class="emphasis"><em>Editor III</em></span>:
- </div><pre class="screen">$ ipa user-mod jsmith --title="Editor III"</pre><a id="id3013651" class="indexterm"></a><a id="id3013662" class="indexterm"></a><div class="para">
- FreeIPA allows <span class="emphasis"><em>multi-valued</em></span> attributes, based on attributes in LDAP that are allowed to have multiple values. For example, a person may have two email addresses, one for work and one for personal, that are both stored in the mail attribute. Managing multi-valued attributes can be done using the <code class="option">--addattr</code> option.
- </div><div class="para">
- If an attributes allows multiple values — like mail — simply using the command-line argument will overwrite the value with the new value. This is also true for using <code class="option">--setaddr</code>. However, using <code class="option">--addattr</code> will add a new attribute; for a multi-valued attribute, it adds the new value in addition to any existing values.
- </div><div class="example" id="ex.multi-valued"><h6>Example 5.1. Multiple Mail Attributes</h6><div class="example-contents"><div class="para">
- A user is created first using his work email account.
- </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --email=johnls at example.com</pre><div class="para">
- Then, his personal email account is added.
- </div><pre class="screen">$ ipa user-mod jsmith --addattr=mail=johnnys at me.com</pre><div class="para">
- Both email addresses are listed for the user.
- </div><pre class="screen">$ ipa user-find jsmith --all
+ If an attributes allows multiple values — like mail — simply using the command-line argument will overwrite the value with the new value. This is also true for using <code class="option">--setaddr</code>. However, using <code class="option">--addattr</code> will add a new attribute; for a multi-valued attribute, it adds the new value in addition to any existing values.
+ </div><div class="example" id="ex.multi-valued"><h6>Example 5.1. Multiple Mail Attributes</h6><div class="example-contents"><div class="para">
+ A user is created first using his work email account.
+ </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --email=johnls at example.com</pre><div class="para">
+ Then, his personal email account is added.
+ </div><pre class="screen">$ ipa user-mod jsmith --addattr=mail=johnnys at me.com</pre><div class="para">
+ Both email addresses are listed for the user.
+ </div><pre class="screen">$ ipa user-find jsmith --all
--------------
1 user matched
--------------
dn: uid=jsmith,cn=users,cn=accounts,dc=example,dc=com
User login: jsmith
.....
- <strong class="userinput"><code>Email address: jsmith at example.com, jsmith at new.com</code></strong></pre></div></div><br class="example-break" /></div><div class="section" id="Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</h3></div></div></div><div class="para">
+ <strong class="userinput"><code>Email address: jsmith at example.com, jsmith at new.com</code></strong></pre></div></div><br class="example-break" /></div></div><div class="section" id="Activating_and_Deactivating_User_Accounts"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</h3></div></div></div><div class="para">
User accounts can be <span class="emphasis"><em>deactivated</em></span>. A deactivated user cannot log into FreeIPA or its related services (like Kerberos) and he cannot perform any tasks. However, the user account still exists within FreeIPA and all of the associated information remains unchanged.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Any existing connections remain valid until the Kerberos TGT and other tickets expire. Once the ticket expires, the user cannot renew the ticket.
- </div></div></div><div class="para">
- Users are activated and disabled using <code class="command">user-enable</code> and <code class="command">user-disable</code> commands. All that is required is the user login. For example:
- </div><pre class="screen">$ ipa user-disable jsmith</pre></div><div class="section" id="Configuring_IPA_Users-Deleting_IPA_Users"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Users-Deleting_IPA_Users">5.2.5. Deleting Users</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Activating_and_Deactivating_User_Accounts-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Activating_and_Deactivating_User_Accounts-ui">5.2.4.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user for whom to deactivate or activate.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Account Settings</strong></span> area.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Deactivate</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-acctsettings.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the page.
+ </div></li></ol></div></div><div class="section" id="Activating_and_Deactivating_User_Accounts-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Activating_and_Deactivating_User_Accounts-cmd">5.2.4.2. From the Command Line</h4></div></div></div><div class="para">
+ Users are activated and disabled using <code class="command">user-enable</code> and <code class="command">user-disable</code> commands. All that is required is the user login. For example:
+ </div><pre class="screen">$ ipa user-disable jsmith</pre></div></div><div class="section" id="Deleting_IPA_Users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Deleting_IPA_Users">5.2.5. Deleting Users</h3></div></div></div><div class="para">
Deleting a user account permanently removes the user entry and all its information from FreeIPA, including group memberships and passwords. External configuration — like a system account and home directory — will still exist on any server or local machine where they were created, but they cannot be accessed through FreeIPA.
</div><div class="para">
Deleting a user account is permanent. The information cannot be recovered; a new account must be created.
@@ -2213,392 +2376,128 @@ UID: 387115841</pre><div class="para">
If all admin users are deleted, then you must use the Directory Manager account to create a new administrative user.
</div><div class="para">
Alternatively, any user who belongs in the group management role can also add a new admin user.
- </div></div></div><div class="para">
- Users are deleted using the <code class="command">user-del</code> command and then the user login. For example, a single user:
- </div><pre class="screen">$ ipa user-del jsmith</pre><div class="para">
- To delete multiple users, simply list the users, separated by spaces.
- </div><pre class="screen">$ ipa user-del jsmith bjensen mreynolds cdickens</pre><div class="para">
- When deleting multiple users, use the <code class="option">--continue</code> option to force the command to continue regardless of errors. A summary of the successful and failed operations is printed to stdout when the command completes. If <code class="option">--continue</code> is not used, then the command proceeds with deleting users <span class="emphasis"><em>until</em></span> it encounters an error, and then it exits.
- </div></div></div><div class="section" id="Configuring_IPA_Users-Specifying_Default_User_Settings"><div class="titlepage"><div><div><h2 class="title" id="Configuring_IPA_Users-Specifying_Default_User_Settings">5.3. Specifying Default User Settings</h2></div></div></div><div class="para">
- FreeIPA uses default values for FreeIPA user accounts. These defaults can define actual values for user account attributes (such as the home directory location) or it can define the format of attribute values, such as the username length.
+ </div></div></div><div class="section" id="Deleting_IPA_Users-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Deleting_IPA_Users-ui">5.2.5.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the checkboxes by the names of the users to delete.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link at the top of the task area.
+ </div></li><li class="listitem"><div class="para">
+ When prompted, confirm the delete action.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-delete.png" width="444" /></div></div></li></ol></div></div><div class="section" id="Deleting_IPA_Users-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Deleting_IPA_Users-cmd">5.2.5.2. From the Command Line</h4></div></div></div><div class="para">
+ Users are deleted using the <code class="command">user-del</code> command and then the user login. For example, a single user:
+ </div><pre class="screen">$ ipa user-del jsmith</pre><div class="para">
+ To delete multiple users, simply list the users, separated by spaces.
+ </div><pre class="screen">$ ipa user-del jsmith bjensen mreynolds cdickens</pre><div class="para">
+ When deleting multiple users, use the <code class="option">--continue</code> option to force the command to continue regardless of errors. A summary of the successful and failed operations is printed to stdout when the command completes. If <code class="option">--continue</code> is not used, then the command proceeds with deleting users <span class="emphasis"><em>until</em></span> it encounters an error, and then it exits.
+ </div></div></div></div><div class="section" id="changing-pwds"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="changing-pwds">5.3. Changing Passwords</h2></div></div></div><div class="para">
+ Password policies (<a class="xref" href="#user-pwdpolicy">Chapter 11, <em>Policy: Defining Password Policies</em></a>) and minimal access restrictions can be applied to a password change operation:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Regular, non-administrative users can change only their personal passwords, and all passwords are constrained by the FreeIPA password policies.
+ </div><div class="para">
+ This allows administrators to create intro passwords or to reset passwords easily, while still keeping the final password confidential. Since any password sent by an administrator to the user is temporary, there is little security risk.
+ </div></li><li class="listitem"><div class="para">
+ Changing a password as the FreeIPA admin user overrides any FreeIPA password policies, but the password expires immediately. This requires the user to change the password at the next login. Similarly, any user who has password change rights can change a password and no password policies are applied, but the other user must reset the password at the next log in.
+ </div></li><li class="listitem"><div class="para">
+ Changing a password as the LDAP Directory Manager user, <span class="emphasis"><em>using LDAP tools</em></span>, overrides any FreeIPA password policies.
+ </div></li></ul></div><div class="section" id="pwd-reset-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="pwd-reset-ui">5.3.1. From the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user for whom to reset the password. All users can change their own password; only administrators or users with delegated permissions can change other user's passwords.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Account Settings</strong></span> area.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Reset Password</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-reset1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the pop-up box, enter and confirm the new password.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-reset2.png" width="444" /></div></div></li></ol></div></div><div class="section" id="pwd-reset-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="pwd-reset-cmd">5.3.2. From the Command Line</h3></div></div></div><div class="para">
+ Changing a password — your own or another user's — is done using the <code class="command">user-mod</code> command, as with other user account changes.
+ </div><pre class="screen">$ ipa user-mod jsmith --password</pre></div></div><div class="section" id="Managing-Unique_UID_and_GID_Attributes"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing-Unique_UID_and_GID_Attributes">5.4. Managing Unique UID and GID Number Assignments</h2></div></div></div><div class="para">
+ A FreeIPA server must generate random UID and GID values and simultaneously ensure that replicas never generate the same UID or GID value. The need for unique UID and GID numbers might even cross FreeIPA domains, if a single organization has multiple disparate domains.
</div><div class="para">
- These default definitions are all contained in a single configuration entry for the FreeIPA server, <code class="command">cn=ipaconfig,cn=etc,dc=example,dc=com</code>.
+ The UID and GID numbers are divided into <span class="emphasis"><em>ranges</em></span>. By keeping separate numeric ranges for individual servers and replicas, the chances are minimal that any numbers issued by one server or replica will duplicate those from another. Ranges are updated and shared intelligently between servers and replicas through the Dynamic Numeric Assignment (DNA) Plug-in, as part of the backend 389 Directory Server instance for the domain. The same range is used for user IDs (<em class="parameter"><code>uidNumber</code></em>) and group IDs (<em class="parameter"><code>gidNumber</code></em>). A user and a group may have the same ID, but since the ID is set in different attributes, there is no conflict. Using the same ID number for both a user and a group also allows an administrator to configure user private groups, where a unique system group is created for each user and the ID number is the same for both the user and the group.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ When a user is created interactively or without specifying a UID or GID number, then the user account is created with an ID number that is next available in the server or replica range. This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ </div><div class="para">
+ If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries. The same is true for group entries: a duplicate <em class="parameter"><code>gidNumber</code></em> can be manually assigned to the entry.
+ </div><div class="para">
+ If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
+ </div></div></div><div class="section" id="id-ranges-at-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="id-ranges-at-install">5.4.1. About ID Range Assignments During Installation</h3></div></div></div><div class="para">
+ The FreeIPA administrator can initially define a range during server installation, using the <code class="option">--idstart</code> and <code class="option">--idmax</code> options with <code class="command">ipa-server-install</code>. These options are not required, so the setup script can assign random ranges during installation.
+ </div><div class="para">
+ If no range is set manually when the first FreeIPA server is installed, a range of 200,000 IDs is randomly selected. There are 10,000 possible ranges. Selecting a random range from that number provides a high probability of non-conflicting IDs if two separate FreeIPA domains are ever merged in the future.
+ </div><div class="para">
+ With a single FreeIPA server, IDs are assigned to entries in order through the range. With replicas, the initial server ID range is split and distributed.
+ </div><div class="para">
+ When a replica is installed, it is configured with an invalid range. It also has a directory entry (that is shared among replicas) that instructs the replica where it can request a valid range. When the replica starts, or as its current range is depleted so that less than 100 IDs are available, it can contact one of the available servers for a new range allotment. A special extended operation splits the range in two, so that the original server and the replica each have half of the available range.
+ </div></div><div class="section" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges">5.4.2. Adding New Ranges</h3></div></div></div><div class="para">
+ If the range for the entire domain is close to depletion, a new range can be manually selected and assigned to one of the master servers. All replicas then request ID ranges from the master as necessary.
+ </div><div class="para">
+ The changes to the range are done by editing the 389 Directory Server configuration to change the DNA Plug-in instance. The range is defined in the <em class="parameter"><code>dnaNextRange</code></em> parameter. For example:
+ </div><pre class="screen">ldapmodify -x -D "cn=Directory Manager" -W -h server.example.com -p 389
+Enter LDAP Password: *******
+dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
+changetype: modify
+add: dnaNextRange
+dnaNextRange: 123400000-123500000</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This command only adds the specified range of values; it does not check that the values in that range are actually available. This check is performed when an attempt is made to allocate those values. If a range is added that contains mostly values that were already allocated, the system will cycle through the entire range searching for unallocated values, and then the operation ultimately fails if none are available.
+ </div></div></div></div></div><div class="section" id="user-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="user-groups">5.5. Managing User Groups</h2></div></div></div><div class="para">
+ User groups are a way of centralizing control over important management tasks, particularly access control and password policies. Three groups are created during the installation, specifically for use by FreeIPA operations:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ ipausers, which contains all users.
+ </div></li><li class="listitem"><div class="para">
+ admins, which contains administrative users. The initial <code class="command">admin</code> user belongs to this group.
+ </div></li><li class="listitem"><div class="para">
+ editors, which is a special group for users working through the web UI. This group allows users to <span class="emphasis"><em>edit</em></span> other users' entries, though without all of the rights of the admin user.
+ </div></li></ul></div><div class="para">
+ All groups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
</div><div class="para">
- The configuration can be changed using the <code class="command">ipa config-mod</code> command, which is covered in .
- </div><div class="table" id="tab.user-config-defaults"><h6>Table 5.3. Default User Parameters</h6><div class="table-contents"><table summary="Default User Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
- Field
- </th><th>
- Command-Line Option
+ Because groups are easy to create, it is possible to be very flexible in what groups to create and how they are organized. Groups can be defined around organizational divisions like departments, physical locations, or FreeIPA or infrastructure usage guidelines for access controls.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Some operating systems limit the number of groups that can be assigned to system users. For example, Solaris and AIX systems both limit users to 16 groups per user. This can be an issue when using nested groups, when a user may be automatically added to multiple groups.
+ </div></div></div><div class="para">
+ When a group entry is created, it is automatically assigned certain LDAP object classes. (LDAP object classes and attributes are discussed in detail in the <em class="citetitle">Directory Server Deployment Guide</em> and the <em class="citetitle">Directory Server Schema Reference</em>.) For groups, only two attributes truly matter: the name and the description.
+ </div><div class="table" id="tab.default-group-objclasses"><h6>Table 5.3. Default FreeIPA Group Object Classes</h6><div class="table-contents"><table summary="Default FreeIPA Group Object Classes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Description
</th><th>
- Descriptions
+ Object Classes
</th></tr></thead><tbody><tr><td>
- Maximum username length
- </td><td>
- --maxusername
- </td><td>
- Sets the maximum number of characters for usernames. The default value is eight.
- </td></tr><tr><td>
- Root for home directories
- </td><td>
- --homedirectory
- </td><td>
- Sets the default directory to use for user home directories. The default value is <code class="filename">/home</code>.
- </td></tr><tr><td>
- Default shell
- </td><td>
- --defaultshell
- </td><td>
- Sets the default shell to use for users. The default value is <code class="filename">/bin/sh</code>.
- </td></tr><tr><td>
- Default user group
- </td><td>
- --defaultgroup
- </td><td>
- Sets the default group to which all newly created accounts are added. The default value is <code class="systemitem">ipausers</code>, which is automatically created during the FreeIPA server installation process.
- </td></tr><tr><td>
- Default e-mail domain
- </td><td>
- --emaildomain
- </td><td>
- Sets the email domain to use to create email addressed based on the new accounts. The default is the FreeIPA server domain.
- </td></tr><tr><td>
- Search time limit
- </td><td>
- --searchtimelimit
- </td><td>
- Sets the maximum amount of time, in seconds, to spend on a search before the server returns results.
- </td></tr><tr><td>
- Search size limit
- </td><td>
- --searchrecordslimit
- </td><td>
- Sets the maximum number of records to return in a search.
- </td></tr><tr><td>
- User search fields
- </td><td>
- --usersearch
- </td><td>
- Sets the fields in a user entry that can be used as a search string. Any attribute listed has an index kept for that attribute, so setting too many attributes could affect server performance.
- </td></tr><tr><td>
- Group search fields
- </td><td>
- --groupsearch
- </td><td>
- Sets the fields in a group entry that can be used as a search string.
- </td></tr><tr><td>
- Certificate subject base
+ FreeIPA object classes
</td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>ipaobject</td></tr><tr><td>ipausergroup</td></tr><tr><td>nestedgroup</td></tr></table>
- </td><td>
- Sets the base DN to use when creating subject DNs for client certificates. This is configured when the server is set up.
- </td></tr><tr><td>
- Default user object classes
- </td><td>
- --userobjectclasses
- </td><td>
- Sets a list of object classes that are used to create FreeIPA user accounts.
- </td></tr><tr><td>
- Default group object classes
- </td><td>
- --groupobjectclasses
- </td><td>
- Sets a list of object classes that are used to create FreeIPA group accounts.
- </td></tr><tr><td>
- Password expiration notification
- </td><td>
- --pwdexpnotify
- </td><td>
- Sets how long, in days, before a password expires for the server to send a notification.
</td></tr><tr><td>
- Password plug-in features
+ Group object classes
</td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>groupofnames</td></tr><tr><td>posixgroup</td></tr></table>
- </td><td>
- Sets the format of passwords that are allowed for users.
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="config-show"><div class="titlepage"><div><div><h3 class="title" id="config-show">5.3.1. Showing the Settings Configuration</h3></div></div></div><div class="para">
- The <code class="command">config-show</code> command shows the current configuration which applies to all new user accounts. By default, only the most common attributes are displayed; use the <code class="option">--all</code> option to show the complete configuration.
- </div><pre class="screen"># ipa config-show --all
-
- dn: cn=ipaconfig,cn=etc,dc=example,dc=com
- Max. username length: 32
- Home directory base: /home
- Default shell: /bin/sh
- Default users group: ipausers
- Default e-mail domain for new users: example.com
- Search time limit: 2
- Search size limit: 100
- User search fields: uid,givenname,sn,telephonenumber,ou,title
- Group search fields: cn,description
- Enable migration mode: FALSE
- Certificate Subject base: O=EXAMPLE.COM
- Default group objectclasses: top, groupofnames, nestedgroup, ipausergroup, ipaobject
- Default user objectclasses: top, person, organizationalperson, inetorgperson, inetuser, posixaccount,
- krbprincipalaux, krbticketpolicyaux, ipaobject
- Password Expiration Notification (days): 4
- Password plugin features: AllowNThash
- cn: ipaConfig
- objectclass: nsContainer, top, ipaGuiConfig, ipaConfigObject</pre></div><div class="section" id="adding-custom-objclasses"><div class="titlepage"><div><div><h3 class="title" id="adding-custom-objclasses">5.3.2. Applying Custom Object Classes to New User Entries</h3></div></div></div><div class="para">
- User and group accounts are created with a pre-defined set of LDAP object classes applied to the entry. Any attributes which belong to the object class can be added to the user entry.
- </div><div class="para">
- While the standard and FreeIPA-specific LDAP object classes will cover most deployment scenarios, administrators may have custom object classes with custom attributes which should be applied to user entries.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
- </div></li><li class="listitem"><div class="para">
- Add the new object class to the list of object classes added to entries. The option for user object classes is <code class="option">--userobjectclasses</code>, and the option for group object classes is <code class="option">--groupobjectclasses</code>.
- </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
- </div></div></div><div class="para">
- For example:
- </div><pre class="screen">$ ipa config-mod <strong class="userinput"><code>--userobjectclasses=</code></strong>top,person,organizationalperson,inetorgperson,inetuser,posixaccount, krbprincipalaux,krbticketpolicyaux,ipaobject,<strong class="userinput"><code>employeeinfo</code></strong></pre></li></ol></div></div><div class="section" id="search-limits"><div class="titlepage"><div><div><h3 class="title" id="search-limits">5.3.3. Setting Default Search Limits</h3></div></div></div><div class="para">
- <span class="emphasis"><em>Search limits</em></span> set caps on the number of records returned or the time spent searching when querying the database for user or group entries. There are two types of search limits: time limits and size (number) limits.
- </div><div class="para">
- With the default settings, users are limited to two second searches and no more than 100 records returned per search. Those limits can be changed using the <code class="command">config-mod</code> command.
- </div><pre class="screen">$ ipa config-mod --searchtimelimit=5 --searchrecordslimit=500
-
- Max. username length: 32
- Home directory base: /home
- Default shell: /bin/sh
- Default users group: ipausers
- Default e-mail domain for new users: rhts.eng.bos.redhat.com
- Search time limit: 5
- Search size limit: 50
- User search fields: uid,givenname,sn,telephonenumber,ou,title
- Group search fields: cn,description
- Enable migration mode: FALSE
- Certificate Subject base: O=EXAMPLE.COM
- Password Expiration Notification (days): 4</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Setting the time limit or size limit value to zero (0) or -1 means that there are no limits on searches.
- </div></div></div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- Setting search size or time limits too high can negatively affect FreeIPA server performance.
- </div></div></div></div><div class="section" id="search-fields"><div class="titlepage"><div><div><h3 class="title" id="search-fields">5.3.4. Setting Search Attributes</h3></div></div></div><div class="para">
- A search for users or groups does not automatically search every possible attribute for that attribute. Rather, it searches a specific subset of attributes, and that list is configurable.
- </div><div class="para">
- To change the search attributes, use the <code class="option">--usersearch</code> and <code class="option">--groupsearch</code> options to set the attributes for user and group searches, respectively.
- </div><pre class="screen">$ ipa config-mod --usersearch=uid,givenname,sn,telephonenumber,ou,title --groupsearch=cn,description</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Always give the complete list of search attributes. Whatever values are passed with the configuration argument overwrite the previous settings.
- </div></div></div><div class="para">
- When adding attributes to the user or group search fields, make sure that there is a corresponding index within the LDAP directory for that attribute. Searches are performed based on indexes. Most standard LDAP attributes have indexes, but any custom attributes must have indexes created for them. Creating indexes is described in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Indexes-Creating_Indexes.html">indexes chapter in the Directory Server Administrator's Guide</a>.
- </div></div></div><div class="section" id="changing-pwds"><div class="titlepage"><div><div><h2 class="title" id="changing-pwds">5.4. Changing Passwords</h2></div></div></div><div class="para">
- Changing a password — your own or another user's — is done using the <code class="command">user-mod</code> command, as with other user account changes.
- </div><pre class="screen">$ ipa user-mod jsmith --password</pre><div class="para">
- Password policies (<a class="xref" href="#user-pwdpolicy">Section 5.5, “Defining Password Policies”</a>) and minimal access restrictions can be applied to a password change operation:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Regular, non-administrative users can change only their personal passwords, and all passwords are constrained by the FreeIPA password policies.
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="Configuring_IPA_Groups-Creating_IPA_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_IPA_Groups-Creating_IPA_Groups">5.5.1. Creating User Groups</h3></div></div></div><div class="section" id="new-group-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="new-group-ui">5.5.1.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>User Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the groups list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter all of the information for the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-add.png" width="444" /></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A unique name. This is the identifier used for the group in the FreeIPA domain, and it cannot be changed after it is created. The name cannot contain spaces, but other separators like an underscore (_) are allowed.
+ </div></li><li class="listitem"><div class="para">
+ A text description of the group.
+ </div></li><li class="listitem"><div class="para">
+ Whether the group is a Posix group, which adds Windows-specific information to the entry. By default, groups are not Posix groups.
+ </div></li><li class="listitem"><div class="para">
+ Optionally, the GID number for the group. This is generally not necessary because of the risk of collisions; FreeIPA will not override the given GID number, even if it not unique.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go immediately to the member selection page.
+ </div></li><li class="listitem"><div class="para">
+ Select the members, as described in <a class="xref" href="#group-members-ui">Section 5.5.2.1, “With the Web UI (Group Page)”</a>.
+ </div></li></ol></div></div><div class="section" id="new-group-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="new-group-cmd">5.5.1.2. With the Command Line</h4></div></div></div><div class="para">
+ New groups are created using the <code class="command">group-add</code> command. (This adds only the group; members are added separately.)
</div><div class="para">
- This allows administrators to create intro passwords or to reset passwords easily, while still keeping the final password confidential. Since any password sent by an administrator to the user is temporary, there is little security risk.
- </div></li><li class="listitem"><div class="para">
- Changing a password as the FreeIPA admin user overrides any FreeIPA password policies, but the password expires immediately. This requires the user to change the password at the next login. Similarly, any user who has password change rights can change a password and no password policies are applied, but the other user must reset the password at the next log in.
- </div></li><li class="listitem"><div class="para">
- Changing a password as the LDAP Directory Manager user, <span class="emphasis"><em>using LDAP tools</em></span>, overrides any FreeIPA password policies.
- </div></li></ul></div></div><div class="section" id="user-pwdpolicy"><div class="titlepage"><div><div><h2 class="title" id="user-pwdpolicy">5.5. Defining Password Policies</h2></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA, by default, does not expose passwords to clients, even hashed passwords, for system security.
- </div></div></div><div class="section" id="about-pwd-policy"><div class="titlepage"><div><div><h3 class="title" id="about-pwd-policy">5.5.1. About Password Policies and Policy Attributes</h3></div></div></div><div class="para">
- A <span class="emphasis"><em>password policy</em></span> sets certain standards for passwords, such as the password complexity and the rules for changing passwords. There are three main configuration areas that are defined within the password policy:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Strength or complexity requirements
- </div></li><li class="listitem"><div class="para">
- History
- </div></li><li class="listitem"><div class="para">
- Account lockout
- </div></li></ul></div><div class="para">
- The FreeIPA password policy is enforced jointly by the KDC and the LDAP server. While the password policy is set in the LDAP directory and is based on 389 Directory Server password policy attributes, the policy is ultimately constrained by the KDC password policy framework. The KDC policy is less flexible than the 389 Directory Server policy framework, so the FreeIPA password policy can only implement password policy elements supported in the KDC. Any other policy settings made within the 389 Directory Server are not visible or enforced in FreeIPA.
- </div><div class="para">
- Password policies are assigned either globally or to groups in FreeIPA, not to individual users. The password policy is assigned a weight, so that if a user belongs to multiple groups with different password policies, the policy with the highest priority will take precedence.
- </div><div class="para">
- The different policy attributes that can be set are listed in <a class="xref" href="#tab.pwpolicy-attrs">Table 5.4, “Password Policy Settings”</a>.
- </div><div class="table" id="tab.pwpolicy-attrs"><h6>Table 5.4. Password Policy Settings</h6><div class="table-contents"><table summary="Password Policy Settings" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
- Configuration Property
- </th><th>
- Command-Line Option
- </th><th>
- Description
- </th></tr></thead><tbody><tr><td>
- Minimum Password Lifetime
- </td><td>
- --minlife
- </td><td>
- Sets the minimum period of time, in hours, that a user's password must be in effect before the user can change it. This can prevent a user from changing a password and then immediately changing it to the original value. The default value is one hour.
- </td></tr><tr><td>
- Maximum Password Lifetime
- </td><td>
- --maxlife
- </td><td>
- Sets the maximum period of time, in days, that a user's password can be in effect before it must be changed. The default value is 90 days.
- </td></tr><tr><td>
- Minimum Number of Character Classes
- </td><td>
- --minclasses
- </td><td>
- Sets the minimum number of different classes, or types, of character that must exist in a password before it is considered valid. For example, setting this value to 3 requires that any password must have characters from at least three categories in order to be approved. The default value is zero (0), meaning there are no required classes.
- <div class="para">
- There are six character classes:
- </div>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Upper-case characters
- </div></li><li class="listitem"><div class="para">
- Lower-case characters
- </div></li><li class="listitem"><div class="para">
- Digits
- </div></li><li class="listitem"><div class="para">
- Special characters (for example, punctuation)
- </div></li><li class="listitem"><div class="para">
- 8-bit characters (characters whose decimal code starts at 128 or below)
- </div></li><li class="listitem"><div class="para">
- Number of repeated characters
- </div><div class="para">
- This weights in the opposite direction, so that if you have too many repeated characters you will not meet the quorum to satisfy the "level" expressed by <span class="property">krbPwdMinDiffChars</span>.
- </div></li></ul></div>
-
- </td></tr><tr><td>
- Minimum Length of Password
- </td><td>
- --minlength
- </td><td>
- Sets the minimum number of characters for a password. The default value is eight characters.
- </td></tr><tr><td>
- Password History
- </td><td>
- --history
- </td><td>
- Sets the number of previous passwords that are stored and which a user is prevented from using. For example, if this is set to ten, FreeIPA prevents a user from reusing any of their previous ten passwords. The default value is zero (0), which disables password history.
- <div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Even with the password history set to zero, users cannot reuse a <span class="emphasis"><em>current</em></span> password.
- </div></div></div>
-
- </td></tr><tr><td>
- Priority
- </td><td>
- --priority
- </td><td>
- Sets the priority which determines which policy is in effect. The lower the number, the higher priority.
- </td></tr><tr><td>
- Maximum Consecutive Failures
- </td><td>
- --maxfail
- </td><td>
- Specifies the maximum number of consecutive failures to input the correct password before the user's account is locked.
- </td></tr><tr><td>
- Fail Interval
- </td><td>
- --failinterval
- </td><td>
- Specifies the period (in seconds) after which the failure count will be reset.
- </td></tr><tr><td>
- Lockout Time
- </td><td>
- --lockouttime
- </td><td>
- Specifies the period (in seconds) for which a lockout is enforced.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="viewing-the_Password_Policy"><div class="titlepage"><div><div><h3 class="title" id="viewing-the_Password_Policy">5.5.2. Viewing Password Policies</h3></div></div></div><div class="para">
- The password policies, both global and group-level, can be viewed using the <code class="command">pwpolicy-show</code> command.
- </div><div class="para">
- To view the global policy, simply run the <code class="command">pwpolicy-show</code> command with no arguments:
- </div><pre class="screen">$ ipa pwpolicy-show
-
- Group: global_policy
- Max lifetime (days): 90
- Min lifetime (hours): 1
- History size: 0
- Character classes: 0
- Min length: 8
- Max failures: 6
- Failure reset interval: 60
- Lockout duration: 600</pre><div class="para">
- For a group-level password policy, specify the group name with the command:
- </div><pre class="screen">$ ipa pwpolicy-show examplegroup
-
- Group: global_policy
- Max lifetime (days): 90
- Min lifetime (hours): 1
- History size: 3
- Character classes: 4
- Min length: 8
- Max failures: 3
- Failure reset interval: 15
- Lockout duration: 150</pre><div class="para">
- A user may belong to multiple groups, each with their own separate password policies. These policies are not additive. Only one policy is in effect at a time and it applies to all password policy attributes. To see which policy is in effect for a specific user, the <code class="command">pwpolicy-show</code> command can be run for a specific user. The results also show <span class="emphasis"><em>which</em></span> group policy is in effect for that user.
- </div><pre class="screen">$ ipa pwpolicy-show jsmith
-
- Group: admins
- Max lifetime (days): 90
- Min lifetime (hours): 1
- History size: 0
- Character classes: 0
- Min length: 8
- Max failures: 6
- Failure reset interval: 60
- Lockout duration: 600</pre></div><div class="section" id="The_IPA_Password_Policy-Editing_the_Password_Policy"><div class="titlepage"><div><div><h3 class="title" id="The_IPA_Password_Policy-Editing_the_Password_Policy">5.5.3. Editing the Global Password Policy</h3></div></div></div><div class="para">
- A password policy can be selective; it may only define certain elements. A <span class="emphasis"><em>global</em></span> password policy sets defaults that are used for every user entry, unless a group policy takes priority.
- </div><div class="para">
- A global policy always exists, so there is no reason to add a global password policy. To edit the global password policy, use the <code class="command">pwpolicy-mod</code> command with the attributes to change:
- </div><pre class="screen">ipa pwpolicy-mod <em class="replaceable"><code>--attribute=value</code></em></pre><div class="para">
- For example:
- </div><pre class="screen">ipa pwpolicy-mod --lockouttime=300 --history=5 --minlength=8</pre></div><div class="section" id="Setting_Different_Password_Policies_for_Different_User_Groups"><div class="titlepage"><div><div><h3 class="title" id="Setting_Different_Password_Policies_for_Different_User_Groups">5.5.4. Setting Group-Level Password Policies</h3></div></div></div><div class="para">
- Group-level policies override the global policies and offer specific policies that only apply to group members. Password policies are not cumulative. Either a group policy or the global policy is in effect for a user or group, but not both simultaneously.
- </div><div class="para">
- Group-level policies do not exist by default, so they must be created manually.
- </div><pre class="screen">$ ipa pwpolicy-add <em class="replaceable"><code>groupName --attribute-value</code></em></pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- It is not possible to set a password policy for a non-existent group.
- </div></div></div><div class="para">
- For example:
- </div><pre class="screen">$ ipa pwpolicy-add examplegroup --minlife=7 --maxlife=49 --history= --priority=1
-Group: examplegroup
-Max lifetime (days): 49
-Min lifetime (hours): 7
-Priority: 1
-</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Setting an attribute to a blank value effectively removes that attribute from the password policy.
- </div></div></div></div><div class="section" id="Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies"><div class="titlepage"><div><div><h3 class="title" id="Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies">5.5.5. Setting the Priority of Group Password Policies</h3></div></div></div><div class="para">
- A user may belong to multiple groups, each with different password policies. Since only one policy can be in effect for a user, there has to be a method to assign precedence to policies. That is done through <span class="emphasis"><em>priority</em></span>.
- </div><div class="para">
- The highest priority is zero (0). The lower the number, the higher the priority.
- </div><pre class="screen">$ ipa pwpolicy-add examplegroup --priority=10</pre><div class="para">
- When a user belongs to multiple groups, the group password policy with the lowest number has the priority.
- </div></div><div class="section" id="The_IPA_Password_Policy-Using_SSH_for_Password_Authentication"><div class="titlepage"><div><div><h3 class="title" id="The_IPA_Password_Policy-Using_SSH_for_Password_Authentication">5.5.6. Enabling a Password Change Dialog</h3></div></div></div><div class="para">
- To use password authentication with new users rather than Kerberos tickets and GSS-API, enable <span class="emphasis"><em>challenge-response</em></span> authentication. Using challenge-response authentication enables FreeIPA to open a password change dialog box. This is not enabled by default because some SSL clients may not support challenge-response authentication, and it is needed only if the password has expired.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open the <code class="filename">/etc/ssh/sshd_config</code> file.
- </div></li><li class="listitem"><div class="para">
- Set <em class="parameter"><code>ChallengeResponseAuthentication</code></em> to <code class="literal">yes</code>.
- </div></li></ol></div></div></div><div class="section" id="user-groups"><div class="titlepage"><div><div><h2 class="title" id="user-groups">5.6. Managing User Groups</h2></div></div></div><div class="para">
- User groups are a way of centralizing control over important management tasks, particularly access control and password policies. Three groups are created during the installation, specifically for use by FreeIPA operations:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- ipausers, which contains all users.
- </div></li><li class="listitem"><div class="para">
- admins, which contains administrative users. The initial <code class="command">admin</code> user belongs to this group.
- </div></li><li class="listitem"><div class="para">
- editors, which is a special group for users working through the web UI. This group allows users to <span class="emphasis"><em>edit</em></span> other users' entries, though without all of the rights of the admin user.
- </div></li></ul></div><div class="para">
- All groups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
- </div><div class="para">
- Because groups are easy to create, it is possible to be very flexible in what groups to create and how they are organized. Groups can be defined around organizational divisions like departments, physical locations, or FreeIPA or infrastructure usage guidelines for access controls.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Some operating systems limit the number of groups that can be assigned to system users. For example, Solaris and AIX systems both limit users to 16 groups per user. This can be an issue when using nested groups, when a user may be automatically added to multiple groups.
- </div></div></div><div class="para">
- When a group entry is created, it is automatically assigned certain LDAP object classes. (LDAP object classes and attributes are discussed in detail in the <em class="citetitle">Directory Server Deployment Guide</em> and the <em class="citetitle">Directory Server Schema Reference</em>.) For groups, only two attributes truly matter: the name and the description.
- </div><div class="table" id="tab.default-group-objclasses"><h6>Table 5.5. Default FreeIPA Group Object Classes</h6><div class="table-contents"><table summary="Default FreeIPA Group Object Classes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- Description
- </th><th>
- Object Classes
- </th></tr></thead><tbody><tr><td>
- FreeIPA object classes
- </td><td>
- <table border="0" summary="Simple list" class="simplelist"><tr><td>ipaobject</td></tr><tr><td>ipausergroup</td></tr><tr><td>nestedgroup</td></tr></table>
-
- </td></tr><tr><td>
- Group object classes
- </td><td>
- <table border="0" summary="Simple list" class="simplelist"><tr><td>groupofnames</td></tr><tr><td>posixgroup</td></tr></table>
-
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="Configuring_IPA_Groups-Creating_IPA_Groups"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Groups-Creating_IPA_Groups">5.6.1. Creating User Groups</h3></div></div></div><div class="para">
- New groups are created using the <code class="command">group-add</code> command. (This adds only the group; members are added separately.)
- </div><div class="para">
- Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
- </div><pre class="screen">$ ipa group-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>" [--nonposix]</pre><div class="para">
- Additionally, there is one other configuration option, <code class="option">--nonposix</code>. By default, all groups are created as POSIX groups, which allows interoperability with Windows users and groups and programs like Samba. However, a group can be created as purely Linux group by using the <code class="option">--nonposix</code> option, which does not add the <code class="command">posixGroup</code> object class to the entry.
- </div><div class="para">
- For example:
- </div><pre class="screen">$ ipa group-add examplegroup --desc="for examples"
+ Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
+ </div><pre class="screen">$ ipa group-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>" [--nonposix]</pre><div class="para">
+ Additionally, there is one other configuration option, <code class="option">--nonposix</code>. By default, all groups are created as POSIX groups, which allows interoperability with Windows users and groups and programs like Samba. However, a group can be created as purely Linux group by using the <code class="option">--nonposix</code> option, which does not add the <code class="command">posixGroup</code> object class to the entry.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa group-add examplegroup --desc="for examples"
----------------------
Added group "examplegroup"
@@ -2606,8 +2505,8 @@ Added group "examplegroup"
Group name: examplegroup
Description: for examples
GID: 855800010</pre><div class="para">
- When no arguments are used, the command prompts for the required group account information:
- </div><pre class="screen">$ ipa group-add
+ When no arguments are used, the command prompts for the required group account information:
+ </div><pre class="screen">$ ipa group-add
Group name: engineering
Description: for engineers
-------------------------
@@ -2617,20 +2516,52 @@ Added group "engineering"
Description: for engineers
GID: 387115842
</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a group is created without specifying a GID number, then the group entry is assigned the ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a group always has a unique number for its GID number.
- </div><div class="para">
- If a number is <span class="emphasis"><em>manually</em></span> assigned to a group entry, the server does not validate that the <em class="parameter"><code>gidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ When a group is created without specifying a GID number, then the group entry is assigned the ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="#Managing-Unique_UID_and_GID_Attributes">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a group always has a unique number for its GID number.
+ </div><div class="para">
+ If a number is <span class="emphasis"><em>manually</em></span> assigned to a group entry, the server does not validate that the <em class="parameter"><code>gidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ </div><div class="para">
+ If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa group-find --all</code>.
+ </div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ You cannot edit the group name. The group name is the primary key, so changing it is the equivalent of deleting the group and creating a new one.
+ </div></div></div></div></div><div class="section" id="adding-members"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-members">5.5.2. Adding Group Members</h3></div></div></div><div class="section" id="group-members-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="group-members-ui">5.5.2.1. With the Web UI (Group Page)</h4></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This procedure adds a user to a group. User groups can contain other user groups as their members. These are <span class="emphasis"><em>nested</em></span> groups.
+ </div><div class="para">
+ It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div><div class="para">
+ When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>User Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the group to which to add members.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/groups-menu.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the users to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the names to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/groups-addmembers.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div><div class="para">
+ Group members can be users or other user groups. It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div></div><div class="section" id="groups-ui-users"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="groups-ui-users">5.5.2.2. With the Web UI (User's Page)</h4></div></div></div><div class="para">
+ Users can also be added to a group through the user's page.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>User Groups</strong></span> tab on the user entry page.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-links.png" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the groups for the user to join, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the groups to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-addmembers-user.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="group-members-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="group-members-cmd">5.5.2.3. With the Command Line</h4></div></div></div><div class="para">
+ Members are added to a group using the <code class="command">group-add-member</code> command. This command can add both users as group members and other groups as group members.
</div><div class="para">
- If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa group-find --all</code>.
- </div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- You cannot edit the group name. The group name is the primary key, so changing it is the equivalent of deleting the group and creating a new one.
- </div></div></div></div><div class="section" id="adding-members"><div class="titlepage"><div><div><h3 class="title" id="adding-members">5.6.2. Adding Group Members</h3></div></div></div><div class="para">
- Members are added to a group using the <code class="command">group-add-member</code> command. This command can add both users as group members and other groups as group members.
- </div><div class="para">
- The syntax of the <code class="command">group-add-member</code> command requires only th group name and a comma-separated list of users to add:
- </div><pre class="screen">$ ipa group-add-member <em class="replaceable"><code>groupName</code></em> [--users=<em class="replaceable"><code>list</code></em>] [--groups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
- For example, this adds three users to the <code class="command">engineering</code> group:
- </div><pre class="screen">$ ipa group-add-member engineering --users=jsmith,bjensen,mreynolds
+ The syntax of the <code class="command">group-add-member</code> command requires only the group name and a comma-separated list of users to add:
+ </div><pre class="screen">$ ipa group-add-member <em class="replaceable"><code>groupName</code></em> [--users=<em class="replaceable"><code>list</code></em>] [--groups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
+ For example, this adds three users to the <code class="command">engineering</code> group:
+ </div><pre class="screen">$ ipa group-add-member engineering --users=jsmith,bjensen,mreynolds
Group name: engineering
Description: for engineers
GID: 387115842
@@ -2639,8 +2570,8 @@ Added group "engineering"
Number of members added 3
-------------------------
</pre><div class="para">
- Likewise, other groups can be added as members, which creates nested groups:
- </div><pre class="screen">$ ipa group-add-member engineering --groups=dev,qe1,dev2
+ Likewise, other groups can be added as members, which creates nested groups:
+ </div><pre class="screen">$ ipa group-add-member engineering --groups=dev,qe1,dev2
Group name: engineering
Description: for engineers
GID: 387115842
@@ -2649,20 +2580,20 @@ Number of members added 3
Number of members added 3
-------------------------
</pre><div class="para">
- When displaying nested groups, members are listed as members and the members of any member groups are listed as indirect members. For example:
- </div><pre class="screen">$ ipa group-show examplegroup
+ When displaying nested groups, members are listed as members and the members of any member groups are listed as indirect members. For example:
+ </div><pre class="screen">$ ipa group-show examplegroup
Group name: examplegroup
Description: for examples
GID: 93200002
Member users: jsmith,bjensen,mreynolds
Member groups: californiausers
Indirect Member users: sbeckett,acalavicci</pre><div class="para">
- It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
- </div></div></div><div class="para">
- A group member is removed using the <code class="command">group-remove-member</code> command.
- </div><pre class="screen">$ ipa group-remove-member engineering --users=jsmith
+ It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
+ </div></div></div><div class="para">
+ A group member is removed using the <code class="command">group-remove-member</code> command.
+ </div><pre class="screen">$ ipa group-remove-member engineering --users=jsmith
Group name: engineering
Description: for engineers
@@ -2670,17 +2601,35 @@ Number of members added 3
Member users: bjensen,mreynolds
---------------------------
Number of members removed 1
----------------------------</pre></div><div class="section" id="Configuring_IPA_Groups-Deleting_IPA_Groups"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Groups-Deleting_IPA_Groups">5.6.3. Deleting User Groups</h3></div></div></div><div class="para">
+---------------------------</pre></div><div class="section" id="viewing-group-members"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-group-members">5.5.2.4. Viewing Direct and Indirect Members of a Group</h4></div></div></div><div class="para">
+ User groups can contain other user groups as members. This is called a <span class="emphasis"><em>nested group</em></span>. This also means that a group has two types of members:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Direct members</em></span>, which are added explicitly to the group
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Indirect members</em></span>, which are members of the group because they are members of another user group which is a member of the group
+ </div></li></ul></div><div class="para">
+ The FreeIPA web UI has an easy way to view direct and indirect members of a group. The members list is filtered by member type, and this can be toggled by selecting the <span class="guilabel"><strong>Direct</strong></span> and <span class="guilabel"><strong>Indirect</strong></span> radio buttons at the top right corner of the members list.
+ </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/groups-menu.png" width="444" alt="Indirect and Direct Members" /></div></div><h6>Figure 5.1. Indirect and Direct Members</h6></div><br class="figure-break" /><div class="para">
+ Being able to track indirect members makes it easier to assign group membership properly, without duplicating membership.
+ </div></div></div><div class="section" id="Configuring_IPA_Groups-Deleting_IPA_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_IPA_Groups-Deleting_IPA_Groups">5.5.3. Deleting User Groups</h3></div></div></div><div class="para">
When a user group is deleted, only the group is removed. The user accounts of group members (including nested groups) are not affected. Additionally, any access control delegations that apply to that group are removed.
</div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
Deleting a group is immediate and permanent. If any group configuration (such as delegations) is required, it must be assigned to another group or a new group created.
- </div></div></div><div class="para">
- The <code class="command">group-del</code> command to deletes the specified group. For example:
- </div><pre class="screen">$ ipa group-del examplegroup</pre></div></div><div class="section" id="searching"><div class="titlepage"><div><div><h2 class="title" id="searching">5.7. Searching for Users and Groups</h2></div></div></div><div class="para">
- The user searches in FreeIPA can be run against simple (full word) or partial search strings. The range of attributes that are searched is configured as part of the default FreeIPA configuration, as in <a class="xref" href="#Configuring_IPA_Users-Specifying_Default_User_Settings">Section 5.3, “Specifying Default User Settings”</a>.
+ </div></div></div><div class="section" id="deleting-group-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="deleting-group-ui">5.5.3.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>User Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the checkbox by the name of the group to delete.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link at the top of the task area.
+ </div></li><li class="listitem"><div class="para">
+ When prompted, confirm the delete action.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-delete.png" width="444" /></div></div></li></ol></div></div><div class="section" id="deleting-group-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="deleting-group-cmd">5.5.3.2. With the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">group-del</code> command to deletes the specified group. For example:
+ </div><pre class="screen">$ ipa group-del examplegroup</pre></div></div></div><div class="section" id="searching"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="searching">5.6. Searching for Users and Groups</h2></div></div></div><div class="para">
+ The user searches in FreeIPA can be run against simple (full word) or partial search strings. The range of attributes that are searched is configured as part of the default FreeIPA configuration, as in <a class="xref" href="#Configuring_IPA_Users-Specifying_Default_User_Settings">Section 5.7, “Specifying Default User and Group Settings”</a>.
</div><div class="para">
- By default, there are six attributes that are indexed for user searches and two that are indexed for group searches. These are listed in <a class="xref" href="#tab.search-attrs">Table 5.6, “Default Search Attributes”</a>. All search attributes are searched in a user/group search.
- </div><div class="table" id="tab.search-attrs"><h6>Table 5.6. Default Search Attributes</h6><div class="table-contents"><table summary="Default Search Attributes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th colspan="2">
+ By default, there are six attributes that are indexed for user searches and two that are indexed for group searches. These are listed in <a class="xref" href="#tab.search-attrs">Table 5.4, “Default Search Attributes”</a>. All search attributes are searched in a user/group search.
+ </div><div class="table" id="tab.search-attrs"><h6>Table 5.4. Default Search Attributes</h6><div class="table-contents"><table summary="Default Search Attributes" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th colspan="2">
User Search Attributes
</th></tr></thead><tbody><tr><td>
First name
@@ -2694,29 +2643,31 @@ Number of members removed 1
Organizational unit
</td><td>
Phone number
- </td></tr></tbody></table><table summary="Default Search Attributes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th colspan="2">
+ </td></tr></tbody></table><table summary="Default Search Attributes" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th colspan="2">
Group Search Attributes
</th></tr></thead><tbody><tr><td>
Name
</td><td>
Description
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- Searches are simple:
- </div><pre class="screen">$ ipa user-find|group-find <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>options</code></em></pre><div class="para">
- There are a few general rules with searches:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- If there is no <span class="emphasis"><em>string</em></span>, then the search returns every entry in FreeIPA, up to the search limit.
- </div></li><li class="listitem"><div class="para">
- With the command-line tools, only a single search string can be used for user and group searches. With the UI, multiple strings can be used.
- </div></li><li class="listitem"><div class="para">
- Searches are case insensitive.
- </div></li><li class="listitem"><div class="para">
- Search results are displayed alphabetically, with exact matches listed first, followed by partial matches.
- </div></li><li class="listitem"><div class="para">
- Wildcards cannot be used in searches. The search string must include at least one character that appears in one of the indexed search fields.
- </div></li></ul></div><div class="example" id="ex.user-search"><h6>Example 5.2. User Search for John</h6><div class="example-contents"><div class="para">
- The basic search looks for the string <span class="emphasis"><em>john</em></span>, which can appear in any of the search indexes.
- </div><pre class="screen">$ ipa user-find john
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="user-search-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="user-search-ui">5.6.1. With the UI</h3></div></div></div><div class="para">
+ Both user and group main pages have a search bar in the upper right corner of the task area. This search box searches against all of the fields listed in <a class="xref" href="#tab.search-attrs">Table 5.4, “Default Search Attributes”</a>. Type in any string, even a single letter, and click the magnifying glass icon. The UI filters the displayed list to match the search string.
+ </div><div class="figure" id="fig.user-search"><div class="figure-contents"><div class="mediaobject"><img src="images/user-search.png" width="444" alt="User Search Box" /></div></div><h6>Figure 5.2. User Search Box</h6></div><br class="figure-break" /></div><div class="section" id="user-search-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="user-search-cmd">5.6.2. With the Command Line</h3></div></div></div><div class="para">
+ Searches are simple:
+ </div><pre class="screen">$ ipa user-find|group-find <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>options</code></em></pre><div class="para">
+ There are a few general rules with searches:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ If there is no <span class="emphasis"><em>string</em></span>, then the search returns every entry in FreeIPA, up to the search limit.
+ </div></li><li class="listitem"><div class="para">
+ With the command-line tools, only a single search string can be used for user and group searches. With the UI, multiple strings can be used.
+ </div></li><li class="listitem"><div class="para">
+ Searches are case insensitive.
+ </div></li><li class="listitem"><div class="para">
+ Search results are displayed alphabetically, with exact matches listed first, followed by partial matches.
+ </div></li><li class="listitem"><div class="para">
+ Wildcards cannot be used in searches. The search string must include at least one character that appears in one of the indexed search fields.
+ </div></li></ul></div><div class="example" id="ex.user-search"><h6>Example 5.2. User Search for John</h6><div class="example-contents"><div class="para">
+ The basic search looks for the string <span class="emphasis"><em>john</em></span>, which can appear in any of the search indexes.
+ </div><pre class="screen">$ ipa user-find john
---------------
2 users matched
@@ -2741,8 +2692,8 @@ Number of members removed 1
----------------------------
Number of entries returned 2
----------------------------</pre><div class="para">
- A search can also accept options like <code class="option">--raw</code>. <code class="option">--raw</code> prints the LDAP attributes for the user account rather than the reading-friendly field names.
- </div><pre class="screen">$ ipa user-find john --raw
+ A search can also accept options like <code class="option">--raw</code>. <code class="option">--raw</code> prints the LDAP attributes for the user account rather than the reading-friendly field names.
+ </div><pre class="screen">$ ipa user-find john --raw
---------------
2 users matched
@@ -2767,884 +2718,2030 @@ Number of entries returned 2
----------------------------
Number of entries returned 2
----------------------------</pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- If the desired entry is not listed, it is possible that the search hit the preset search size limit before the entry was found. Change the search record or time limits, as in <a class="xref" href="#search-limits">Section 5.3.3, “Setting Default Search Limits”</a>, to allow more entries to be returned.
- </div></div></div></div></div><div xml:lang="en-US" class="chapter" id="kerberos" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 6. Identity: Managing the Kerberos Domain</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-kerberos">6.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href="#about-principal-names">6.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="#about-keytabs">6.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="#kerb-policies">6.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#kerb-policies-global">6.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="#user-ticket-policies">6.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Authentication-Refreshing_Kerberos_Tickets"
>6.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="#kerberos-pwd-cache">6.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="#removing-keytabs">6.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="#Kerberos_Errors">6.6. Troubleshooting Kerberos Errors</a></span></dt></dl></div><div class="para">
- Kerberos authentication is the core of authentication within the FreeIPA domain. The FreeIPA server actually runs a Kerberos server within it, and this Kerberos server can be configured for custom policies for managing tickets and keytabs.
- </div><div class="para">
- For more information on Kerberos concepts, see the MIT Kerberos documentation, <a href="http://web.mit.edu/kerberos/www/">http://web.mit.edu/kerberos/www/</a>.
- </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- FreeIPA has its own command-line tools to use to manage Kerberos policies. <span class="bold bold"><strong>Do not</strong></span> use <code class="command">kadmin</code> or <code class="command">kadmin.local</code> to manage FreeIPA Kerberos settings.
- </div></div></div><div class="section" id="about-kerberos"><div class="titlepage"><div><div><h2 class="title" id="about-kerberos">6.1. About Kerberos</h2></div></div></div><a id="id3251321" class="indexterm"></a><div class="para">
- Kerberos provides an authentication layer between services and users. Kerberos centralizes authentication into a single location; a user authenticates to the Kerberos server, and then when that user attempts to access any resource on the network, that resource can check the <span class="emphasis"><em>key distribution center</em></span> (KDC) for the stored user credentials. This allows users to access multiple resources without having to supply credentials separately to each and every one.
+ If the desired entry is not listed, it is possible that the search hit the preset search size limit before the entry was found. Change the search record or time limits, as in <a class="xref" href="#search-limits">Section 5.7.4, “Setting Default Search Limits”</a>, to allow more entries to be returned.
+ </div></div></div></div></div><div class="section" id="Configuring_IPA_Users-Specifying_Default_User_Settings"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_IPA_Users-Specifying_Default_User_Settings">5.7. Specifying Default User and Group Settings</h2></div></div></div><div class="para">
+ FreeIPA uses a template when it creates new entries.
</div><div class="para">
- All of the users and services, combined, and all of the KDCs and Kerberos servers that are aware of each other constitute a <span class="emphasis"><em>realm</em></span>. Each user, machine, and service within the realm is identified by a unique name called the <span class="emphasis"><em>principal</em></span>. The user or service uses the principal and a verifying credential (usually a password) to authenticate to the KDC. The credential that is shared with the KDC is a <span class="emphasis"><em>key</em></span> and it is stored in a file called a <span class="emphasis"><em>key table</em></span> or <span class="emphasis"><em>keytab</em></span>.
+ For users, the template is very specific. FreeIPA uses default values for several core attributes for FreeIPA user accounts. These defaults can define actual values for user account attributes (such as the home directory location) or it can define the format of attribute values, such as the username length. These settings also define the object classes assigned to users.
</div><div class="para">
- When the KDC verifies the user's identity, it issues a <span class="emphasis"><em>ticket</em></span>. The ticket is a long-term pass to any service and machine on the realm. The KDC issues the user a special kind of ticket called a <span class="emphasis"><em>ticket-granting ticket</em></span> (TGT). Whenever the user tries to access a resource within the Kerberos realm, the resource sends a request for a ticket specifically for it. The TGT is used to issue a resource-specific ticket that the resource then uses to authenticate the user and grant access.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- When a FreeIPA client is first configured, the host principal is automatically retrieved by the setup script and stored in the <code class="filename">/etc/krb5.keytab</code> file. This host principal is stored within the host record so that local service commands cannot be used with this principal. This prepares the client to function in the FreeIPA realm.
- </div></div></div><div class="section" id="about-principal-names"><div class="titlepage"><div><div><h3 class="title" id="about-principal-names">6.1.1. About Principal Names</h3></div></div></div><div class="para">
- The principal identifies not only the user or service, but also the realm that that entity belongs to. A principal name has two parts, the identifier and the realm:
- </div><pre class="screen"><em class="replaceable"><code>identifier</code></em>@<em class="replaceable"><code>REALM</code></em></pre><div class="para">
- For a user, the <span class="emphasis"><em>identifier</em></span> is only the Kerberos username. For a service, the <span class="emphasis"><em>identifier</em></span> is a combination of the service name and the hostname of the machine it runs on:
- </div><pre class="screen"><em class="replaceable"><code>service/FQDN</code></em>@<em class="replaceable"><code>REALM</code></em></pre><div class="para">
- The <span class="emphasis"><em>service</em></span> name is a case-sensitive string that is specific to the service type, like <code class="command">host</code>, <code class="command">ldap</code>, <code class="command">http</code>, and <code class="command">dns</code>. Not all services have obvious principal identifiers; the <code class="systemitem">sshd</code> daemon, for example, uses the host service principal.
- </div><div class="para">
- The host principal is usually stored in <code class="filename">/etc/krb5.keytab</code>.
- </div><div class="para">
- When Kerberos requests a ticket, it always resovles a CNAME to the corresponding DNS A records. When service or host principals are created, then it must use the A record. For example, a CNAME is mapped to a slightly different A record:
- </div><pre class="screen">CNAME www.example.com -> A name web-01.example.com</pre><div class="para">
- A service attempts to connect to the host using its CNAME:
- </div><pre class="screen">$ ssh www.example.com</pre><div class="para">
- The Kerberos server requests a ticket for the resolved A name, <code class="command">host/web-01.example.com at EXAMPLE.COM</code>, so that must be the host principal used.
- </div></div><div class="section" id="about-keytabs"><div class="titlepage"><div><div><h3 class="title" id="about-keytabs">6.1.2. About Protecting Keytabs</h3></div></div></div><div class="para">
- To protect keytab files, reset the permissions and ownership to restrict access to the files to only the keytab owner. : For example, set the owner of the Apache keytab (<code class="filename">/etc/httpd/conf/ipa.keytab</code>) to <code class="literal">httpd</code> and the mode to <code class="literal">0600</code>.
- </div></div></div><div class="section" id="kerb-policies"><div class="titlepage"><div><div><h2 class="title" id="kerb-policies">6.2. Setting Kerberos Ticket Policies</h2></div></div></div><a id="id4683554" class="indexterm"></a><a id="id4683562" class="indexterm"></a><div class="para">
- The Kerberos <span class="emphasis"><em>ticket policy</em></span> sets basic restructions on managing tickets within the Kerberos realm, such as the maximum ticket lifetime and the maximum renewal age (the period during which the ticket is renewable).
+ For groups, the template only defines the assigned object classes.
</div><div class="para">
- The Kerberos ticket policy is set globally so that it applies to every ticket issued within the realm. FreeIPA also has the ability to set user-level ticket policies which override the global policies. This can be used, for example, to set extended expiration times for administrators or to set shorter expiration times for some employees.
- </div><div class="section" id="kerb-policies-global"><div class="titlepage"><div><div><h3 class="title" id="kerb-policies-global">6.2.1. Setting Global Ticket Policies</h3></div></div></div><a id="id3192459" class="indexterm"></a><div class="para">
- The <code class="command">ipa krbtpolicy-mod</code> command modifies the policy, while the <code class="command">ipa krbtpolicy-reset</code> command resets the policy to the default values.
- </div><div class="para">
- For example:
- </div><pre class="screen"># ipa krbtpolicy-mod --maxlife=3600 --maxrenew=18000
- Max life: 3600
- Max renew: 18000</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- Any change to the global Kerberos ticket policy requires a restart of the KDC for the changes to take effect. Restart the KDC:
-<pre class="screen"># service krb5kdc restart</pre>
-
- </div></div></div></div><div class="section" id="user-ticket-policies"><div class="titlepage"><div><div><h3 class="title" id="user-ticket-policies">6.2.2. Setting User-Level Ticket Policies</h3></div></div></div><a id="id3370910" class="indexterm"></a><div class="para">
- User-level Kerberos ticket policies are set using the same commands as global policies, but the user is specified in the command.
- </div><div class="para">
- For example:
- </div><pre class="screen"># ipa krbtpolicy-mod jsmith --maxlife=3600
- Max life: 3600</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- User-level policies take effect immediately on the next requested ticket (such as running <code class="command">kinit</code>), without having to restart the KDC service.
- </div></div></div></div></div><div class="section" id="Configuring_Authentication-Refreshing_Kerberos_Tickets"><div class="titlepage"><div><div><h2 class="title" id="Configuring_Authentication-Refreshing_Kerberos_Tickets">6.3. Refreshing Kerberos Tickets</h2></div></div></div><div class="para">
- Kerberos keys are analogous to passwords. Like passwords, security policies may require that Kerberos tickets are manually refreshed after a specified interval.
- </div><div class="para">
- The version of the key is shown in its <span class="emphasis"><em>key version number</em></span> (KVNO). Refreshing (also called rotating) the principal's key increments the KVNO in the keytab entry. When a key is refreshed, a new entry is added to the keytab with a higher KVNO. The original key remains in the keytab but is no longer used to issue tickets.
+ These default definitions are all contained in a single configuration entry for the FreeIPA server, <code class="command">cn=ipaconfig,cn=etc,dc=example,dc=com</code>.
</div><div class="para">
- Each keytab for the FreeIPA realm has an entry in the FreeIPA LDAP server, which includes its last change time. The principals which need to be refreshed can be regenerated using the <code class="command">ipa-getkeytab</code> command.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The <code class="command">ipa-getkeytab</code> command does not delete the old keytab in case it already exists in the file.
- </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Find all keytabs issued before the requisite date. For example, this looks for any principals created between midnight on January 1, 2010, and 11:59 PM on December 31, 2010:
- </div><pre class="screen"># ldapsearch -x -b "cn=computers,cn=accounts,dc=example,dc=com" "(&(krblastpwdchange>=20100101000000)(krblastpwdchange<=20101231235959))" dn krbprincipalname
-
-# ldapsearch -x -b "cn=services,cn=accounts,dc=example,dc=com" "(&(krblastpwdchange>=20100101000000)(krblastpwdchange<=20101231235959))" dn krbprincipalname</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Host (machine) principals are stored unter the <code class="command">cn=computers,cn=accounts,dc=example,dc=com</code> subtree.
- </div></li><li class="listitem"><div class="para">
- Service principals are stored under the <code class="command">cn=services,cn=accounts,dc=example,dc=com</code> subtree.
- </div></li><li class="listitem"><div class="para">
- Filter by the last change date (<em class="parameter"><code>krblastpwdchange</code></em>).
- </div></li><li class="listitem"><div class="para">
- Limit the search result information to only the entry name and principal by specifying the <em class="parameter"><code>dn krbprincipalname</code></em> attributes.
- </div></li></ul></div><div class="para">
- Dates are expressed in YYYYMMDD format, and times in HHMMSS format (GMT).
- </div></li><li class="listitem"><div class="para">
- Retrieve a new keytab for the principal using the <code class="command">ipa-getkeytab</code> command. This requires the location of the original keytab for the service or host (<code class="option">-k</code>), the principal (<code class="option">-p</code>), and the FreeIPA server hostname (<code class="option">-s</code>).
- </div><div class="para">
- For example, this refreshes the host principal with a keytab in the default location of <code class="filename">/etc/krb5.keytab</code>:
-<pre class="screen"># ipa-getkeytab -p host/client.example.com at EXAMPLE.COM -s ipa.example.com -k /etc/krb5.keytab</pre>
+ The configuration can be changed using the <code class="command">ipa config-mod</code> command.
+ </div><div class="table" id="tab.user-config-defaults"><h6>Table 5.5. Default User Parameters</h6><div class="table-contents"><table summary="Default User Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ Field
+ </th><th>
+ Command-Line Option
+ </th><th>
+ Descriptions
+ </th></tr></thead><tbody><tr><td>
+ Maximum username length
+ </td><td>
+ --maxusername
+ </td><td>
+ Sets the maximum number of characters for usernames. The default value is eight.
+ </td></tr><tr><td>
+ Root for home directories
+ </td><td>
+ --homedirectory
+ </td><td>
+ Sets the default directory to use for user home directories. The default value is <code class="filename">/home</code>.
+ </td></tr><tr><td>
+ Default shell
+ </td><td>
+ --defaultshell
+ </td><td>
+ Sets the default shell to use for users. The default value is <code class="filename">/bin/sh</code>.
+ </td></tr><tr><td>
+ Default user group
+ </td><td>
+ --defaultgroup
+ </td><td>
+ Sets the default group to which all newly created accounts are added. The default value is <code class="systemitem">ipausers</code>, which is automatically created during the FreeIPA server installation process.
+ </td></tr><tr><td>
+ Default e-mail domain
+ </td><td>
+ --emaildomain
+ </td><td>
+ Sets the email domain to use to create email addressed based on the new accounts. The default is the FreeIPA server domain.
+ </td></tr><tr><td>
+ Search time limit
+ </td><td>
+ --searchtimelimit
+ </td><td>
+ Sets the maximum amount of time, in seconds, to spend on a search before the server returns results.
+ </td></tr><tr><td>
+ Search size limit
+ </td><td>
+ --searchrecordslimit
+ </td><td>
+ Sets the maximum number of records to return in a search.
+ </td></tr><tr><td>
+ User search fields
+ </td><td>
+ --usersearch
+ </td><td>
+ Sets the fields in a user entry that can be used as a search string. Any attribute listed has an index kept for that attribute, so setting too many attributes could affect server performance.
+ </td></tr><tr><td>
+ Group search fields
+ </td><td>
+ --groupsearch
+ </td><td>
+ Sets the fields in a group entry that can be used as a search string.
+ </td></tr><tr><td>
+ Certificate subject base
+ </td><td>
- </div><div class="para">
- This refreshes the keytab for the Apache service, with a keytab in the default location of <code class="filename">/etc/httpd/conf/ipa.keytab</code>:
-<pre class="screen"># ipa-getkeytab -p HTTP/client.example.com at EXAMPLE.COM -s ipa.example.com -k /etc/httpd/conf/ipa.keytab</pre>
+ </td><td>
+ Sets the base DN to use when creating subject DNs for client certificates. This is configured when the server is set up.
+ </td></tr><tr><td>
+ Default user object classes
+ </td><td>
+ --userobjectclasses
+ </td><td>
+ Sets a list of object classes that are used to create FreeIPA user accounts.
+ </td></tr><tr><td>
+ Default group object classes
+ </td><td>
+ --groupobjectclasses
+ </td><td>
+ Sets a list of object classes that are used to create FreeIPA group accounts.
+ </td></tr><tr><td>
+ Password expiration notification
+ </td><td>
+ --pwdexpnotify
+ </td><td>
+ Sets how long, in days, before a password expires for the server to send a notification.
+ </td></tr><tr><td>
+ Password plug-in features
+ </td><td>
- </div></li><li class="listitem"><div class="para">
- Regenerate the keytab using <code class="command">ipa-getkeytab</code> for every service.
- </div></li></ol></div><div class="para">
- The <code class="command">klist</code> command displays the new key version number for the refreshed keytab. The original keytab still exists in the database, and it is listed with the previous KVNO.
-<pre class="screen"># klist -kt /etc/krb5.keytab
-Keytab: WRFILE:/etc/krb5.keytab
-KVNO Timestamp Principal
----- ----------------- --------------------------------------------------------
- 1 06/09/10 11:23:01 host/client.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
- 2 06/09/11 05:58:47 host/client.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
- 1 03/09/11 13:57:16 krbtgt/EXAMPLE.COM at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
- 1 03/09/11 13:57:16 HTTP/ipa.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
- 1 03/09/11 13:57:16 ldap/ipa.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
-</pre>
+ </td><td>
+ Sets the format of passwords that are allowed for users.
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="config-show"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="config-show">5.7.1. Viewing the Settings Configuration</h3></div></div></div><div class="section" id="show-config-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="show-config-ui">5.7.1.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ The complete configuration entry is shown in three sections, one for all search limits, one for user templates, and one for group templates.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config.png" width="444" /></div></div></li></ol></div></div><div class="section" id="show-config-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="show-config-cmd">5.7.1.2. From the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">config-show</code> command shows the current configuration which applies to all new user accounts. By default, only the most common attributes are displayed; use the <code class="option">--all</code> option to show the complete configuration.
+ </div><pre class="screen"># ipa config-show --all
- </div><div class="para">
- Tickets issued against the old keytab continue to work, while new tickets are issued using the key with the highest KVNO. This avoids any disruption to system operations.
- </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- Some services, such as NFSv4, only support a limited set of encryption types. Pass the appropriate arguments to the <code class="command">ipa-getkeytab</code> command to configure the keytab properly.
- </div></div></div></div><div class="section" id="kerberos-pwd-cache"><div class="titlepage"><div><div><h2 class="title" id="kerberos-pwd-cache">6.4. Caching Kerberos Passwords</h2></div></div></div><a id="id3117775" class="indexterm"></a><a id="id3117787" class="indexterm"></a><div class="para">
- A machine may not always be on the same network as the FreeIPA domain; for example, a machine may need to be logged into a VPN before it can access the FreeIPA domain. If a user logs into a system when it is offline and then later attempts to connect to FreeIPA services, then the user is blocked because there is no FreeIPA Kerberos ticket for that user. FreeIPA works around that limitation by using SSSD to store the Kerberos passwords in the SSSD cache.
- </div><div class="para">
- This is configured by default by the <code class="command">ipa-client-install</code> script. A configuration parameter is added to the <code class="filename">/etc/sssd/sssd.conf</code> file which specifically instructs SSSD to store those Kerberos passwords for the FreeIPA domain:
- </div><pre class="programlisting"><span class="perl_String">[</span><span class="perl_Reserved">domain</span><span class="perl_String">/example.com]</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">cache_credentials = True</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">ipa_domain = example.com</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">id_provider = ipa</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">auth_provider = ipa</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">access_provider = ipa</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">chpass_provider = ipa</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">ipa_server = _srv_, server.example.com</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = true</span></pre><a id="id3018060" class="indexterm"></a><div class="para">
- This default behavior can be disabled during the client installation by using the <code class="option">--no-krb5-offline-passwords</code> option.
- </div><div class="para">
- This behavior can also be disabled by editing the <code class="filename">/etc/sssd/sssd.conf</code> file and removing the <code class="option">krb5_store_password_if_offline</code> line or changing its value to false.
- </div><pre class="programlisting"><span class="perl_String">[</span><span class="perl_Reserved">domain</span><span class="perl_String">/example.com]</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">...</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = false</span></pre></div><div class="section" id="removing-keytabs"><div class="titlepage"><div><div><h2 class="title" id="removing-keytabs">6.5. Removing Keytabs</h2></div></div></div><div class="para">
- Refreshing Kerberos tickets adds a new key to the keytab, but it does not clear the keytab. If a host is being unenrolled and re-added to the FreeIPA domain or if there are Kerberos connection errors, then it may be necessary to remove the keytab and create a new keytab.
- </div><div class="para">
- This is done using the <code class="command">ipa-rmkeytab</code> command. To remove all principals on the host, specify the realm with the <code class="option">-r</code> option:
- </div><pre class="screen"># ipa-rmkeytab -r EXAMPLE.COM -k /etc/krb5.keytab</pre><div class="para">
- To remove the keytab for a specific service, use the <code class="option">-p</code> option to specify the service principal:
- </div><pre class="screen"># ipa-rmkeytab -p ldap/client.example.com -k /etc/krb5.keytab</pre></div><div class="section" id="Kerberos_Errors"><div class="titlepage"><div><div><h2 class="title" id="Kerberos_Errors">6.6. Troubleshooting Kerberos Errors</h2></div></div></div><div class="para">
- Kerberos errors frequently become apparent when trying to connect to the realm using <code class="command">kinit</code> or a similar client. For information related to Kerberos, first check the Kerberos manpages, help files, and other resources.
- </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- FreeIPA has its own command-line tools to use to manage Kerberos policies. <span class="bold bold"><strong>Do not</strong></span> use <code class="command">kadmin</code> or <code class="command">kadmin.local</code> to manage FreeIPA Kerberos settings.
- </div></div></div><div class="formalpara"><h5 class="formalpara" id="id3317636">Logs with Kerberos Information</h5>
- There are several places to look for Kerberos error log information:
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- For <code class="command">kinit</code> problems or other Kerberos server problems, look at the KDC log in <code class="filename">/var/log/krb5kdc.log</code>.
+ dn: cn=ipaconfig,cn=etc,dc=example,dc=com
+ Max. username length: 32
+ Home directory base: /home
+ Default shell: /bin/sh
+ Default users group: ipausers
+ Default e-mail domain for new users: example.com
+ Search time limit: 2
+ Search size limit: 100
+ User search fields: uid,givenname,sn,telephonenumber,ou,title
+ Group search fields: cn,description
+ Enable migration mode: FALSE
+ Certificate Subject base: O=EXAMPLE.COM
+ Default group objectclasses: top, groupofnames, nestedgroup, ipausergroup, ipaobject
+ Default user objectclasses: top, person, organizationalperson, inetorgperson, inetuser, posixaccount,
+ krbprincipalaux, krbticketpolicyaux, ipaobject
+ Password Expiration Notification (days): 4
+ Password plugin features: AllowNThash
+ cn: ipaConfig
+ objectclass: nsContainer, top, ipaGuiConfig, ipaConfigObject</pre></div></div><div class="section" id="adding-custom-objclasses"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-custom-objclasses">5.7.2. Applying Custom Object Classes to New User Entries</h3></div></div></div><div class="para">
+ User and group accounts are created with a pre-defined set of LDAP object classes applied to the entry. Any attributes which belong to the object class can be added to the user entry.
+ </div><div class="para">
+ While the standard and FreeIPA-specific LDAP object classes will cover most deployment scenarios, administrators may have custom object classes with custom attributes which should be applied to user entries.
+ </div><div class="section" id="adding-custom-objclasses-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-ui">5.7.2.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>User Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config-users.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ At the bottom of the users area, click the <span class="guilabel"><strong>Add</strong></span> link to add a new field for another object class.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-objectclass-change.png" width="444" /></div></div><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="adding-custom-objclasses-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-cmd">5.7.2.2. From the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Add the new object class to the list of object classes added to entries. The option for user object classes is <code class="option">--userobjectclasses</code>.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></div></div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa config-mod <strong class="userinput"><code>--userobjectclasses=</code></strong>top,person,organizationalperson,inetorgperson,inetuser,posixaccount, krbprincipalaux,krbticketpolicyaux,ipaobject,<strong class="userinput"><code>employeeinfo</code></strong></pre></li></ol></div></div></div><div class="section" id="adding-custom-objclasses-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-custom-objclasses-groups">5.7.3. Applying Custom Object Classes to New Group Entries</h3></div></div></div><div class="para">
+ As with user entries, administrators may have custom object classes with custom attributes which should be applied to group entries. These can be added automatically by adding the object classes to the FreeIPA server configuration.
+ </div><div class="section" id="adding-custom-objclasses-group-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-group-ui">5.7.3.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Group Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-config.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link to add a new field for another object class.
+ </div><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="adding-custom-objclasses-group-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-group-cmd">5.7.3.2. From the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
</div></li><li class="listitem"><div class="para">
- For FreeIPA-specific errors, look in <code class="filename">/var/log/httpd/error_log</code>.
- </div></li></ul></div>
+ Add the new object class to the list of object classes added to entries. The option for group object classes is <code class="option">--groupobjectclasses</code>.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></div></div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa config-mod <strong class="userinput"><code>--groupobjectclasses=</code></strong>top,groupofnames,nestedgroup,ipausergroup,ipaobject,<strong class="userinput"><code>employeegroup</code></strong></pre></li></ol></div></div></div><div class="section" id="search-limits"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="search-limits">5.7.4. Setting Default Search Limits</h3></div></div></div><div class="para">
+ <span class="emphasis"><em>Search limits</em></span> set caps on the number of records returned or the time spent searching when querying the database for user or group entries. There are two types of search limits: time limits and size (number) limits.
+ </div><div class="para">
+ With the default settings, users are limited to two second searches and no more than 100 records returned per search.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Setting search size or time limits too high can negatively affect FreeIPA server performance.
+ </div></div></div><div class="section" id="search-limits-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-limits-ui">5.7.4.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Search Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Change the search limit settings.
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Search size limit</em></span>, the maximum number of records to return in a search.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Search time limit</em></span>, the maximum amount of time, in seconds, to spend on a search before the server returns results.
+ </div></li></ul></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Setting the time limit or size limit value to zero (0) or -1 means that there are no limits on searches.
+ </div></div></div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="search-limits-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-limits-cmd">5.7.4.2. With the Command Line</h4></div></div></div><div class="para">
+ The search limits can be changed using the <code class="command">config-mod</code> command.
+ </div><pre class="screen">$ ipa config-mod --searchtimelimit=5 --searchrecordslimit=500
- </div><div class="formalpara"><h5 class="formalpara" id="id3317681">Problems making connections with SSH when using GSS-API</h5>
- If there are bad reverse DNS entries in the DNS configuration, then it may not be possible to log into FreeIPA resources using SSH. When SSH attempts to connect to a resource using GSS-API as its security method, GSS-API first checks the DNS records. The bad records prevent SSH from locating the resource.
+ Max. username length: 32
+ Home directory base: /home
+ Default shell: /bin/sh
+ Default users group: ipausers
+ Default e-mail domain for new users: rhts.eng.bos.redhat.com
+ Search time limit: 5
+ Search size limit: 50
+ User search fields: uid,givenname,sn,telephonenumber,ou,title
+ Group search fields: cn,description
+ Enable migration mode: FALSE
+ Certificate Subject base: O=EXAMPLE.COM
+ Password Expiration Notification (days): 4</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Setting the time limit or size limit value to zero (0) or -1 means that there are no limits on searches.
+ </div></div></div></div></div><div class="section" id="search-fields"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="search-fields">5.7.5. Setting User Search Attributes</h3></div></div></div><div class="para">
+ A search for users or groups does not automatically search every possible attribute for that attribute. Rather, it searches a specific subset of attributes, and that list is configurable.
</div><div class="para">
- It is possible to disable reverse DNS lookups in the SSH configuration. Rather than using reverse DNS records, SSH passes the given username directly to GSS-API.
- </div><div class="para">
- To disable reverse DNS lookups with SSH, add or edit the <em class="parameter"><code>GSSAPITrustDNS</code></em> directive and set the value to <code class="command">no</code>.
- </div><pre class="screen"># vim /etc/ssh/ssh_config
-
-GSSAPITrustDNS no</pre><div class="formalpara"><h5 class="formalpara" id="id3248524">There are problems connecting to an NFS server after changing a keytab</h5>
- Clients attempting to mount NFS exports rely on the existence of a valid principal and secret key on both the NFS server and the client host. Clients themselves should not have access to the NFS keytab. The ticket for the NFS connection will be given to clients from the KDC.
+ When adding attributes to the user or group search fields, make sure that there is a corresponding index within the LDAP directory for that attribute. Searches are performed based on indexes. Most standard LDAP attributes have indexes, but any custom attributes must have indexes created for them. Creating indexes is described in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Indexes-Creating_Indexes.html">indexes chapter in the Directory Server Administrator's Guide</a>.
+ </div><div class="section" id="search-fields-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-ui">5.7.5.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>User Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config-users.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Add any additional search attributes, in a comma-separated list, in the <span class="guilabel"><strong>User search fields</strong></span> field.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="search-fields-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-cmd">5.7.5.2. From the Web UI</h4></div></div></div><div class="para">
+ To change the search attributes, use the <code class="option">--usersearch</code> option to set the attributes for user searches.
+ </div><pre class="screen">$ ipa config-mod --usersearch=uid,givenname,sn,telephonenumber,ou,title</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Always give the complete list of search attributes. Whatever values are passed with the configuration argument overwrite the previous settings.
+ </div></div></div></div></div><div class="section" id="search-fields-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="search-fields-groups">5.7.6. Setting Group Search Attributes</h3></div></div></div><div class="para">
+ A search for users or groups does not automatically search every possible attribute for that attribute. Rather, it searches a specific subset of attributes, and that list is configurable.
</div><div class="para">
- Failure to export an updated keytab can cause problems that are difficult to isolate. For example, existing service connections may continue to function, but no new connections may be possible.
- </div></div></div><div xml:lang="en-US" class="chapter" id="automount" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 7. Identity: Using Automount</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-automount">7.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="#configuring-automount">7.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Automount-Configuring_autofs_on_Linux">7.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="#Configuring_Automount-Solaris_automount">7.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="#adding-locations">7.3. Configuring Locations</a></span></dt><dt><span class="section"><a href="#configuring-maps">7.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Direct_Maps">7.4.1. Configuring Direc
t Maps</a></span></dt><dt><span class="section"><a href="#Configuring_Indirect_Maps">7.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="#importing-maps">7.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></div><div class="para">
- Automount is a way of making directories on different servers available, automatically, when requested by a user. This works exceptionally well within an FreeIPA domain since it allows directories on clients within the domain to be shared easily. This is especially important with user home directories (<a class="xref" href="#home-directories">Section 5.1, “Setting up User Home Directories”</a>).
+ When adding attributes to the user or group search fields, make sure that there is a corresponding index within the LDAP directory for that attribute. Searches are performed based on indexes. Most standard LDAP attributes have indexes, but any custom attributes must have indexes created for them. Creating indexes is described in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Indexes-Creating_Indexes.html">indexes chapter in the Directory Server Administrator's Guide</a>.
+ </div><div class="section" id="search-fields-groups-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-groups-ui">5.7.6.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Group Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-config.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Add any additional search attributes, in a comma-separated list, in the <span class="guilabel"><strong>Group search fields</strong></span> field.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="search-fields-groups-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-groups-cmd">5.7.6.2. From the Command Line</h4></div></div></div><div class="para">
+ To change the search attributes, use the <code class="option">--groupsearch</code> options to set the attributes for group searches.
+ </div><pre class="screen">$ ipa config-mod --groupsearch=cn,description</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Always give the complete list of search attributes. Whatever values are passed with the configuration argument overwrite the previous settings.
+ </div></div></div></div></div></div></div><div xml:lang="en-US" class="chapter" id="hosts" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 6. Identity: Managing Hosts and Services</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-hosts">6.1. About Hosts, Services, and Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="#adding-host-entry">6.2. Adding Host Entries</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-host-entry-ui">6.2.1. Adding Host Entries from the Web UI</a></span></dt><dt><span class="section"><a href="#adding-host-entry-cmd">6.2.2. Adding Host Entries from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#enrolling-machines">6.3. Enrolling Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a href="#Enrollment_with_Separation_of_Duties">6.3.1. Performing a Split Enrollment</a></span></dt><dt><span clas
s="section"><a href="#bulk-enrollment">6.3.2. Performing a Bulk or Kickstart Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="#manually-unconfig-machines">6.4. Manually Unconfiguring Client Machines</a></span></dt><dt><span class="section"><a href="#Client_Problems">6.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="#managing-services">6.6. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-service-entry">6.6.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="#request-service-service">6.6.2. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">6.6.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a href="#Creating_an_IPA_Service-Using_NSS">6.6.4. Storing Certificates in NSS Databases</a></span></dt><dt><span clas
s="section"><a href="#ipa-cluster">6.6.5. Configuring Clustered Services</a></span></dt><dt><span class="section"><a href="#Using_the_Same_Service_Principal_for_Multiple_Services">6.6.6. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="#host-disable">6.7. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="#Extending_the_Permissions_of_IPA_Managed_Hosts">6.8. Extending Access Permissions over Other Hosts and Services</a></span></dt><dd><dl><dt><span class="section"><a href="#Delegating_Service_Management">6.8.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="#Delegating_Host_Management">6.8.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="#accessing-service">6.8.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="#renaming-machines">6.9. Renaming Machines and Reconfiguring Fr
eeIPA Client Configuration</a></span></dt><dt><span class="section"><a href="#host-groups">6.10. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-host-groups">6.10.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="#hg-adding-members">6.10.2. Adding Group Members</a></span></dt></dl></dd></dl></div><div class="para">
+ Both DNS and Kerberos are configured as part of the initial client configuration. This is required because these are the two services that bring the machine within the FreeIPA domain and allow it to identify the FreeIPA server it will connect with. After the initial configuration, FreeIPA has tools to manage both of these services in response to changes in the domain services, changes to the IT environment, or changes on the machines themselves which affect Kerberos, certificate, and DNS services, like changing the client hostname.
</div><div class="para">
- In FreeIPA, automount works with the internal LDAP directory and, if it is configured, DNS services.
- </div><div class="section" id="about-automount"><div class="titlepage"><div><div><h2 class="title" id="about-automount">7.1. About Automount and FreeIPA</h2></div></div></div><div class="para">
- Automount is a way to manage, organize, and access directories across multiple systems. Automount automatically mounts a directory whenever that resource is requested. Automount also provides a coherent structure to the way that this directories are organized. Every single directory, or <span class="emphasis"><em>mount point</em></span> is called a <span class="emphasis"><em>key</em></span>. Multiple keys that are grouped together are a <span class="emphasis"><em>map</em></span>, and maps are associated according to their physical or conceptual <span class="emphasis"><em>location</em></span>.
- </div><div class="para">
- The base configuration file for autofs is the <code class="filename">auto.master</code> file in the <code class="filename">/etc/</code> directory. There can be multiple <code class="filename">auto.master</code> configuration files in separate server locations, if necessary.
- </div><div class="para">
- When <code class="command">autofs</code> is configured on a server and that server is a client in a FreeIPA domain, then all of the configuration information for automount is stored in the FreeIPA directory. Rather than being stored in separate text files, the autofs configuration — maps, locations, and keys — are stored as LDAP entries. For example, the default map file, <code class="filename">auto.master</code>, is stored as:
- </div><pre class="screen">dn: automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=com
-objectClass: automountMap
-objectClass: top
-automountMapName: auto.master</pre><div class="para">
- Each new location is added as a container entry under <code class="command">cn=automount,dc=example,dc=com</code>, and each map and each key are stored beneath that location.
+ This chapter describes how to manage identity services that relate directly to the client machine:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ DNS entries and settings
+ </div></li><li class="listitem"><div class="para">
+ Machine authentication
+ </div></li><li class="listitem"><div class="para">
+ Hostname changes (which affect domain services)
+ </div></li></ul></div><div class="section" id="about-hosts"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-hosts">6.1. About Hosts, Services, and Machine Identity and Authentication</h2></div></div></div><div class="para">
+ The basic function of an enrollment process is to create a <span class="emphasis"><em>host</em></span> entry for the client machine in the FreeIPA directory. This host entry is used to establish relationships between other hosts and even services within the domain. These relationships are part of <span class="emphasis"><em>delegating</em></span> authorization and control to hosts within the domain.
</div><div class="para">
- As with other FreeIPA domain services, automount works with FreeIPA natively. The automount configuration can be managed by FreeIPA tools:
+ A host entry contains all of the information about the client within FreeIPA:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- <span class="emphasis"><em>Locations</em></span>, using <code class="command">ipa automountlocation*</code> commands
+ Service entries associated with the host
</div></li><li class="listitem"><div class="para">
- Both direct and indirect <span class="emphasis"><em>maps</em></span>, using <code class="command">ipa automountmap*</code> commands
+ The host and service principal
</div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>Keys</em></span>, using <code class="command">ipa automountkey*</code> commands
- </div></li></ul></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Solaris uses a different schema for autofs configuration than the schema used by FreeIPA. FreeIPA uses the 2307bis-style automount schema which is defined for 389 Directory Server.
- </div></div></div><div class="para">
- For automount to work within the FreeIPA domain, the NFS server must be configured as a FreeIPA client. Configuring NFS itself is covered in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Storage_Administration_Guide/ch-nfs.html">Red Hat Enterprise Linux Storage Administration Guide</a>.
- </div></div><div class="section" id="configuring-automount"><div class="titlepage"><div><div><h2 class="title" id="configuring-automount">7.2. Configuring Automount</h2></div></div></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Test that the <code class="filename">/home</code> directory can be mounted from the command line successfully before changing the automount configuration. Making sure that NFS is already working properly makes it easier to troubleshoot any potential FreeIPA automount configuration errors later.
- </div></div></div><div class="section" id="Configuring_Automount-Configuring_autofs_on_Linux"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Automount-Configuring_autofs_on_Linux">7.2.1. Configuring autofs on Fedora</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Edit the <code class="filename">/etc/sysconfig/autofs</code> file to specify the schema attributes that autofs searches for:
- </div><pre class="programlisting">#
-# Other common LDAP naming
-#
-MAP_OBJECT_CLASS="automountMap"
-ENTRY_OBJECT_CLASS="automount"
-MAP_ATTRIBUTE="automountMapName"
-ENTRY_ATTRIBUTE="automountKey"
-VALUE_ATTRIBUTE="automountInformation"
-</pre></li><li class="listitem"><div class="para">
- Specify the LDAP configuration. There are two ways to do this. The simplest is to let the automount service discover the LDAP server and locations on its own:
- </div><pre class="programlisting">LDAP_URI="ldap:///dc=example,dc=com"
-</pre><div class="para">
- Alternatively, explicitly set which LDAP server to use and the base DN for LDAP searches:
- </div><pre class="programlisting">LDAP_URI="ldap://ipa.example.com"
-SEARCH_BASE="cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com"
-</pre><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- The default value for <span class="emphasis"><em>location</em></span> is <code class="literal">default</code>. If additional locations are added (<a class="xref" href="#adding-locations">Section 7.3, “Configuring Locations”</a>), then the client can be pointed to use those locations, instead.
+ Access control rules
+ </div></li><li class="listitem"><div class="para">
+ Machine information, such as its physical location and operating system
+ </div></li></ul></div><div class="para">
+ Some services that run on a host can also belong to the FreeIPA domain. Any service that can store a Kerberos principal or an SSL certificate (or both) can be configured as an FreeIPA service. Adding a service to the FreeIPA domain allows the service to request an SSL certificate or keytab from the domain. (Only the public key for the certificate is stored in the service record. The private key is local to the service.)
+ </div><div class="para">
+ A FreeIPA domain establishes a commonality between machines, with common identity information, common policies, and shared services. Any machine which belongs to a domain functions as a client of the domain, which means it uses the services that the domain provides. A FreeIPA domain provides three main services specifically for machines:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ DNS
+ </div></li><li class="listitem"><div class="para">
+ Kerberos
+ </div></li><li class="listitem"><div class="para">
+ Certificate management
+ </div></li></ul></div><div class="para">
+ Machines are treated as another identity that is managed by FreeIPA. Clients use DNS to identify FreeIPA servers, services, and domain members — which, like user identities are stored in the 389 Directory Server instance for the FreeIPA server. Like users, machines can authenticated to the domain using Kerberos or certificates to verify the machine's identity.
+ </div><div class="para">
+ From the machine perspective, there are several tasks that can be performed that access these domain services:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Joining the DNS domain (<span class="emphasis"><em>machine enrollment</em></span>)
+ </div></li><li class="listitem"><div class="para">
+ Managing DNS entries and zones
+ </div></li><li class="listitem"><div class="para">
+ Managing machine authentication
+ </div></li></ul></div><div class="para">
+ Authentication in FreeIPA includes machines as well as users. Machine authentication is required for the FreeIPA server to trust the machine and to accept FreeIPA connections from the client software installed on that machine. After authenticating the client, the FreeIPA server can respond to its requests. FreeIPA supports two different approaches to machine authentication:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Key tables (or <em class="firstterm">keytabs</em>, a symmetric key resembling to some extent a user password) and machine certificates. Kerberos tickets are generated as part of the Kerberos services and policies defined by the server. Initially granting a Kerberos ticket, renewing the Kerberos credentials, and even destroying the Kerberos session are all handled by the FreeIPA services. Managing Kerberos is covered in <a class="xref" href="#kerberos">Chapter 12, <em>Policy: Managing the Kerberos Domain</em></a>.
+ </div></li><li class="listitem"><div class="para">
+ Machine certificates. In this case, the machine uses an SSL certificate that is issued by the FreeIPA server's certificate authority and then stored in FreeIPA's Directory Server. The certificate is then sent to the machine to present when it authenticates to the server. On the client, certificates are managed by a service called <span class="emphasis"><em>certmonger</em></span>, which is described in <a class="xref" href="#certmongerX">Chapter 18, <em>Working with certmonger</em></a>.
+ </div></li></ul></div></div><div class="section" id="adding-host-entry"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="adding-host-entry">6.2. Adding Host Entries</h2></div></div></div><div class="para">
+ A host entry is always created when a client is configured. On Fedora systems, this is done automatically with the <code class="command">ipa-client-install</code> script. On other platforms — and in alternative enrollment scenarios, as in <a class="xref" href="#enrolling-machines">Section 6.3, “Enrolling Clients Manually”</a> — the host entry is created manually.
+ </div><div class="section" id="adding-host-entry-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-host-entry-ui">6.2.1. Adding Host Entries from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Hosts</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hosts-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Fill in the machine name and select the domain from the configured zones in the drop-down list. If the host has already been assigned a static IP address, then include that with the host entry so that the DNS entry is fully created.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/host-add.png" width="444" /></div></div><div class="para">
+ DNS zones can be created in FreeIPA, which is described in <a class="xref" href="#Managing_DNS_Zones-Adding_DNS_Zones">Section 8.5, “Adding DNS Zones”</a>. If the FreeIPA server does not manage the DNS server, the zone can be entered manually in the menu area, like a regular text field.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Select the <span class="guilabel"><strong>Force</strong></span> checkbox adds the host DNS record, even if the hostname cannot be resolved.
+ </div><div class="para">
+ This is useful for hosts which use DHCP and do not have a static IP address. This essentially creates a placeholder entry in the FreeIPA DNS service. When the DNS service dynamically updates its records, the host's current IP address is detected and its DNS record is updated.
</div></div></div></li><li class="listitem"><div class="para">
- Edit the <code class="filename">/etc/autofs_ldap_auth.conf</code> file so that autofs allows client authentication with the FreeIPA LDAP server. Change <em class="parameter"><code>authrequired</code></em> to yes and set the principal to the Kerberos host principal:
- </div><pre class="programlisting"><span class="perl_Keyword"><autofs_ldap_sasl_conf</span>
-<span class="perl_Others"> usetls=</span><span class="perl_String">"no"</span>
-<span class="perl_Others"> tlsrequired=</span><span class="perl_String">"no"</span>
-<span class="perl_Others"> authrequired=</span><span class="perl_String">"yes"</span>
-<span class="perl_Others"> authtype=</span><span class="perl_String">"GSSAPI"</span>
-<span class="perl_Others"> clientprinc=</span><span class="perl_String">"host/server.example.com at EXAMPLE COM"</span>
- <span class="perl_Keyword">/></span></pre><div class="para">
- If necessary, run <code class="command">klist -k</code> to get the exact host principal information.
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the expanded entry page and fill in more attribute information. Information about the host hardware and physical location can be included with the host entry.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/host-attr.png" width="444" /></div></div></li></ol></div></div><div class="section" id="adding-host-entry-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-host-entry-cmd">6.2.2. Adding Host Entries from the Command Line</h3></div></div></div><div class="para">
+ Host entries are created using the <code class="command">host-add</code> command. This commands adds the host entry to the FreeIPA Directory Server. The full list of options with <code class="command">host-add</code> are listed in <a class="xref" href="#ipa-command-host">Section B.4, “ipa Host Commands”</a>. At its most basic, an add operation only requires the client hostname to add the client to the Kerberos realm and to create an entry in the FreeIPA LDAP server:
+ </div><pre class="screen">$ ipa host-add client1.example.com</pre><div class="para">
+ If the FreeIPA server is configured to manage DNS, then the host can also be added to the DNS resource records using the <code class="option">--ip-address</code> and <code class="option">--force</code> options.
+ </div><div class="example" id="ex.host-dns"><h6>Example 6.1. Creating Host Entries with Static IP Addresses</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force --ip-address=192.168.166.31 client1.example.com</pre></div></div><br class="example-break" /><a id="id593041" class="indexterm"></a><a id="id593057" class="indexterm"></a><a id="id958906" class="indexterm"></a><div class="para">
+ Commonly, hosts may not have a static IP address or the IP address may not be known at the time the client is configured. For example, laptops may be preconfigured as FreeIPA clients, but they do not have IP addresses at the time they're configured. Hosts which use DHCP can still be configured with a DNS entry by using <code class="option">--force</code>. This essentially creates a placeholder entry in the FreeIPA DNS service. When the DNS service dynamically updates its records, the host's current IP address is detected and its DNS record is updated.
+ </div><div class="example" id="ex.host-dns-dhcp"><h6>Example 6.2. Creating Host Entries with DHCP</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force client1.example.com</pre></div></div><br class="example-break" /><div class="para">
+ Host records are deleted using the <code class="command">host-del</code> command. If the FreeIPA domain uses DNS, then the <code class="option">--updatedns</code> option also removes the associated records of any kind for the host from the DNS.
+<pre class="screen">$ ipa host-del --updatedns client1.example.com</pre>
+
+ </div></div></div><div class="section" id="enrolling-machines"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="enrolling-machines">6.3. Enrolling Clients Manually</h2></div></div></div><div class="para">
+ Enrolling machines as clients in the FreeIPA domain is a two-part process. A host entry is created for the client (and stored in the 389 Directory Server instance), and then a keytab is created to provision the client.
+ </div><div class="para">
+ Both parts are performed automatically by the <code class="command">ipa-client-install</code> command. It also also possible to perform those steps separately; this allows for administrators to prepare machines and FreeIPA in advance of actually configuring the clients. This allows more flexible setup scenarios, including bulk deployments.
+ </div><div class="para">
+ When performing a manual enrollment, the host entry is created separately, and then enrollment is completed when the client script is run, which creates the requisite keytab.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ There are two ways to set the password. You can either supply your own or have FreeIPA generate a random one.
+ </div></div></div><div class="section" id="Enrollment_with_Separation_of_Duties"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Enrollment_with_Separation_of_Duties">6.3.1. Performing a Split Enrollment</h3></div></div></div><div class="para">
+ There may be a situation where an administrator in one group is prohibited from <span class="emphasis"><em>creating</em></span> a host entry and, therefore, from simply running the <code class="command">ipa-client-install</code> command and allowing it to create the host. However, that administrator may have the right to run the command <span class="emphasis"><em>after</em></span> a host entry exists. In that case, one administrator can create the host entry manually, then the second administrator can complete the enrollment by running the <code class="command">ipa-client-install</code> command.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ An administrator creates the host entry, as described in <a class="xref" href="#adding-host-entry">Section 6.2, “Adding Host Entries”</a>.
</div></li><li class="listitem"><div class="para">
- Check the <code class="filename">/etc/nssswitch.conf</code> file, so that LDAP is listed as a source for automount configuration:
- </div><pre class="screen">automount: files <strong class="userinput"><code>ldap</code></strong></pre></li><li class="listitem"><div class="para">
- Restart autofs:
- </div><pre class="screen"># service autofs restart</pre></li><li class="listitem"><div class="para">
- Test the configuration by listing a user's <code class="filename">/home</code> directory:
- </div><pre class="screen"># ls /home/<em class="replaceable"><code>userName</code></em></pre><div class="para">
- If this does not mount the remote file system, check the <code class="filename">/var/log/messages</code> file for errors. If necessary, increase the debug level in the <code class="filename">/etc/sysconfig/autofs</code> file by setting the <em class="parameter"><code>LOGGING</code></em> parameter to <code class="literal">debug</code>.
- </div></li></ol></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- If there are problems with automount, then cross-reference the automount attempts with the 389 Directory Server access logs, which will show the attempted access, user, and search base.
- </div><div class="para">
- It is also simple to run automount in the foreground with debug logging on.
-<pre class="screen">automount -f -d</pre>
- This prints the debug log information directly, without having to cross-check the LDAP access log with automount's log.
- </div></div></div></div><div class="section" id="Configuring_Automount-Solaris_automount"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Automount-Solaris_automount">7.2.2. Configuring Automount on Solaris</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- If the NFS server is running on Fedora, specify on the Solaris machine that NFSv3 is the maximum supported version. Edit the <code class="filename">/etc/default/nfs</code> file and set the following parameter:
- </div><pre class="programlisting">NFS_CLIENT_VERSMAX=3
-</pre></li><li class="listitem"><div class="para">
- Use the <code class="command">ldapclient</code> command to configure the host to use LDAP:
- </div><pre class="programlisting">ldapclient -v manual -a authenticationMethod=none
- -a defaultSearchBase=dc=example,dc=com
- -a defaultServerList=ipa.example.com
- -a serviceSearchDescriptor=passwd:cn=users,cn=accounts,dc=example,dc=com
- -a serviceSearchDescriptor=group:cn=groups,cn=compat,dc=example,dc=com
- -a serviceSearchDescriptor=auto_master:automountMapName=auto.master,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one
- -a serviceSearchDescriptor=auto_home:automountMapName=auto_home,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one
- -a objectClassMap=shadow:shadowAccount=posixAccount
- -a searchTimelimit=15
- -a bindTimeLimit=5
-</pre></li><li class="listitem"><div class="para">
- Enable <code class="command">automount</code>:
- </div><pre class="screen"># svcadm enable svc:/system/filesystem/autofs</pre></li><li class="listitem"><div class="para">
- Test the configuration.
+ The second administrator installs the FreeIPA client packages on the machine, as in <a class="xref" href="#Installing_the_IPA_Client_on_Linux">Section 3.2, “Configuring a Fedora System as a FreeIPA Client”</a>.
+ </div></li><li class="listitem"><div class="para">
+ When the second administrator runs the setup script, he must pass his Kerberos password and username (principal) with the <code class="command">ipa-client-install</code> command. For example:
+ </div><pre class="screen">$ ipa-client-install -w secret -p admin2</pre></li><li class="listitem"><div class="para">
+ The keytab is generated on the server and provisioned to the client machine, so that the client machine is not able to connect to the FreeIPA domain. The keytab is saved with <code class="systemitem">root:root</code> ownership and 0600 permissions.
+ </div></li></ol></div></div><div class="section" id="bulk-enrollment"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="bulk-enrollment">6.3.2. Performing a Bulk or Kickstart Enrollment</h3></div></div></div><div class="para">
+ Two variations of a split enrollment are a bulk enrollment and a kickstart enrollment. Combined, that allows automatic provisioning of multiple hosts or virtual machines. This requires pre-creating the hosts on the FreeIPA server, with a predefined password that can be used to authenticate to complete the enrollment operation.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ An administrator creates the host entry, as described in <a class="xref" href="#adding-host-entry">Section 6.2, “Adding Host Entries”</a>. Set a password to use for the bulk or automatic enrollment. For example:
+ </div><pre class="screen">$ ipa host-add bulkserver.example.com --password=secret</pre><div class="para">
+ The password is set to expire after the first authentication attempt. After enrollment completes, the password expires and the host is authenticated using its keytab.
+ </div></li><li class="listitem"><div class="para">
+ Run the kickstart script, using the given bulk password. The kickstart script performs all of the tasks performed manually by the second administrator in <a class="xref" href="#Enrollment_with_Separation_of_Duties">Section 6.3.1, “Performing a Split Enrollment”</a>:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Check the LDAP configuration:
-<pre class="screen"># ldapclient -l auto_master
+ Kickstart installs the FreeIPA packages.
+ </div></li><li class="listitem"><div class="para">
+ Kickstart runs the enrollment script, passing in the password.
+ </div></li><li class="listitem"><div class="para">
+ The enrollment script connects to the FreeIPA server using the provided password and a bind DN derived from the machine name. It then authenticates using a simple bind over SSL.
+ </div></li></ol></div></li></ol></div></div></div><div class="section" id="manually-unconfig-machines"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="manually-unconfig-machines">6.4. Manually Unconfiguring Client Machines</h2></div></div></div><div class="para">
+ A machine may need to be removed from one FreeIPA domain and moved to another domain or a virtual machine may be copied. There are a number of different situations where a FreeIPA client needs to be reconfigured. The easiest solution is to uninstall the client and then configure it afresh.
+ </div><pre class="screen">ipa-client-install --uninstall</pre><div class="para">
+ If it is not possible to uninstall the client directly, then the FreeIPA configuration can be manually removed from the virtual machine.
+ </div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ When a machine is unenrolled, the procedure cannot be undone. The machine can only be enrolled again.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Remove the old hostname from the main keytab. This can be done by removing every principal in the realm or by removing specific principals. For example, to remove all principals:
+<pre class="programlisting">$ ipa-rmkeytab -k /etc/krb5.keytab -r EXAMPLE.COM</pre>
-dn: automountkey=/home,automountmapname=auto.master,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com
-objectClass: automount
-objectClass: top
-automountKey: /home
-automountInformation: auto.home
+ </div><div class="para">
+ To remove specific principals:
+<pre class="programlisting">$ ipa-rmkeytab -k /etc/krb5.keytab -p host/server.example.com at EXAMPLE.COM</pre>
+
+ </div></li><li class="listitem"><div class="para">
+ Disable tracking in <code class="systemitem">certmonger</code> for every certificate. Each certificate must be removed from tracking individually.
+<pre class="programlisting">$ ipa-getcert stop-tracking -n Server-Cert -d /etc/pki/nssdb
+
+$ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
</pre>
- </div></li><li class="listitem"><div class="para">
- List a user's <code class="filename">/home</code> directory:
- </div><div class="para">
-
-<pre class="screen"># ls /home/<em class="replaceable"><code>userName</code></em></pre>
+ </div></li><li class="listitem"><div class="para">
+ Remove the old host from the FreeIPA DNS domain. While this is optional, it cleans up the old FreeIPA entries associated with the system and allows it to be re-enrolled cleanly at a later time.
+<pre class="programlisting">$ ipa host-del server.example.com</pre>
- </div></li></ol></div></li></ol></div></div></div><div class="section" id="adding-locations"><div class="titlepage"><div><div><h2 class="title" id="adding-locations">7.3. Configuring Locations</h2></div></div></div><div class="para">
- A location is a set of maps, which are all stored in <code class="filename">auto.master</code>, and a location can store multiple maps. The location entry only works as a container for map entries; it is not an automount configuration in and of itself.
+ </div></li><li class="listitem"><div class="para">
+ If the system should be re-added to a new FreeIPA domain — such as a virtual machine which was moved from one location to another — then the system can be rejoined to FreeIPA using the <code class="command">ipa-join</code> command.
+ </div><pre class="programlisting">$ ipa-join</pre></li></ol></div></div><div class="section" id="Client_Problems"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Client_Problems">6.5. Debugging Client Connection Problems</h2></div></div></div><div class="para">
+ Client connection problems are apparent immediately. This can mean that users cannot log into a machine or attempts to access user and group information fails (for example, <code class="command">getent passwd admin</code>).
</div><div class="para">
- To create a map, using the <code class="command">automountlocation-add</code> and give the location name.
-<pre class="screen">$ ipa automountlocation-add <em class="replaceable"><code>location</code></em></pre>
- For example:
- </div><pre class="screen">$ ipa automountlocation-add raleigh
-----------------------------------
-Added automount location "raleigh"
-----------------------------------
- Location: raleigh</pre><div class="para">
- When a new location is created, two maps are automatically created for it, <code class="filename">auto.master</code> and <code class="filename">auto.direct</code>. <code class="filename">auto.master</code> is the root map for all automount maps for the location. <code class="filename">auto.direct</code> is the default map for direct mounts and is mounted on <code class="filename">/-</code>.
+ Authentication in FreeIPA is managed with the SSSD daemon, which is described in the <em class="citetitle">Red Hat Enterprise Linux Deployment Guide</em>. If there are problems with client authentication, then check the SSSD information.
</div><div class="para">
- To view all of the maps configured for a location as if they were deployed on a filesyste, use the <code class="command">automountlocation-tofiles</code> command:
- </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
-/etc/auto.master:
-/- /etc/auto.direct
----------------------------
-/etc/auto.direct:</pre></div><div class="section" id="configuring-maps"><div class="titlepage"><div><div><h2 class="title" id="configuring-maps">7.4. Configuring Maps</h2></div></div></div><div class="para">
- Configuring maps not only creates the maps, it associates mount points through the keys and it assigns mount options that should be used when the directory is accessed. FreeIPA supports both direct and indirect maps.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Different clients can use different map sets. Map sets use a tree structure, so maps <span class="emphasis"><em>cannot</em></span> be shared between locations.
- </div></div></div><div class="section" id="Configuring_Direct_Maps"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Direct_Maps">7.4.1. Configuring Direct Maps</h3></div></div></div><div class="para">
- Direct maps define exact locations, meaning absolute paths, to the file mount. In the location entry, a direct map is identified by the preceding forward slash:
-<pre class="screen">---------------------------
-/etc/auto.direct:
-/shared/man server.example.com:/shared/man</pre>
-
- </div><div class="para">
- The key defines the actual mount point (in the key name) and any options. A map is a direct or indirect map based on the format of its key.
- </div><div class="para">
- Each location is created with an <code class="systemitem">auto.direct</code> item. The simplest configuration is to define a direct mapping by adding an automount key the existing direct map entry. It is also possible to create different direct map entries.
- </div><div class="para">
- Add the key for the direct map to the location's <code class="filename">auto.direct</code> file. The <code class="option">--key</code> option identifies the mount point, and <code class="option">--info</code> gives the network location of the directory, as well as any <code class="command">mount</code> options to use. For example:
- </div><pre class="screen">$ ipa automountkey-add raleigh auto.direct --key=/share --info="-ro,soft, ipaserver.example.com:/home/share"
- Key: /share
- Mount information: -ro,soft, ipaserver.example.com:/home/share</pre><div class="para">
- Mount options are described in the mount manpage, <a href="http://linux.die.net/man/8/mount">http://linux.die.net/man/8/mount</a>.
- </div><div class="para">
- On Solaris, add the direct map and key using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
- </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_direct:automountMapName=auto.direct,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div><div class="section" id="Configuring_Indirect_Maps"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Indirect_Maps">7.4.2. Configuring Indirect Maps</h3></div></div></div><div class="para">
- An indirect map essentially specifies a relative path for maps. A parent entry sets the base directory for all of the indirect maps. The indirect map key sets a sub directory; whenever the indirect map location is loaded, the key is appended to that base directory. For example, if the base directory is <code class="filename">/docs</code> and the key is <code class="filename">man</code>, then the map is <code class="filename">/docs/man</code>.
- </div><div class="para">
- The primary difference between a direct map and an indirect map is that there is no forward slash in front of an indirect key.
- </div><pre class="screen">---------------------------
-/etc/auto.share:
-man ipa.example.com:/docs/man
----------------------------</pre><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create an indirect map to set the base entry using the <code class="command">automountmap-add-indirect</code> command. The <code class="option">--mount</code> option sets the base directory to use for all the indirect map keys. The default parent entry is <code class="filename">auto.master</code>, but if another map exists which should be used, that can be specified using the <code class="option">--parentmap</code> option.
-<pre class="screen">$ ipa automountmap-add-indirect <em class="replaceable"><code>location mapName</code></em> --mount=<em class="replaceable"><code>directory</code></em> [--parentmap=<em class="replaceable"><code>mapName</code></em>]</pre>
- For example:
- </div><pre class="screen">$ ipa automountmap-add-indirect raleigh auto.share --mount=/share
---------------------------------
-Added automount map "auto.share"
---------------------------------</pre></li><li class="listitem"><div class="para">
- Add the indirect key for the mount location:
- </div><pre class="screen">$ ipa automountkey-add raleigh auto.share --key=docs --info="ipa.example.com:/export/docs"
--------------------------
-Added automount key "docs"
--------------------------
- Key: docs
- Mount information: ipa.example.com:/export/docs</pre></li><li class="listitem"><div class="para">
- To verify the configuration, check the location file list using <code class="command">automountlocation-tofiles</code>:
- </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
-/etc/auto.master:
-/- /etc/auto.direct
-/share /etc/auto.share
----------------------------
-/etc/auto.direct:
----------------------------
-/etc/auto.share:
-man ipa.example.com:/export/docs</pre></li></ol></div><div class="para">
- On Solaris, add the indirect map using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
- </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_share:automountMapName=auto.share,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div><div class="section" id="importing-maps"><div class="titlepage"><div><div><h3 class="title" id="importing-maps">7.4.3. Importing Automount Maps</h3></div></div></div><div class="para">
- If there are existing automount maps, these can be imported into the FreeIPA automount configuration.
- </div><pre class="screen">ipa automountlocation-import <em class="replaceable"><code>location map_file</code></em> [--continuous]</pre><div class="para">
- The only required information is the FreeIPA automount location and the fulle path and name of the map file. The <code class="option">--continuous</code> option tells the <code class="command">automountlocation-import</code> command to continue through the map file, even if the command encounters errors.
- </div><div class="para">
- For example:
- </div><pre class="screen">$ ipa automountlocation-import raleigh /etc/custom.map</pre></div></div></div><div xml:lang="en-US" class="chapter" id="active-directory" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 8. Identity: Integrating with Microsoft Active Directory</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-active-directory">8.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="#about-sync">8.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="#about-sync-schema">8.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="#Windows_Sync-Schema_Differences-users">8.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_up_Active_Directory">8.2. Setting up Active Directory for Synchronizati
on</a></span></dt><dt><span class="section"><a href="#password-sync">8.3. Exempting Active Directory Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="#managing-sync-agmt">8.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="#exporting-ad-cert">8.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="#Creating_Synchronization_Agreements">8.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Modifying_Synchronization_Agreements">8.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="#changing-subtree">8.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt><span class="section"><a href="#Deleting_Synchronization_Agreements">8.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Troubleshooting_IPA_Serv
ers-Winsync_Agreement_Failures">8.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Microsoft_Windows">8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></div><div class="para">
- FreeIPA uses active <span class="emphasis"><em>synchronization</em></span> to integrate user data stored in an Active Directory domain and the user data stored in the FreeIPA domain. Critical user attributes, including passwords, are synchronized between the services.
- </div><div class="para">
- The capability to sync Active Directory and FreeIPA domains is inherent when a FreeIPA server is first installed. The sycnhronization process is configured by creating <span class="emphasis"><em>agreements</em></span> between the FreeIPA server and the Active Directory domain controller.
- </div><div class="para">
- This chapter describes how to configure synchronization, how to configure Active Directory for integration with FreeIPA, and how to configure Windows systems within the Active Directory domain to be aware of the FreeIPA domain.
- </div><div class="section" id="about-active-directory"><div class="titlepage"><div><div><h2 class="title" id="about-active-directory">8.1. About Active Directory, FreeIPA, and Identity Management</h2></div></div></div><div class="para">
- Within the FreeIPA domain, information is shared among servers and replicas by copying that information, reliably and predictibly, between the data masters (servers) and other data masters or read-only hub servers. This process is <span class="emphasis"><em>replication</em></span>.
+ First, check the SSSD logs in <code class="filename">/var/log/sssd/</code>. There is a specific log file for the DNS domain, such as <code class="filename">sssd_example.com.log</code>. If there is not enough information in the logs at the default logging level, then increase the log level.
</div><div class="para">
- A similar process can be used to share data between the FreeIPA domain and a Microsoft Active Directory domain. This is <span class="emphasis"><em>synchronization</em></span>.
- </div><div class="section" id="about-sync"><div class="titlepage"><div><div><h3 class="title" id="about-sync">8.1.1. About Active Directory Synchronization</h3></div></div></div><div class="para">
- Synchronization is the process of copying data back and forth between Active Directory and FreeIPA.
- </div><div class="para">
- Synchronization is defined in an <span class="emphasis"><em>agreement</em></span> between a FreeIPA server and an Active Directory domain controller. The sync agreement defines all of the information required to identify sync-able user entries (like the subtree to synchronize and requisite object classes in the user entries) as well as defining how account attributes are handled. The sync agreements are created with default values which can be tweaked to meet the needs of a specific domain. When two servers are involved in synchronization, they are called <span class="emphasis"><em>peers</em></span>.
- </div><div class="para">
- Synchronization is most commonly <span class="emphasis"><em>bi-directional</em></span>. Information is sent back and forth between the FreeIPA domain and the Windows domain in a process that is very similar to how FreeIPA servers and replicas share information among themselves. It is possible to configure synchronization — or certain data areas — to only sync one way. That is <span class="emphasis"><em>uni-directional</em></span> synchronization.
- </div><div class="para">
- To prevent the risk of data conflicts, synchronization is configured between one FreeIPA server and one Active Directory domain controller. The FreeIPA server propagates changes back to the FreeIPA domain, while the domain controller propagates changes back to the Windows domain.
- </div><div class="para">
- There are some key features to FreeIPA synchronization:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- A synchronization operation runs every five minutes.
- </div></li><li class="listitem"><div class="para">
- Synchronization can only be configured with one Active Directory domain. Multiple domains are not supported.
- </div></li><li class="listitem"><div class="para">
- Synchronization can only be configured with <span class="emphasis"><em>one</em></span> Active Directory domain controller. However, it is possible to have a list of failover Active Directory domain controllers. Likewise, there can be a list of failover FreeIPA servers to keep synchronization uninterrupted.
- </div></li><li class="listitem"><div class="para">
- Only user information is synchronized.
- </div></li><li class="listitem"><div class="para">
- Both user attributes and passwords can be synchronized.
- </div></li><li class="listitem"><div class="para">
- While modifications are bi-directional (going both from Active Directory to FreeIPA and from FreeIPA to Active Directory), new accounts are only uni-directional. New accounts created in Active Directory are synchronized over to FreeIPA. However, user accounts created in FreeIPA must also be added in Active Directory before they will be synchronized.
- </div></li><li class="listitem"><div class="para">
- Account lock information is synchronized by default, so a user account which is disabled in one domain is disabled in the other.
- </div></li><li class="listitem"><div class="para">
- Password synchronization changes take effect immediately.
- </div></li></ul></div><div class="para">
- When Active Directory users are synchronized over to FreeIPA, certain attributes (including Kerberos and Posix attributs) will have IPA attributes are automatically added to the user entries. These attributes are used by FreeIPA within its domain. They are not synchronized back over the the corresponding Active Directory user entry.
+ To increase the log level:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <code class="filename">sssd.conf</code> file.
+ </div><pre class="screen">vim /etc/sssd/sssd.conf</pre></li><li class="listitem"><div class="para">
+ In the <code class="command">[domain/</code><span class="emphasis"><em>example.com</em></span><code class="command">]</code> section, set <code class="varname">debug_level</code>.
+ </div><pre class="screen">debug_level = 9</pre></li><li class="listitem"><div class="para">
+ Restart the <code class="systemitem">sssd</code> daemon.
+ </div><pre class="screen">service sssd restart</pre></li><li class="listitem"><div class="para">
+ Check the <code class="filename">/var/log/sssd/sssd_example.com.log</code> file for the debug messages.
+ </div></li></ol></div></div><div class="section" id="managing-services"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="managing-services">6.6. Managing Services</h2></div></div></div><div class="section" id="adding-service-entry"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-service-entry">6.6.1. Adding and Editing Service Entries and Keytabs</h3></div></div></div><div class="para">
+ As with host entries, service entries for the host (and any other services on that host which will belong to the domain) must be added manually to the FreeIPA domain. This is a two step process. First, the service entry must be created, and then a keytab must be created for that service which it will use to access the domain.
</div><div class="para">
- Some of the data in synchronization can be modified as part of the synchronization process. For examples, certain attributes can be automatically added to Active Directory user accounts when they are synced over to the FreeIPA domain. These attribute changes are defined as part of the synchronization agreement and are described in <a class="xref" href="#Modifying_Synchronization_Agreements">Section 8.4.3, “Changing the Behavior for Syncing User Account Attributes”</a>.
- </div></div><div class="section" id="about-sync-schema"><div class="titlepage"><div><div><h3 class="title" id="about-sync-schema">8.1.2. Attributes Which Are Synchronized</h3></div></div></div><div class="para">
- FreeIPA synchronizes a subset of user attributes between FreeIPA and Active Directory user entries. Any other attributes present in the entry, either in FreeIPA or in Active Directory, are ignored by synchronization.
+ By default, FreeIPA saves its HTTP keytab to <code class="filename">/etc/httpd/conf/ipa.keytab</code>.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Most POSIX attributes are not synchronized.
+ This keytab is used for the web UI. if a key were stored in <code class="filename">ipa.keytab</code> and that keytab file is delete, the FreeIPA web UI will stop working, because the original key would also be deleted.
</div></div></div><div class="para">
- Although there are significant schema differences between the Active Directory LDAP schema and the 389 Directory Server LDAP schema used by FreeIPA, there are many attributes that are the same. These attributes are simply synchronized between the Active Directory and FreeIPA user entries, with no changes to the attribute name or value format.
- </div><div class="table" id="Synchronizing_Users-User_Schema_That_Are_the_Same"><h6>Table 8.1. User Schema That Are the Same in FreeIPA and Windows Servers</h6><div class="table-contents"><table summary="User Schema That Are the Same in FreeIPA and Windows Servers" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><tbody><tr><td>
- cn<sup>[<a id="id3046440" href="#ftn.id3046440" class="footnote">a</a>]</sup>
- </td><td>
- physicalDeliveryOfficeName
- </td></tr><tr><td>
- description
- </td><td>
- postOfficeBox
- </td></tr><tr><td>
- destinationIndicator
- </td><td>
- postalAddress
- </td></tr><tr><td>
- facsimileTelephoneNumber
- </td><td>
- postalCode
- </td></tr><tr><td>
- givenname
- </td><td>
- registeredAddress
- </td></tr><tr><td>
- homePhone
- </td><td>
- sn
- </td></tr><tr><td>
- homePostalAddress
- </td><td>
- st
- </td></tr><tr><td>
- initials
- </td><td>
- street
- </td></tr><tr><td>
- l
- </td><td>
- telephoneNumber
- </td></tr><tr><td>
- mail
- </td><td>
- teletexTerminalIdentifier
- </td></tr><tr><td>
- mobile
- </td><td>
- telexNumber
- </td></tr><tr><td>
- o
- </td><td>
- title
- </td></tr><tr><td>
- ou
- </td><td>
- usercertificate
- </td></tr><tr><td>
- pager
- </td><td>
- x121Address
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><p><sup>[<a id="ftn.id3046440" href="#id3046440" class="para">a</a>] </sup>
- The <em class="parameter"><code>cn</code></em> is treated differently than other synced attributes. It is mapped directly (<em class="parameter"><code>cn</code></em> to <em class="parameter"><code>cn</code></em>) when syncing from FreeIPA to Active Directory. When syncing from Active Directory to FreeIPA, however, <em class="parameter"><code>cn</code></em> is mapped from the <em class="parameter"><code>name</code></em> attribute on Windows to the <em class="parameter"><code>cn</code></em> attribute in FreeIPA.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- Some attributes have different names but still have direct parity between FreeIPA (which uses 389 Directory Server) and Active Directory. These attributes are <span class="emphasis"><em>mapped</em></span> by the synchronization process.
- </div><div class="table" id="Synchronizing_Users-User_Schema_Mapped"><h6>Table 8.2. User Schema Mapped between FreeIPA and Active Directory</h6><div class="table-contents"><table summary="User Schema Mapped between FreeIPA and Active Directory" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- FreeIPA
- </th><th>
- Active Directory
- </th></tr></thead><tbody><tr><td>
- cn<sup>[<a id="id3229774" href="#ftn.id3229774" class="footnote">a</a>]</sup>
- </td><td>
- name
- </td></tr><tr><td>
- nsAccountLock
- </td><td>
- userAccountControl
- </td></tr><tr><td>
- ntUserDomainId
- </td><td>
- sAMAccountName
- </td></tr><tr><td>
- ntUserHomeDir
- </td><td>
- homeDirectory
- </td></tr><tr><td>
- ntUserScriptPath
- </td><td>
- scriptPath
- </td></tr><tr><td>
- ntUserLastLogon
- </td><td>
- lastLogon
- </td></tr><tr><td>
- ntUserLastLogoff
- </td><td>
- lastLogoff
- </td></tr><tr><td>
- ntUserAcctExpires
- </td><td>
- accountExpires
- </td></tr><tr><td>
- ntUserCodePage
- </td><td>
- codePage
- </td></tr><tr><td>
- ntUserLogonHours
- </td><td>
- logonHours
- </td></tr><tr><td>
- ntUserMaxStorage
- </td><td>
- maxStorage
- </td></tr><tr><td>
- ntUserProfile
- </td><td>
- profilePath
- </td></tr><tr><td>
- ntUserParms
- </td><td>
- userParameters
- </td></tr><tr><td>
- ntUserWorkstations
- </td><td>
- userWorkstations
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><p><sup>[<a id="ftn.id3229774" href="#id3229774" class="para">a</a>] </sup>
- The <em class="parameter"><code>cn</code></em> is is mapped directly (<em class="parameter"><code>cn</code></em> to <em class="parameter"><code>cn</code></em>) when syncing from FreeIPA to Active Directory. When syncing from Active Directory <em class="parameter"><code>cn</code></em> is mapped from the <em class="parameter"><code>name</code></em> attribute in Active Directory to the <em class="parameter"><code>cn</code></em> attribute in FreeIPA.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Windows_Sync-Schema_Differences-users"><div class="titlepage"><div><div><h3 class="title" id="Windows_Sync-Schema_Differences-users">8.1.3. User Schema Differences between FreeIPA and Active Directory</h3></div></div></div><a id="id3397064" class="indexterm"></a><a id="id3397076" class="indexterm"></a><div class="para">
- Even though attributes may be successfully synced between Active Directory and FreeIPA, there may still be differences in how Active Directory and FreeIPA define the underlying X.500 object classes. This could lead to differences in how the data are handled in the different LDAP services.
- </div><div class="para">
- This section describes the differences in how Active Directory and FreeIPA handle some of the attributes which can be synchronized between the two domains.
- </div><div class="section" id="Schema_Differences-cn"><div class="titlepage"><div><div><h4 class="title" id="Schema_Differences-cn">8.1.3.1. Values for cn Attributes</h4></div></div></div><a id="id3397111" class="indexterm"></a><div class="para">
- In 389 Directory Server, the <em class="parameter"><code>cn</code></em> attribute can be multi-valued, while in Active Directory this attribute must have only a single value. When the FreeIPA <em class="parameter"><code>cn</code></em> attribute is synchronized, then, only one value is sent to the Active Directory peer.
- </div><div class="para">
- What this means for synchronization is that,potentially, if a <em class="parameter"><code>cn</code></em> value is added to an Active Directory entry and that value is not one of the values for <em class="parameter"><code>cn</code></em> in FreeIPA, then all of the FreeIPA <em class="parameter"><code>cn</code></em> values are overwritten with the single Active Directory value.
- </div><div class="para">
- One other important difference is that Active Directory uses the <em class="parameter"><code>cn</code></em> attribute attribute as its naming attribute, where FreeIPA uses <em class="parameter"><code>uid</code></em>. This means that there is the potential to rename the entry entirely (and accidentally) if the <em class="parameter"><code>cn</code></em> attribute is edited in the FreeIPA. If that <em class="parameter"><code>cn</code></em> change is written over to the Active Directory entry, then the entry is renamed, and the new named entry is written back over to FreeIPA.
- </div></div><div class="section" id="Schema_Differences-street"><div class="titlepage"><div><div><h4 class="title" id="Schema_Differences-street">8.1.3.2. Values for street and streetAddress</h4></div></div></div><a id="id3105532" class="indexterm"></a><div class="para">
- Active Directory uses the attribute <em class="parameter"><code>streetAddress</code></em> for a user or group's postal address; this is the way that 389 Directory Server uses the <em class="parameter"><code>street</code></em> attribute. There are two important differences in the way that Active Directory and FreeIPA use the <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> attributes, respectively:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- In 389 Directory Server, <em class="parameter"><code>streetAddress</code></em> is an alias for <em class="parameter"><code>street</code></em>. Active Directory also has the <em class="parameter"><code>street</code></em> attribute, but it is a separate attribute that can hold an independent value, not an alias for <em class="parameter"><code>streetAddress</code></em>.
- </div></li><li class="listitem"><div class="para">
- Active Directory defines both <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> as single-valued attributes, while 389 Directory Server defines <em class="parameter"><code>street</code></em> as a multi-valued attribute, as specified in RFC 4519.
- </div></li></ul></div><div class="para">
- Because of the different ways that 389 Directory Server and Active Directory handle <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> attributes, there are two rules to follow when setting address attributes in Active Directory and FreeIPA:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The synchronization process maps <em class="parameter"><code>streetAddress</code></em> in the Active Directory entry to <em class="parameter"><code>street</code></em> in FreeIPA. To avoid conflicts, the <em class="parameter"><code>street</code></em> attribute should not be used in Active Directory.
- </div></li><li class="listitem"><div class="para">
- Only one FreeIPA <em class="parameter"><code>street</code></em> attribute value is synced to Active Directory. If the <em class="parameter"><code>streetAddress</code></em> attribute is changed in Active Directory and the new value does not already exist in FreeIPA, then all <em class="parameter"><code>street</code></em> attribute values in FreeIPA are replaced with the new, single Active Directory value.
- </div></li></ul></div></div><div class="section" id="Schema_Diferences-initials"><div class="titlepage"><div><div><h4 class="title" id="Schema_Diferences-initials">8.1.3.3. Constraints on the initials Attribute</h4></div></div></div><a id="id3384854" class="indexterm"></a><div class="para">
- For the <em class="parameter"><code>initials</code></em> attribute, Active Directory imposes a maximum length constraint of six characters, but 389 Directory Server does not have a length limit. If an <em class="parameter"><code>initials</code></em> attribute longer than six characters is added to FreeIPA, the value is trimmed when it is synchronized with the Active Directory entry.
- </div></div></div></div><div class="section" id="Setting_up_Active_Directory"><div class="titlepage"><div><div><h2 class="title" id="Setting_up_Active_Directory">8.2. Setting up Active Directory for Synchronization</h2></div></div></div><div class="para">
- Synchronizing user accounts alone is enabled within FreeIPA, so all that is necessary is to set up a sync agreement (<a class="xref" href="#Creating_Synchronization_Agreements">Section 8.4.2, “Creating Synchronization Agreements”</a>). To synchronize passwords requires that Active Directory be running in SSL and that the Password Sync Service be installed on each Active Directory domain controller. The Password Sync Service records password changes and synchronizes them, over a secure connection, to the FreeIPA entry.
- </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Install the Microsoft Certificate System in Enterprise Root Mode. Active Directory will then automatically enroll to retrieve its SSL server certificate.
- </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Make sure that the Active Directory password complexity policies are enabled so that the Password Sync service will run.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Run <code class="filename">secpol.msc</code> from the command line.
- </div></li><li class="listitem"><div class="para">
- Select <span class="guimenu"><strong>Security Settings</strong></span>.
+ Similar locations can be specified for each service that needs to be made Kerberos aware. There is no specific location that must be used, but, when using <code class="command">ipa-getkeytab</code>, you should avoid using <code class="filename">/etc/krb5.keytab</code>. This file should not contain service-specific keytabs; each service should have its keytab saved in a specific location and the access privileges (and possibly SELinux rules) should be configured so that only this service has access to the keytab.
+ </div><div class="section" id="adding-service-entry-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-service-entry-ui">6.6.1.1. >Adding Services and Keytabs from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Services</strong></span> subtab.
</div></li><li class="listitem"><div class="para">
- Open <span class="guimenuitem"><strong>Account Policies</strong></span>, and then open <span class="guimenuitem"><strong>Password Policy</strong></span>.
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the services list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/services-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the service type from the drop-down menu, and give it a name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the hostname of the FreeIPA host on which the service is running. The hostname is used to construct the full service principal name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new service principal.
</div></li><li class="listitem"><div class="para">
- Enable the <code class="command">Password must meet complexity requirements</code> option and save.
- </div><div class="informalfigure"><div class="mediaobject"><img src="images/sync-adpwdpolicy.png" width="700" /></div></div></li></ol></div></li><li class="listitem"><div class="para">
- If SSL is not already enabled, set up SSL on the Active Directory server. Setting up LDAPS is explained in more detail in the Microsoft knowledgebase at <a href="http://support.microsoft.com/kb/321051">http://support.microsoft.com/kb/321051</a>.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Install a certificate authority in the <span class="guilabel"><strong>Windows Components</strong></span> section in <span class="guilabel"><strong>Add/Remove Programs</strong></span>.
+ Use the <code class="command">ipa-getkeytab</code> command to generate and assign the new keytab for the service principal.
+ </div><pre class="programlisting"><span class="perl_Comment"># ipa-getkeytab -s server.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</span></pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The realm name is optional. The FreeIPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm.
+ </div></li><li class="listitem"><div class="para">
+ The hostname must resolve to a DNS A record for it to work with Kerberos. You can use the <code class="option">--force</code> flag to force the creation of a principal should this prove necessary.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-e</code> argument can include a comma-separated list of encryption types to include in the keytab. This supersedes any default encryption type.
+ </div></li></ul></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ Creating a new key resets the secret for the specified principal. This means that all other keytabs for that principal are rendered invalid.
+ </div></div></div></li></ol></div></div><div class="section" id="adding-service-entry-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-service-entry-cmd">6.6.1.2. >Adding Services and Keytabs from the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
+ </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em></pre><div class="para">
+ For example:
+ </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com
+-------------------------------------------------------
+Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</span>
+-------------------------------------------------------
+ Principal: HTTP/server.example.com at EXAMPLE.COM
+ Managed by: ipaserver.example.com
+</pre></li><li class="listitem"><div class="para">
+ Create the service keytab file. This is done using the <code class="command">ipa-getkeytab</code> command. The command requires the Kerberos service principal (<code class="option">-p</code>), the FreeIPA server name (<code class="option">-s</code>), the file to write (<code class="option">-k</code>), and the encryption method (<code class="option">-e</code>). Be sure to copy the keytab to the appropriate directory for the service.
+ </div><div class="para">
+ For example:
+ </div><pre class="programlisting"><span class="perl_Comment"># ipa-getkeytab -s server.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</span></pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The realm name is optional. The FreeIPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm.
+ </div></li><li class="listitem"><div class="para">
+ The hostname must resolve to a DNS A record for it to work with Kerberos. You can use the <code class="option">--force</code> flag to force the creation of a principal should this prove necessary.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-e</code> argument can include a comma-separated list of encryption types to include in the keytab. This supersedes any default encryption type.
+ </div></li></ul></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ The <code class="command">ipa-getkeytab</code> command resets the secret for the specified principal. This means that all other keytabs for that principal are rendered invalid.
+ </div></div></div></li></ol></div></div></div><div class="section" id="request-service-service"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="request-service-service">6.6.2. Adding Services and Certificates for Services</h3></div></div></div><div class="para">
+ While services can use keytabs, some services require certificates for access. In that case, a service can be added (or modified) to include a certificate with its service entry.
+ </div><div class="section" id="request-service-service-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="request-service-service-ui">6.6.2.1. Adding Services and Certificates from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Services</strong></span> subtab.
</div></li><li class="listitem"><div class="para">
- Select the <span class="guilabel"><strong>Enterprise Root CA</strong></span> option.
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the services list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/services-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the service type from the drop-down menu, and give it a name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the hostname of the FreeIPA host on which the service is running. The hostname is used to construct the full service principal name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the service entry page.
</div></li><li class="listitem"><div class="para">
- Reboot the Active Directory server. If IIS web services are running, the CA certificate can be accessed by opening <code class="command">http://</code><span class="emphasis"><em>servername</em></span><code class="command">/certsrv</code>.
+ Scroll to the bottom of the page, to the <span class="guilabel"><strong>Service Certificate</strong></span> section.
</div></li><li class="listitem"><div class="para">
- Set up the Active Directory server to use the SSL server certificate.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create a certificate request <code class="filename">.inf</code>, using the fully-qualified domain name of the Active Directory as the certificate subject. For example:
- </div><pre class="screen">;----------------- request.inf -----------------
+ Click the <span class="guilabel"><strong>New Certificate</strong></span> button to create the service certificate.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-cert.png" width="444" /></div></div></li></ol></div></div><div class="section" id="request-service-service-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="request-service-service-cmd">6.6.2.2. Adding Services and Certificates from the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create a certificate for the service. Be sure to copy the keytab to the appropriate directory for the service.
+ </div><div class="para">
+ For example:
+ </div><pre class="programlisting">$ ipa cert-request --principal=HTTP/web.example.com example.csr</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Use the <code class="option">--add</code> option to create the service automatically when requesting the certificate.
+ </div></div></div><div class="para">
+ Alternatively, use the <code class="command">getcert</code> command, which creates and manages the certificate through <code class="command">certmonger</code>. The options are described more in <a class="xref" href="#certmonger-req">Section 18.1, “Requesting a Certificate with certmonger”</a> and .
+ </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre></li><li class="listitem"><div class="para">
+ Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
+ </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em> --certificate="<em class="replaceable"><code>CSR</code></em>"</pre><div class="para">
+ For example (this example shortens the certificate):
+ </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com --certificate=<span class="perl_String">"MIICbTCCAVUCAQ...IzSljdLMYNg=="</span>
-[Version]
+-------------------------------------------------------
+Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</span>
+-------------------------------------------------------
+ Principal: HTTP/server.example.com at EXAMPLE.COM
+ Managed by: ipaserver.example.com
+</pre><div class="para">
+ Include the <span class="emphasis"><em>complete</em></span> certificate request in the <code class="option">--certificate</code> option.
+ </div></li></ol></div></div></div><div class="section" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server">6.6.3. Configuring an NFS Service</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create a directory for the NFS information which is writable by all users.
+<pre class="screen"># mkdir /export
-Signature="$Windows NT$
+# chmod 777 /export</pre>
-[NewRequest]
+ </div></li><li class="listitem"><div class="para">
+ Edit the <code class="filename">/etc/exports</code> file and add the Kerberos information:
+ </div><div class="para">
+
+<pre class="programlisting">/export *(rw,fsid=0,insecure,no_subtree_check)
+/export gss/krb5(rw,fsid=0,insecure,no_subtree_check)
+/export gss/krb5i(rw,fsid=0,insecure,no_subtree_check)
+/export gss/krb5p(rw,fsid=0,insecure,no_subtree_check)
+</pre>
-Subject = "CN=ad.server.example.com, O=Engineering, L=Raleigh, S=North Carolina, C=US"
-KeySpec = 1
-KeyLength = 2048
-Exportable = TRUE
-MachineKeySet = TRUE
-SMIME = False
-PrivateKeyArchive = FALSE
-UserProtected = FALSE
-UseExistingKeySet = FALSE
-ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
-ProviderType = 12
-RequestType = PKCS10
-KeyUsage = 0xa0
+ </div></li><li class="listitem"><div class="para">
+ To enable secure NFS, add the following line to <code class="filename">/etc/sysconfig/nfs</code>:
+ </div><div class="para">
+
+<pre class="programlisting">SECURE_NFS=yes
+</pre>
-[EnhancedKeyUsageExtension]
+ </div></li><li class="listitem"><div class="para">
+ Add a service principal and keytab for NFS, as in <a class="xref" href="#adding-service-entry">Section 6.6.1, “Adding and Editing Service Entries and Keytabs”</a>.
+<pre class="screen"># ipa service-add nfs/ipaserver.example.com
-OID=1.3.6.1.5.5.7.3.1
+# ipa-getkeytab -s ipaserver.example.com -p nfs/ipaserver.example.com -k /etc/nfs/conf/nfs.keytab</pre>
-;-----------------------------------------------</pre><div class="para">
- For more information on the <code class="filename">.inf</code> request file, see the Microsoft documentation, such as <a href="http://technet.microsoft.com/en-us/library/cc783835.aspx">http://technet.microsoft.com/en-us/library/cc783835.aspx</a>.
- </div></li><li class="listitem"><div class="para">
- Generate the certificate request.
- </div><pre class="screen">certreq -new request.inf request.req</pre></li><li class="listitem"><div class="para">
- Submit the request to the Active Directory CA. For example:
- </div><pre class="screen">certreq -submit request.req certnew.cer</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- If the command-line tool returns an error message, then use the Web browser to access the CA and submit the certificate request. If IIS is running, then the CA URL is <code class="command">http://</code><span class="emphasis"><em>servername</em></span><code class="command">/certsrv</code>.
- </div></div></div></li><li class="listitem"><div class="para">
- Accept the certificate request. For example:
- </div><pre class="screen">certreq -accept certnew.cer</pre></li><li class="listitem"><div class="para">
- Make sure that the server certificate is present on the Active Directory server.
- </div><div class="para">
- In the <span class="guimenu"><strong>File</strong></span> menu, click <span class="guimenuitem"><strong>Add/Remove</strong></span>, then click <span class="guimenuitem"><strong>Certificates</strong></span> and <span class="guimenuitem"><strong>Personal>Certificates</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Reload the NFS configuration, and restart the required services, <code class="systemitem">services</code>, <code class="systemitem">nfs</code>, and <code class="systemitem">rpcgssd</code>. Use the <code class="option">-k</code> option when restarting <code class="systemitem">rpcgssd</code>; this updates the NFS configuration with the path to the NFS keytab.
+<pre class="screen"># exportfs -a
+
+# restart services
+
+# service nfs restart
+
+# service rpcgssd restart -k /etc/nfs/conf/nfs.keytab</pre>
+
+ </div></li></ol></div></div><div class="section" id="Creating_an_IPA_Service-Using_NSS"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Creating_an_IPA_Service-Using_NSS">6.6.4. Storing Certificates in NSS Databases</h3></div></div></div><div class="para">
+ When services use certificates, the certificates and keys can be stored in NSS databases (which may also be used by the services themselves, as well as FreeIPA).
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the NSS databases.
+ </div><pre class="screen">$ certutil -N -d <em class="replaceable"><code>/path/to/database/dir</code></em></pre></li><li class="listitem"><div class="para">
+ Request the certificate using <code class="command">certutil</code>, an NSS tool.
+ </div><pre class="screen">$ certutil -R -s "CN=client1.example.com,O=EXAMPLE.COM" -d <em class="replaceable"><code>/path/to/database/dir</code></em> -a > example.csr</pre></li></ol></div><div class="para">
+ If the FreeIPA domain is using Certificate System for its CA, only the CN of the subject name is used. With a self-signed CA, the subject must match the configured certificate subject base. The FreeIPA server rejects requests with a subject base that differs from this value.
+ </div></div><div class="section" id="ipa-cluster"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-cluster">6.6.5. Configuring Clustered Services</h3></div></div></div><div class="para">
+ The FreeIPA server is not <em class="firstterm">cluster aware</em>. However, it is possible to configure a clustered service to be part of FreeIPA by synchronizing Kerberos keys across all of the participating hosts and configuring services running on the hosts to respond to whatever names the clients use.
+ </div><div class="section" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment">6.6.5.1. Configuring Kerberos Credentials for a Clustered Environment</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Enroll all of the hosts in the cluster into the FreeIPA domain.
+ </div></li><li class="listitem"><div class="para">
+ Create any service principals and generate the required keytabs.
+ </div></li><li class="listitem"><div class="para">
+ Collect any keytabs that have been set up for services on the host, including the host keytab at <code class="filename">/etc/krb5.keytab</code>.
+ </div></li><li class="listitem"><div class="para">
+ Use the <code class="command">ktutil</code> command to produce a single keytab file that contains the contents of all of the keytab files.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ For each file, use the <code class="command">rkt</code> command to read the keys from that file.
</div></li><li class="listitem"><div class="para">
- Import the CA certificate from Directory Server into Active Directory. Click <span class="guilabel"><strong>Trusted Root CA</strong></span>, then <span class="guilabel"><strong>Import</strong></span>, and browse for the Directory Server CA certificate.
+ Use the <code class="command">wkt</code> command to write all of the keys which have been read to a new keytab file.
</div></li></ol></div></li><li class="listitem"><div class="para">
- Reboot the domain controller.
- </div></li></ol></div></li><li class="listitem"><div class="para">
- Install the Password Sync Service on every domain controller in the Active Directory domain in order to synchronize Windows passwords.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Download the <code class="filename">PassSync.msi</code> file from Red Hat Network and save it to the Active Directory machine.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- There are two PassSync packages available, one for 32-bit Windows servers and one for 64-bit. Make sure to select the appropriate packages for your Windows platform.
- </div></div></div></li><li class="listitem"><div class="para">
- Double-click on the <code class="filename">PassSync.msi</code> file to install it.
+ Replace the keytab files on each host with the newly-created combined keytab file.
</div></li><li class="listitem"><div class="para">
- The <span class="application"><strong>Password Sync Setup</strong></span> window appears. Hit <span class="guilabel"><strong>Next</strong></span> to begin installing.
- </div></li><li class="listitem"><div class="para">
- Fill in the Directory Server hostname, secure port number, user name (such as <code class="command">cn=sync user,cn=config</code>), the certificate token (password), and the search base (e.g., <code class="command">ou=People,dc=example,dc=com</code>).
- </div><div class="informalfigure"><div class="mediaobject"><img src="images/passsync.png" /></div></div><div class="para">
- Hit <span class="guibutton"><strong>Next</strong></span>, then <span class="guibutton"><strong>Finish</strong></span> to install Password Sync.
+ At this point, each host in this cluster can now impersonate any other host.
</div></li><li class="listitem"><div class="para">
- Reboot the Windows machine to start Password Sync.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The Windows machine must be rebooted. Without the rebooting, <code class="filename">PasswordHook.dll</code> is not enabled, and password synchronization will not function.
- </div></div></div></li></ol></div></li></ol></div><div class="para">
- The first attempt to synchronize passwords, which happened when the Password Sync application is installed, will always fail because of the SSL connection between the Directory Server and Active Directory sync peers. The tools to create the certificate and key databases is installed with the <code class="filename">.msi</code>.
- </div></div><div class="section" id="password-sync"><div class="titlepage"><div><div><h2 class="title" id="password-sync">8.3. Exempting Active Directory Users from Password Synchronization</h2></div></div></div><div class="para">
- The passwords in password change operations are still subject to the password policy settings, such as password expiration times. For example, in FreeIPA every password change requires an immediate password reset. While normal user passwords need to be subject to password policies, administrative passwords should be exempt from any password rules. A list of user DNs can be set in the password synchronization configuration that are exempted from the password policy.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The Directory Manager password is always exempt from password policy.
- </div></div></div><div class="para">
- Edit the password synchronization entry, <code class="command">cn=ipa_pwd_extop,cn=plugins,cn=config</code>, and add the <em class="parameter"><code>passSyncManagersDNs</code></em> attribute with the name of the user. This attribute is multi-valued. For example:
- </div><pre class="screen">$ ldapmodify -x -D "cn=Directory Manager" -w secret -h ldap.example.com -p 389
+ Some services require additional configuration to accommodate cluster members which do not reset hostnames when taking over a failed service.
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ For <code class="systemitem">sshd</code>, set <em class="parameter"><code>GSSAPIStrictAcceptorCheck no</code></em> in <code class="filename">/etc/ssh/sshd_config</code>.
+ </div></li><li class="listitem"><div class="para">
+ For <code class="systemitem">mod_auth_kerb</code>, set <em class="parameter"><code>KrbServiceName Any</code></em> in <code class="filename">/etc/httpd/conf.d/auth_kerb.conf</code>.
+ </div></li></ul></div>
-dn: cn=ipa_pwd_extop,cn=plugins,cn=config
-changetype: modify
-add: passSyncManagersDNs
-passSyncManagersDNs: uid=admin,cn=users,cn=accounts,dc=example,dc=com</pre></div><div class="section" id="managing-sync-agmt"><div class="titlepage"><div><div><h2 class="title" id="managing-sync-agmt">8.4. Managing Synchronization Agreements</h2></div></div></div><div class="section" id="exporting-ad-cert"><div class="titlepage"><div><div><h3 class="title" id="exporting-ad-cert">8.4.1. Obtaining the Active Directory CA Certificate</h3></div></div></div><div class="para">
- The Active Directory CA certificate is required to create the synchronization agreement. To export this certificate from the Active Directory service:
+ </div></li></ol></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ For SSL servers, the subject name or a subject alternative name for the server's certificate must appear correct when a client connects to the clustered host. If possible, share the private key among all of the hosts. If each cluster member contains a subject alternative name which includes the names of all the other cluster members will satisfy any client connection requirements.
+ </div></div></div></div></div><div class="section" id="Using_the_Same_Service_Principal_for_Multiple_Services"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Using_the_Same_Service_Principal_for_Multiple_Services">6.6.6. Using the Same Service Principal for Multiple Services</h3></div></div></div><div class="para">
+ Within a cluster, the same service principal can be used for multiple services, spread across different machines.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- In <span class="guilabel"><strong>My Network Places</strong></span>, open the CA distribution point. For example, the location on Windows Server 2003 is <code class="filename">C:\WINDOWS\system32\certsrv\CertEnroll\</code>.
+ Retrieve a service principal using the <code class="command">ipa-getkeytab</code> command.
+ </div><pre class="screen"># ipa-getkeytab -s kdc.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</pre></li><li class="listitem"><div class="para">
+ Either direct multiple servers or services to use the same file, or copy the file to individual servers as required.
+ </div></li></ol></div></div></div><div class="section" id="host-disable"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="host-disable">6.7. Disabling Host and Service Entries</h2></div></div></div><a id="id601675" class="indexterm"></a><a id="id601687" class="indexterm"></a><div class="para">
+ Active services and hosts can be accessed by other services, hosts, and users within the domain. There can be situations when it is necessary to remove a host or a service from activity. However, deleting a service or a host removes the entry and all the associated configuration, and it removes it permanently.
+ </div><div class="para">
+ Disabling a host or service prevents domain users from access it without permanently removing it from the domain. This can be done by using the <code class="command">host-disable</code> and <code class="command">service-disable</code> commands.
+ </div><div class="para">
+ For example, for a host:
+ </div><pre class="screen">$ ipa host-disable server.example.com</pre><div class="para">
+ For a service, specify the principal rather than the hostname:
+ </div><pre class="screen">$ ipa service-disable http/server.example.com</pre></div><div class="section" id="Extending_the_Permissions_of_IPA_Managed_Hosts"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Extending_the_Permissions_of_IPA_Managed_Hosts">6.8. Extending Access Permissions over Other Hosts and Services</h2></div></div></div><div class="para">
+ As discussed in <a class="xref" href="#service-interactions">Section 1.3, “Relationships Between Servers and Clients”</a>, within the FreeIPA domain, <span class="emphasis"><em>manage</em></span> means being able to retrieve a keytab and certificates for another host or service. Every host and service has a <em class="parameter"><code>managedby</code></em> entry which lists what hosts or services can manage it. By default, a host can manage itself and all of its services. It is also possible to allow a host to manage other hosts, or services on other hosts, by updating the appropriate delegations or providing a suitable <em class="parameter"><code>managedby</code></em> entry.
+ </div><div class="para">
+ A FreeIPA service can be managed from any FreeIPA host, as long as that host has been granted, or <span class="emphasis"><em>delegated</em></span>, permission to access the service. Likewise, hosts can be delegated permissions to other hosts within the domain.
+ </div><div class="figure" id="fig.host-service"><div class="figure-contents"><div class="mediaobject"><img src="images/host-services.png" width="444" alt="Host and Service Delegation" /></div></div><h6>Figure 6.1. Host and Service Delegation</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ If a host is delegated authority to another host through a <code class="command">managedBy</code> entry, it does not mean that the host has also been delegated management for all services on that host. Each delegation has to be performed independently.
+ </div></div></div><div class="section" id="Delegating_Service_Management"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Delegating_Service_Management">6.8.1. Delegating Service Management</h3></div></div></div><div class="para">
+ A host is delegated control over a service using the <code class="command">service-add-host</code> command. There are two parts to delegating the service: specifying the principal and identifying the hosts (in a comma-separated list) with control:
+ </div><pre class="screen"># ipa service-add-host <em class="replaceable"><code>principal</code></em> --hosts=<em class="replaceable"><code>hostnames</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen"># ipa service-add-host http/web.example.com --hosts=client1.example.com</pre><div class="para">
+ Once the host is delegated authority, the host principal can be used to manage the service:
+ </div><pre class="screen"># kinit -kt /etc/krb5.keytab host/`hostname`
+# ipa-getkeytab -s `hostname` -k /tmp/test.keytab -p http/web.example.com
+Keytab successfully retrieved and stored in: /tmp/test.keytab</pre><div class="para">
+ To create a ticket for this service, create a certificate request on the host with the delegated authority and use the <code class="command">cert-request</code> command to create a service entry and load the certification information:
+ </div><pre class="screen"># ipa cert-request --add --principal=http/web.example.com web.csr
+ Certificate: MIICETCCAXqgA...[snip]
+ Subject: CN=web.example.com,O=EXAMPLE.COM
+ Issuer: CN=EXAMPLE.COM Certificate Authority
+ Not Before: Tue Feb 08 18:51:51 2011 UTC
+ Not After: Mon Feb 08 18:51:51 2016 UTC
+ Fingerprint (MD5): c1:46:8b:29:51:a6:4c:11:cd:81:cb:9d:7c:5e:84:d5
+ Fingerprint (SHA1):
+ 01:43:bc:fa:b9:d8:30:35:ee:b6:54:dd:a4:e7:d2:11:b1:9d:bc:38
+ Serial number: 1005
+</pre></div><div class="section" id="Delegating_Host_Management"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Delegating_Host_Management">6.8.2. Delegating Host Management</h3></div></div></div><div class="para">
+ Hosts are delegated authority over other hosts through the <code class="command">host-add-managedby</code> command. This creates a <code class="command">managedby</code> entry. Once the <code class="command">managedby</code> entry is created, then the host can retrieve a keytab for the host it has delegated authority over.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Log in as the admin user.
+<pre class="screen"># kinit admin</pre>
+
</div></li><li class="listitem"><div class="para">
- Double-click the security certificate file (<code class="filename">.crt</code> file) to display the <span class="guilabel"><strong>Certificate</strong></span> dialog box.
+ Add the <em class="parameter"><code>managedby</code></em> entry. For example, this delegates authority <span class="emphasis"><em>over</em></span> client2 <span class="emphasis"><em>to</em></span> client1.
+<pre class="screen"># ipa host-add-managedby client2.example.com --hosts=client1.example.com</pre>
+
</div></li><li class="listitem"><div class="para">
- On the <span class="guilabel"><strong>Details</strong></span> tab, click <span class="guibutton"><strong>Copy to File</strong></span> to start the <span class="application"><strong>Certificate Export Wizard</strong></span>.
+ Obtain a ticket as the host <code class="systemitem">client1</code> and then retrieve a keytab for <code class="systemitem">client2</code>:
+<pre class="screen"># kinit -kt /etc/krb5.keytab host/`hostname`
+# ipa-getkeytab -s `hostname` -k /tmp/client2.keytab -p host/client2.example.com
+Keytab successfully retrieved and stored in: /tmp/client2.keytab</pre>
+
+ </div></li></ol></div></div><div class="section" id="accessing-service"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="accessing-service">6.8.3. Accessing Delegated Services</h3></div></div></div><div class="para">
+ For both services and hosts, if a client has delegated authority, it can obtain a keytab for that principal on the local machine. For services, this has the format <span class="emphasis"><em>service/hostname at REALM</em></span>. For hosts, the <span class="emphasis"><em>service</em></span> is <code class="systemitem">host</code>.
+ </div><div class="para">
+ With <code class="command">kinit</code>, use the <code class="option">-k</code> option to load a keytab and the <code class="option">-t</code> option to specify the keytab.
+ </div><div class="para">
+ For example, to access a host:
+<pre class="screen"># kinit -kt /etc/krb5.keytab host/ipa.example.com at EXAMPLE.COM</pre>
+
+ </div><div class="para">
+ To access a service:
+<pre class="screen"># kinit -kt /etc/httpd/conf/krb5.keytab http/ipa.example.com at EXAMPLE.COM</pre>
+
+ </div></div></div><div class="section" id="renaming-machines"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="renaming-machines">6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration</h2></div></div></div><div class="para">
+ The hostname of a system is critical for the correct operation of Kerberos and SSL. Both of these security mechanisms rely on the hostname to ensure that communication is occurring between the specified hosts. Infrastructures which use virtual machines or clustered servers will commonly have hosts which are renamed because systems are copied, moved, or renamed.
+ </div><div class="para">
+ Fedora does not provide a simple rename command to facilitate the renaming of a FreeIPA host. Renaming a host in a FreeIPA domain involves deleting the entry in FreeIPA, uninstalling the client software, changing the hostname, and re-enrolling using the new name. Additionally, part of renaming hosts requires regenerating service principals.
+ </div><div class="para">
+ To reconfigure the client:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Identify which services are running on the machine. These need to be re-created when the machine is re-enrolled.
+<pre class="screen"># ipa service-find server.example.com</pre>
+
+ </div><div class="para">
+ Each host has a default service which does not appear in the list of services. This service can be referred to as the "host service". The service principal for the host service is <code class="systemitem">host/<hostname></code>, such as <code class="systemitem">host/server.example.com</code>. This principal can also be referred to as the <span class="emphasis"><em>host principal</em></span>.
+ </div></li><li class="listitem"><div class="para">
+ Identify all host groups to which the machine belongs.
+<pre class="screen"># ipa hostgroup-find server.example.com</pre>
+
+ </div><div class="para">
+ Identify which of the services have certificates associated with them.
+ </div><div class="para">
+ The <code class="systemitem">host</code> service always has an associated certificate.
+ </div></li><li class="listitem"><div class="para">
+ For any service principals (in addition to the host principal), determine the location of the corresponding keytabs on <code class="systemitem">server.example.com</code>. The keytab location is different for each service, and FreeIPA does not store this information.
+ </div><div class="para">
+ Each service on the client system has a Kerberos principal in the form <span class="emphasis"><em>service name/hostname at REALM</em></span>, such as <code class="systemitem">ldap/server.example.com at EXAMPLE.COM</code>.
+ </div></li><li class="listitem"><div class="para">
+ Unenroll the client machine from the FreeIPA domain:
+<pre class="screen"># ipa-client-install --uninstall</pre>
+
+ </div></li><li class="listitem"><div class="para">
+ For each identified keytab other than <code class="filename">/etc/krb5.keytab</code>, remove the old principals:
+<pre class="screen"># ipa-rmkeytab -k <em class="replaceable"><code>/path/to/keytab</code></em> -r EXAMPLE.COM</pre>
+
+ </div></li><li class="listitem"><div class="para">
+ On another FreeIPA machine, as a FreeIPA administrator, remove the host entry. This removes all services and revokes all certificates issued for that host:
+<pre class="screen"># ipa host-del server.example.com</pre>
+
+ </div><div class="para">
+ At this point, the host is completely removed from FreeIPA.
+ </div></li><li class="listitem"><div class="para">
+ Rename the machine.
+ </div></li><li class="listitem"><div class="para">
+ Re-enroll the system with FreeIPA:
+<pre class="screen"># ipa-client-install</pre>
+
+ </div><div class="para">
+ This generates a host principal for with the new hostname in <code class="filename">/etc/krb5.keytab</code>.
+ </div></li><li class="listitem"><div class="para">
+ For every service that needs a new keytab, run the following command:
+<pre class="screen"># ipa service-add <em class="replaceable"><code>serviceName/new-hostname</code></em></pre>
+
+ </div></li><li class="listitem"><div class="para">
+ To generate certificates for services, use either <code class="command">certmonger</code> or the FreeIPA administration tools.
+ </div></li><li class="listitem"><div class="para">
+ Re-add the host to any applicable host groups.
+ </div></li></ol></div></div><div class="section" id="host-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="host-groups">6.10. Managing Host Groups</h2></div></div></div><div class="para">
+ Host groups are a way of centralizing control over important management tasks, particularly access control.
+ </div><div class="para">
+ All groups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
+ </div><div class="para">
+ Because groups are easy to create, it is possible to be very flexible in what groups to create and how they are organized. Groups can be defined around organizational divisions like departments, physical locations, or FreeIPA or infrastructure usage guidelines for access controls.
+ </div><div class="section" id="creating-host-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-host-groups">6.10.1. Creating Host Groups</h3></div></div></div><div class="section" id="creating-host-groups-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-host-groups-ui">6.10.1.1. Creating Host Groups from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Host Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the groups list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name and a description for the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroup-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go immediately to the member selection page.
+ </div></li><li class="listitem"><div class="para">
+ Select the members, as described in <a class="xref" href="#hostgroup-members-ui">Section 6.10.2.1, “Adding Group Members with the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="creating-host-groups-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-host-groups-cmd">6.10.1.2. Creating Host Groups from the Command Line</h4></div></div></div><div class="para">
+ New groups are created using the <code class="command">hostgroup-add</code> command. (This adds only the group; members are added separately.)
+ </div><div class="para">
+ Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
+ </div><pre class="screen">$ ipa hostgroup-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>"</pre></div></div><div class="section" id="hg-adding-members"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hg-adding-members">6.10.2. Adding Group Members</h3></div></div></div><div class="section" id="hostgroup-members-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="hostgroup-members-ui">6.10.2.1. Adding Group Members with the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Host Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the group to which to add members.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroups-menu.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the hosts to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroups-addmembers.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="hostgroup-members-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="hostgroup-members-cmd">6.10.2.2. Adding Group Members with the Web UI</h4></div></div></div><div class="para">
+ Members are added to a host group using the <code class="command">hostgroup-add-member</code> command. This command can add both hosts as group members and other groups as group members.
+ </div><div class="para">
+ The syntax of the <code class="command">hostgroup-add-member</code> command requires only the group name and a comma-separated list of hosts to add:
+ </div><pre class="screen">$ ipa hostgroup-add-member <em class="replaceable"><code>groupName</code></em> [--hosts=<em class="replaceable"><code>list</code></em>] [--hostgroups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
+ For example, this adds three hosts to the <code class="command">caligroup</code> group:
+ </div><pre class="screen">$ ipa hostgroup-add-member caligroup --hosts=ipaserver.example.com,client1.example.com,client2.example.com
+ Group name: caligroup
+ Description: for machines in california
+ GID: 387115842
+ Member hosts: ipaserver.example.com,client1.example.com,client2.example.com
+-------------------------
+Number of members added 3
+-------------------------
+</pre><div class="para">
+ Likewise, other groups can be added as members, which creates nested groups:
+ </div><pre class="screen">$ ipa hostgroup-add-member caligroup --groups=mountainview,sandiego
+ Group name: caligroup
+ Description: for machines in california
+ GID: 387115842
+ Member groups: mountainview,sandiego
+ -------------------------
+ Number of members added 2
+ -------------------------
+</pre></div></div></div></div><div xml:lang="en-US" class="chapter" id="active-directory" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 7. Identity: Integrating with Microsoft Active Directory</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-active-directory">7.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="#about-sync">7.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="#about-sync-schema">7.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="#Windows_Sync-Schema_Differences-users">7.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_up_Active_Directory">7.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="#password-sync">7.3. Exe
mpting Active Directory Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="#managing-sync-agmt">7.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="#exporting-ad-cert">7.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="#Creating_Synchronization_Agreements">7.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Modifying_Synchronization_Agreements">7.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="#changing-subtree">7.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt><span class="section"><a href="#Deleting_Synchronization_Agreements">7.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">7.4.6. Winsync Agreement Failures</a></span><
/dt></dl></dd><dt><span class="section"><a href="#Configuring_Microsoft_Windows">7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></div><div class="para">
+ FreeIPA uses active <span class="emphasis"><em>synchronization</em></span> to integrate user data stored in an Active Directory domain and the user data stored in the FreeIPA domain. Critical user attributes, including passwords, are synchronized between the services.
+ </div><div class="para">
+ The capability to sync Active Directory and FreeIPA domains is inherent when a FreeIPA server is first installed. The synchronization process is configured by creating <span class="emphasis"><em>agreements</em></span> between the FreeIPA server and the Active Directory domain controller.
+ </div><div class="para">
+ This chapter describes how to configure synchronization, how to configure Active Directory for integration with FreeIPA, and how to configure Windows systems within the Active Directory domain to be aware of the FreeIPA domain.
+ </div><div class="section" id="about-active-directory"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-active-directory">7.1. About Active Directory, FreeIPA, and Identity Management</h2></div></div></div><div class="para">
+ Within the FreeIPA domain, information is shared among servers and replicas by copying that information, reliably and predictably, between the data masters (servers) and other data masters or read-only hub servers. This process is <span class="emphasis"><em>replication</em></span>.
+ </div><div class="para">
+ A similar process can be used to share data between the FreeIPA domain and a Microsoft Active Directory domain. This is <span class="emphasis"><em>synchronization</em></span>.
+ </div><div class="section" id="about-sync"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-sync">7.1.1. About Active Directory Synchronization</h3></div></div></div><div class="para">
+ Synchronization is the process of copying data back and forth between Active Directory and FreeIPA.
+ </div><div class="para">
+ Synchronization is defined in an <span class="emphasis"><em>agreement</em></span> between a FreeIPA server and an Active Directory domain controller. The sync agreement defines all of the information required to identify sync-able user entries (like the subtree to synchronize and requisite object classes in the user entries) as well as defining how account attributes are handled. The sync agreements are created with default values which can be tweaked to meet the needs of a specific domain. When two servers are involved in synchronization, they are called <span class="emphasis"><em>peers</em></span>.
+ </div><div class="para">
+ Synchronization is most commonly <span class="emphasis"><em>bi-directional</em></span>. Information is sent back and forth between the FreeIPA domain and the Windows domain in a process that is very similar to how FreeIPA servers and replicas share information among themselves. It is possible to configure synchronization — or certain data areas — to only sync one way. That is <span class="emphasis"><em>uni-directional</em></span> synchronization.
+ </div><div class="para">
+ To prevent the risk of data conflicts, synchronization is configured between one FreeIPA server and one Active Directory domain controller. The FreeIPA server propagates changes back to the FreeIPA domain, while the domain controller propagates changes back to the Windows domain.
+ </div><div class="para">
+ There are some key features to FreeIPA synchronization:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A synchronization operation runs every five minutes.
</div></li><li class="listitem"><div class="para">
- Click <span class="guibutton"><strong>Next</strong></span>, and then select <span class="guilabel"><strong>Base-64 encoded X.509 (.CER)</strong></span>.
- </div><div class="informalfigure"><div class="mediaobject"><img src="images/ASCII_Cert_Export.png" /></div></div></li><li class="listitem"><div class="para">
- Specify a suitable directory and file name for the exported file. Click <span class="guibutton"><strong>Next</strong></span> to export the certificate, and then click <span class="guibutton"><strong>Finish</strong></span>.
- </div></li></ol></div></div><div class="section" id="Creating_Synchronization_Agreements"><div class="titlepage"><div><div><h3 class="title" id="Creating_Synchronization_Agreements">8.4.2. Creating Synchronization Agreements</h3></div></div></div><div class="para">
- Synchronization agreements are created on the FreeIPA server using the <code class="command">ipa-replica-manage connect</code> command because it creates a <span class="emphasis"><em>connection</em></span> to the Active Directory domain. The options to create the synchronization agreement are listed in <a class="xref" href="#tab.sync-agmt">Table 8.3, “Synchronization Agreement Options”</a>.
- </div><div class="example" id="ex.adding-sync-agmt"><h6>Example 8.1. Adding a WinSync agreement between an IPA server and an AD server.</h6><div class="example-contents"><pre class="screen">$ ipa-replica-manage connect --winsync --binddn cn=administrator,cn=users,dc=example,dc=com --bindpw secret --passsync secretpwd --cacert /path/to/certfile.cer adserver.example.com -v</pre></div></div><br class="example-break" /><div class="table" id="tab.sync-agmt"><h6>Table 8.3. Synchronization Agreement Options</h6><div class="table-contents"><table summary="Synchronization Agreement Options" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- Option
- </th><th>
- Description
- </th></tr></thead><tbody><tr><td>
- --winsync
+ Synchronization can only be configured with one Active Directory domain. Multiple domains are not supported.
+ </div></li><li class="listitem"><div class="para">
+ Synchronization can only be configured with <span class="emphasis"><em>one</em></span> Active Directory domain controller. However, it is possible to have a list of failover Active Directory domain controllers. Likewise, there can be a list of failover FreeIPA servers to keep synchronization uninterrupted.
+ </div></li><li class="listitem"><div class="para">
+ Only user information is synchronized.
+ </div></li><li class="listitem"><div class="para">
+ Both user attributes and passwords can be synchronized.
+ </div></li><li class="listitem"><div class="para">
+ While modifications are bi-directional (going both from Active Directory to FreeIPA and from FreeIPA to Active Directory), new accounts are only uni-directional. New accounts created in Active Directory are synchronized over to FreeIPA. However, user accounts created in FreeIPA must also be added in Active Directory before they will be synchronized.
+ </div></li><li class="listitem"><div class="para">
+ Account lock information is synchronized by default, so a user account which is disabled in one domain is disabled in the other.
+ </div></li><li class="listitem"><div class="para">
+ Password synchronization changes take effect immediately.
+ </div></li></ul></div><div class="para">
+ When Active Directory users are synchronized over to FreeIPA, certain attributes (including Kerberos and POSIX attributes) will have IPA attributes are automatically added to the user entries. These attributes are used by FreeIPA within its domain. They are not synchronized back over the the corresponding Active Directory user entry.
+ </div><div class="para">
+ Some of the data in synchronization can be modified as part of the synchronization process. For examples, certain attributes can be automatically added to Active Directory user accounts when they are synced over to the FreeIPA domain. These attribute changes are defined as part of the synchronization agreement and are described in <a class="xref" href="#Modifying_Synchronization_Agreements">Section 7.4.3, “Changing the Behavior for Syncing User Account Attributes”</a>.
+ </div></div><div class="section" id="about-sync-schema"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-sync-schema">7.1.2. Attributes Which Are Synchronized</h3></div></div></div><div class="para">
+ FreeIPA synchronizes a subset of user attributes between FreeIPA and Active Directory user entries. Any other attributes present in the entry, either in FreeIPA or in Active Directory, are ignored by synchronization.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Most POSIX attributes are not synchronized.
+ </div></div></div><div class="para">
+ Although there are significant schema differences between the Active Directory LDAP schema and the 389 Directory Server LDAP schema used by FreeIPA, there are many attributes that are the same. These attributes are simply synchronized between the Active Directory and FreeIPA user entries, with no changes to the attribute name or value format.
+ </div><div class="table" id="Synchronizing_Users-User_Schema_That_Are_the_Same"><h6>Table 7.1. User Schema That Are the Same in FreeIPA and Windows Servers</h6><div class="table-contents"><table summary="User Schema That Are the Same in FreeIPA and Windows Servers" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><tbody><tr><td>
+ cn<sup>[<a id="id1182846" href="#ftn.id1182846" class="footnote">a</a>]</sup>
</td><td>
- Identifies this as a synchronization agreement.
+ physicalDeliveryOfficeName
</td></tr><tr><td>
- --binddn
+ description
</td><td>
- Gives the full user DN of the synchronizationn identity. This is the user DN that the FreeIPA LDAP server uses to bind to Active Directory. This user must exist in the Active Directory domain and must have read, search, and write permissions on the Active Directory subtree.
+ postOfficeBox
</td></tr><tr><td>
- --bindpw
+ destinationIndicator
</td><td>
- Gives the password for the sync user.
+ postalAddress
</td></tr><tr><td>
- --passsync
+ facsimileTelephoneNumber
</td><td>
- Gives the password for the Windows user account which is involved in synchronization.
+ postalCode
</td></tr><tr><td>
- --cacert
+ givenname
</td><td>
- Gives the full path and file name of the Active Directory CA certificate. This certificate is exported in <a class="xref" href="#exporting-ad-cert">Section 8.4.1, “Obtaining the Active Directory CA Certificate”</a>.
+ registeredAddress
</td></tr><tr><td>
- --win-subtree
+ homePhone
</td><td>
- Gives the DN of the Windows subtree containing the users to synchronize. The default value is <code class="systemitem">cn=Users,$SUFFIX</code>.
+ sn
</td></tr><tr><td>
- <span class="emphasis"><em>AD_server_name</em></span>
- </td><td>
- Gives the hostname of the Active Directory domain controller.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Modifying_Synchronization_Agreements"><div class="titlepage"><div><div><h3 class="title" id="Modifying_Synchronization_Agreements">8.4.3. Changing the Behavior for Syncing User Account Attributes</h3></div></div></div><div class="para">
- When the sync agreement is created, it has certain default behaviors defined for how the synchronization process handled the user account attributes during synchronization. The types of behaviors are things like how to handle lockout attributes or how to handle different DN formats. This behavior can be changed by editing the synchronization agreement. The list of attribute-related parameters are in <a class="xref" href="#tab.sync-agmt-attrs">Table 8.4, “Synced Attribute Settings”</a>.
- </div><div class="para">
- The sync agreement exists as a special plug-in entry in the LDAP server and each attribute behavior is set through an LDAP attribute. To change the sync behavior, use the <code class="command">ldapmodify</code> command to modify the LDAP server entry directly.
- </div><div class="para">
- For example, account lockout attributes are synchronized between FreeIPA and Active Directory by default, but this can be disabled by editing the <em class="parameter"><code>ipaWinSyncAcctDisable</code></em> attribute. (Changing this means that if an account is disabled in Active Directory, it is still active in FreeIPA and vice versa.)
- </div><pre class="screen">$ ldapmodify -x -D "cn=directory manager" -w password
-
-dn: cn=ipa-winsync,cn=plugins,cn=config
-changetype: modify
-replace: ipaWinSyncAcctDisable
-ipaWinSyncAcctDisable: none
-
-modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
-</pre><div class="table" id="tab.sync-agmt-attrs"><h6>Table 8.4. Synced Attribute Settings</h6><div class="table-contents"><table summary="Synced Attribute Settings" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
- Parameter
- </th><th>
- Description
- </th><th>
- Possible Values
- </th></tr></thead><tbody><tr><td colspan="2">
- <span class="bold bold"><strong>General User Account Parameters</strong></span>
- </td><td class="auto-generated"> </td></tr><tr><td>
- ipaWinSyncNewEntryFilter
- </td><td>
- Sets the search filter to use to find the entry which contains the list of object classes to add to new user entries.
+ homePostalAddress
</td><td>
- The default is <code class="command">(cn=ipaConfig)</code>.
+ st
</td></tr><tr><td>
- ipaWinSyncNewUserOCAttr
+ initials
</td><td>
- Sets the attribute in the configuration entry which actually contains the list of object classes to add to new user entries.
+ street
+ </td></tr><tr><td>
+ l
</td><td>
- The default is <code class="command">ipauserobjectclasses</code>.
+ telephoneNumber
</td></tr><tr><td>
- ipaWinSyncHomeDirAttr
+ mail
</td><td>
- Identifies which attribute in the entry contains the default location of the POSIX home directory.
+ teletexTerminalIdentifier
+ </td></tr><tr><td>
+ mobile
</td><td>
- The default is <code class="command">ipaHomesRootDir</code>.
+ telexNumber
</td></tr><tr><td>
- ipaWinSyncUserAttr
+ o
</td><td>
- Sets an additional attribute with a specific value to add to Active Directory users when they are synced over from the Active Directory domain. If the attribute is multi-valued, then it can be set multiple times, and the sync process adds all of the values to the entry.
- <div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- This only sets the attribute value if the entry does not already have that attribute present. If the attribute is present, then the entry's value is used when the Active Directory entry is synced over.
- </div></div></div>
-
- </td><td>
- ipaWinSyncUserAttr: <span class="emphasis"><em>attributeName attributeValue</em></span>
+ title
</td></tr><tr><td>
- ipaWinSyncUserFlatten
- </td><td>
- Sets whether to normalize the DN of Active Directory entries to conform with the FreeIPA directory structure. In FreeIPA, all users are stored under the <code class="command">cn=users,cn=accounts,$SUFFIX</code> entry, but Active Directory can have more branches in its directory, which can result in DNs like <code class="command">cn=John Smith,ou=Development,ou=Engineering,cn=users,dc=example,dc=com</code>. <span class="emphasis"><em>Flattening</em></span> the DN discards any additional intervening organizational units in the Active Directory DN and creating a simple DN on the FreeIPA side.
- <div class="para">
- Any <em class="parameter"><code>ou</code></em> attributes are stored in the FreeIPA user entry.
- </div>
-
+ ou
</td><td>
- true | false
+ usercertificate
</td></tr><tr><td>
- ipaWinSyncForceSync
- </td><td>
- Sets whether to check existing FreeIPA users which match an existing Active Directory user should be automatically edited so they can be synchronized. If a FreeIPA user account has a <em class="parameter"><code>uid</code></em> parameter which is identical to the <em class="parameter"><code>samAccountName</code></em> in an existing Active Directory user, then that account is <span class="emphasis"><em>not</em></span> synced by default. This attribute tells the sync service to add the <em class="parameter"><code>ntUser</code></em> and <em class="parameter"><code>ntUserDomainID</code></em> to the FreeIPA user entries automatically, which allows them to be synchronized.
+ pager
</td><td>
- true | false
- </td></tr><tr><td colspan="2">
- <span class="bold bold"><strong>User Account Lock Parameters</strong></span>
- </td><td class="auto-generated"> </td></tr><tr><td>
- ipaWinSyncAcctDisable
+ x121Address
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><div class="para"><sup>[<a id="ftn.id1182846" href="#id1182846" class="para">a</a>] </sup>
+ The <em class="parameter"><code>cn</code></em> is treated differently than other synced attributes. It is mapped directly (<em class="parameter"><code>cn</code></em> to <em class="parameter"><code>cn</code></em>) when syncing from FreeIPA to Active Directory. When syncing from Active Directory to FreeIPA, however, <em class="parameter"><code>cn</code></em> is mapped from the <em class="parameter"><code>name</code></em> attribute on Windows to the <em class="parameter"><code>cn</code></em> attribute in FreeIPA.
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
+ Some attributes have different names but still have direct parity between FreeIPA (which uses 389 Directory Server) and Active Directory. These attributes are <span class="emphasis"><em>mapped</em></span> by the synchronization process.
+ </div><div class="table" id="Synchronizing_Users-User_Schema_Mapped"><h6>Table 7.2. User Schema Mapped between FreeIPA and Active Directory</h6><div class="table-contents"><table summary="User Schema Mapped between FreeIPA and Active Directory" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ FreeIPA
+ </th><th>
+ Active Directory
+ </th></tr></thead><tbody><tr><td>
+ cn<sup>[<a id="id925115" href="#ftn.id925115" class="footnote">a</a>]</sup>
</td><td>
- Sets which way to synchronize account lockout attributes. It is possible to control which account lockout settings are in effect. For example, <code class="command">to_ad</code> means that when account lockout attribute is set in FreeIPA, its value is synced over to Active Directory and overrides the local Active Directory value. By default, account lockout attributes are synced from both domains.
+ name
+ </td></tr><tr><td>
+ nsAccountLock
</td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- both (default)
- </div></li><li class="listitem"><div class="para">
- to_ad
- </div></li><li class="listitem"><div class="para">
- to_ds
- </div></li><li class="listitem"><div class="para">
- none
- </div></li></ul></div>
-
+ userAccountControl
</td></tr><tr><td>
- ipaWinSyncInactivatedFilter
+ ntUserDomainId
</td><td>
- Sets the search filter to use to find the DN of the group used to hold inactivated (disabled) users. This does not need to be changed in most deployments.
+ sAMAccountName
+ </td></tr><tr><td>
+ ntUserHomeDir
</td><td>
- The default is <code class="command">(&(cn=inactivated)(objectclass=groupOfNames))</code>.
+ homeDirectory
</td></tr><tr><td>
- ipaWinSyncActivatedFilter
+ ntUserScriptPath
</td><td>
- Sets the search filter to use to find the DN of the group used to hold activate users. This does not need to be changed in most deployments.
+ scriptPath
+ </td></tr><tr><td>
+ ntUserLastLogon
</td><td>
- The default is <code class="command">(&(cn=activated)(objectclass=groupOfNames))</code>.
- </td></tr><tr><td colspan="2">
- <span class="bold bold"><strong>Group Parameters</strong></span>
- </td><td class="auto-generated"> </td></tr><tr><td>
- ipaWinSyncDefaultGroupAttr
+ lastLogon
+ </td></tr><tr><td>
+ ntUserLastLogoff
</td><td>
- Sets the attribute in the new user account to reference to see what the default group for the user is. The group name in the entry is then used to find the <em class="parameter"><code>gidNumber</code></em> for the user account.
+ lastLogoff
+ </td></tr><tr><td>
+ ntUserAcctExpires
</td><td>
- The default is <code class="command">ipaDefaultPrimaryGroup</code>.
+ accountExpires
</td></tr><tr><td>
- ipaWinSyncDefaultGroupFilter
+ ntUserCodePage
</td><td>
- Sets the search filter to map the group name to the POSIX <em class="parameter"><code>gidNumber</code></em>.
+ codePage
+ </td></tr><tr><td>
+ ntUserLogonHours
</td><td>
- The default is <code class="command">(&(gidNumber=*)(objectclass=posixGroup)(cn=</code><span class="emphasis"><em>groupAttr_value</em></span><code class="command">))</code>.
- </td></tr><tr><td colspan="2">
- <span class="bold bold"><strong>Realm Parameters</strong></span>
- </td><td class="auto-generated"> </td></tr><tr><td>
- ipaWinSyncRealmAttr
+ logonHours
+ </td></tr><tr><td>
+ ntUserMaxStorage
</td><td>
- Sets the attribute which contains the realm name in the realm entry.
+ maxStorage
+ </td></tr><tr><td>
+ ntUserProfile
</td><td>
- The default is <em class="parameter"><code>cn</code></em>.
+ profilePath
</td></tr><tr><td>
- ipaWinSyncRealmFilter
+ ntUserParms
</td><td>
- Sets the search filter to use to find the entry which contains the FreeIPA realm name.
+ userParameters
+ </td></tr><tr><td>
+ ntUserWorkstations
</td><td>
- The default is <code class="command">(objectclass=krbRealmContainer)</code>.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="changing-subtree"><div class="titlepage"><div><div><h3 class="title" id="changing-subtree">8.4.4. Changing the Synchronized Windows Subtree</h3></div></div></div><div class="para">
- Creating a synchronization agreement automatically sets the two subtrees to use as the synchronized user database. In FreeIPA, the default is <code class="command">cn=users,cn=accounts,$SUFFIX</code>, and for Active Directory, the default is <code class="command">CN=Users,$SUFFIX</code>.
- </div><div class="para">
- The value for the Active Directory subtree can be set to a non-default value when the sync agreement is created by using the <code class="option">--win-subtree</code> option. After the agreement is created, the Active Directory subtree can be changed by using the <code class="command">ldapmodify</code> command to edit the <em class="parameter"><code>nsds7WindowsReplicaSubtree</code></em> value in the sync agreement entry.
+ userWorkstations
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><div class="para"><sup>[<a id="ftn.id925115" href="#id925115" class="para">a</a>] </sup>
+ The <em class="parameter"><code>cn</code></em> is is mapped directly (<em class="parameter"><code>cn</code></em> to <em class="parameter"><code>cn</code></em>) when syncing from FreeIPA to Active Directory. When syncing from Active Directory <em class="parameter"><code>cn</code></em> is mapped from the <em class="parameter"><code>name</code></em> attribute in Active Directory to the <em class="parameter"><code>cn</code></em> attribute in FreeIPA.
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Windows_Sync-Schema_Differences-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Windows_Sync-Schema_Differences-users">7.1.3. User Schema Differences between FreeIPA and Active Directory</h3></div></div></div><a id="id1158092" class="indexterm"></a><a id="id1158104" class="indexterm"></a><div class="para">
+ Even though attributes may be successfully synced between Active Directory and FreeIPA, there may still be differences in how Active Directory and FreeIPA define the underlying X.500 object classes. This could lead to differences in how the data are handled in the different LDAP services.
</div><div class="para">
- For example:
- </div><pre class="screen">$ ldapmodify -x -D "cn=directory manager" -w password
+ This section describes the differences in how Active Directory and FreeIPA handle some of the attributes which can be synchronized between the two domains.
+ </div><div class="section" id="Schema_Differences-cn"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Schema_Differences-cn">7.1.3.1. Values for cn Attributes</h4></div></div></div><a id="id660189" class="indexterm"></a><div class="para">
+ In 389 Directory Server, the <em class="parameter"><code>cn</code></em> attribute can be multi-valued, while in Active Directory this attribute must have only a single value. When the FreeIPA <em class="parameter"><code>cn</code></em> attribute is synchronized, then, only one value is sent to the Active Directory peer.
+ </div><div class="para">
+ What this means for synchronization is that,potentially, if a <em class="parameter"><code>cn</code></em> value is added to an Active Directory entry and that value is not one of the values for <em class="parameter"><code>cn</code></em> in FreeIPA, then all of the FreeIPA <em class="parameter"><code>cn</code></em> values are overwritten with the single Active Directory value.
+ </div><div class="para">
+ One other important difference is that Active Directory uses the <em class="parameter"><code>cn</code></em> attribute attribute as its naming attribute, where FreeIPA uses <em class="parameter"><code>uid</code></em>. This means that there is the potential to rename the entry entirely (and accidentally) if the <em class="parameter"><code>cn</code></em> attribute is edited in the FreeIPA. If that <em class="parameter"><code>cn</code></em> change is written over to the Active Directory entry, then the entry is renamed, and the new named entry is written back over to FreeIPA.
+ </div></div><div class="section" id="Schema_Differences-street"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Schema_Differences-street">7.1.3.2. Values for street and streetAddress</h4></div></div></div><a id="id621104" class="indexterm"></a><div class="para">
+ Active Directory uses the attribute <em class="parameter"><code>streetAddress</code></em> for a user or group's postal address; this is the way that 389 Directory Server uses the <em class="parameter"><code>street</code></em> attribute. There are two important differences in the way that Active Directory and FreeIPA use the <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> attributes, respectively:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ In 389 Directory Server, <em class="parameter"><code>streetAddress</code></em> is an alias for <em class="parameter"><code>street</code></em>. Active Directory also has the <em class="parameter"><code>street</code></em> attribute, but it is a separate attribute that can hold an independent value, not an alias for <em class="parameter"><code>streetAddress</code></em>.
+ </div></li><li class="listitem"><div class="para">
+ Active Directory defines both <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> as single-valued attributes, while 389 Directory Server defines <em class="parameter"><code>street</code></em> as a multi-valued attribute, as specified in RFC 4519.
+ </div></li></ul></div><div class="para">
+ Because of the different ways that 389 Directory Server and Active Directory handle <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> attributes, there are two rules to follow when setting address attributes in Active Directory and FreeIPA:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The synchronization process maps <em class="parameter"><code>streetAddress</code></em> in the Active Directory entry to <em class="parameter"><code>street</code></em> in FreeIPA. To avoid conflicts, the <em class="parameter"><code>street</code></em> attribute should not be used in Active Directory.
+ </div></li><li class="listitem"><div class="para">
+ Only one FreeIPA <em class="parameter"><code>street</code></em> attribute value is synced to Active Directory. If the <em class="parameter"><code>streetAddress</code></em> attribute is changed in Active Directory and the new value does not already exist in FreeIPA, then all <em class="parameter"><code>street</code></em> attribute values in FreeIPA are replaced with the new, single Active Directory value.
+ </div></li></ul></div></div><div class="section" id="Schema_Diferences-initials"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Schema_Diferences-initials">7.1.3.3. Constraints on the initials Attribute</h4></div></div></div><a id="id736950" class="indexterm"></a><div class="para">
+ For the <em class="parameter"><code>initials</code></em> attribute, Active Directory imposes a maximum length constraint of six characters, but 389 Directory Server does not have a length limit. If an <em class="parameter"><code>initials</code></em> attribute longer than six characters is added to FreeIPA, the value is trimmed when it is synchronized with the Active Directory entry.
+ </div></div></div></div><div class="section" id="Setting_up_Active_Directory"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_up_Active_Directory">7.2. Setting up Active Directory for Synchronization</h2></div></div></div><div class="para">
+ Synchronizing user accounts alone is enabled within FreeIPA, so all that is necessary is to set up a sync agreement (<a class="xref" href="#Creating_Synchronization_Agreements">Section 7.4.2, “Creating Synchronization Agreements”</a>). To synchronize passwords requires that Active Directory be running in SSL and that the Password Sync Service be installed on each Active Directory domain controller. The Password Sync Service records password changes and synchronizes them, over a secure connection, to the FreeIPA entry.
+ </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Install the Microsoft Certificate System in Enterprise Root Mode. Active Directory will then automatically enroll to retrieve its SSL server certificate.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Make sure that the Active Directory password complexity policies are enabled so that the Password Sync service will run.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Run <code class="filename">secpol.msc</code> from the command line.
+ </div></li><li class="listitem"><div class="para">
+ Select <span class="guimenu"><strong>Security Settings</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Open <span class="guimenuitem"><strong>Account Policies</strong></span>, and then open <span class="guimenuitem"><strong>Password Policy</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Enable the <code class="command">Password must meet complexity requirements</code> option and save.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sync-adpwdpolicy.png" width="700" /></div></div></li></ol></div></li><li class="listitem"><div class="para">
+ If SSL is not already enabled, set up SSL on the Active Directory server. Setting up LDAPS is explained in more detail in the Microsoft knowledgebase at <a href="http://support.microsoft.com/kb/321051">http://support.microsoft.com/kb/321051</a>.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install a certificate authority in the <span class="guilabel"><strong>Windows Components</strong></span> section in <span class="guilabel"><strong>Add/Remove Programs</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Enterprise Root CA</strong></span> option.
+ </div></li><li class="listitem"><div class="para">
+ Reboot the Active Directory server. If IIS web services are running, the CA certificate can be accessed by opening <code class="command">http://</code><span class="emphasis"><em>servername</em></span><code class="command">/certsrv</code>.
+ </div></li><li class="listitem"><div class="para">
+ Set up the Active Directory server to use the SSL server certificate.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create a certificate request <code class="filename">.inf</code>, using the fully-qualified domain name of the Active Directory as the certificate subject. For example:
+ </div><pre class="screen">;----------------- request.inf -----------------
-dn: cn=ipa-winsync,cn=plugins,cn=config
-changetype: modify
-replace: nsds7WindowsReplicaSubtree
-nsds7WindowsReplicaSubtree: CN=People,DC=example,DC=com
+[Version]
-modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
-</pre></div><div class="section" id="Deleting_Synchronization_Agreements"><div class="titlepage"><div><div><h3 class="title" id="Deleting_Synchronization_Agreements">8.4.5. Deleting Synchronization Agreements</h3></div></div></div><div class="para">
- Synchronization can be stopped by deleting the sync agreement which <span class="emphasis"><em>disconnects</em></span> the FreeIPA and Active Directory servers. In the inverse of creating a sync agreement, deleting a sync agreement uses the <code class="command">ipa-replica-manage disconnect</code> command and then the hostname of the Active Directory server.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Delete the sync agreement.
- </div><pre class="screen"># ipa-replica-manage disconnect adserver.example.com</pre></li><li class="listitem"><div class="para">
- Remove the Active Directory CA certificate from the FreeIPA server database:
- </div><pre class="screen"># certutil -D -d /etc/dirsrv/slapd-EXAMPLE.COM/ -n "Imported CA"</pre></li></ol></div></div><div class="section" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures"><div class="titlepage"><div><div><h3 class="title" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">8.4.6. Winsync Agreement Failures</h3></div></div></div><div class="formalpara" id="Winsync_Agreement_Failures-Symptom"><h5 class="formalpara">Creating the sync agreement fails because it cannot connect to the Active Directory server.</h5>
- One of the most common sync agreement failures is that the FreeIPA server cannot connect to the Active Directory server:
-<pre class="screen">"Update failed! Status: [81 - LDAP error: Can't contact LDAP server]
-</pre>
+Signature="$Windows NT$
- </div><div class="para">
- This can occur if the wrong Active Directory CA certificate was specified when the agreement was created. This creates duplicate certificates in the FreeIPA LDAP database (in the <code class="filename">/etc/dirsrv/slapd-DOMAIN/</code> directory) with the name <span class="emphasis"><em>Imported CA</em></span>. This can be checked using <code class="command">certutil</code>:
-<pre class="screen">$ certutil -L -d /etc/dirsrv/slapd-DOMAIN/
+[NewRequest]
-Certificate Nickname Trust Attributes
-SSL,S/MIME,JAR/XPI
+Subject = "CN=ad.server.example.com, O=Engineering, L=Raleigh, S=North Carolina, C=US"
+KeySpec = 1
+KeyLength = 2048
+Exportable = TRUE
+MachineKeySet = TRUE
+SMIME = False
+PrivateKeyArchive = FALSE
+UserProtected = FALSE
+UseExistingKeySet = FALSE
+ProviderName = "Microsoft RSA SChannel Cryptographic Provider"
+ProviderType = 12
+RequestType = PKCS10
+KeyUsage = 0xa0
+
+[EnhancedKeyUsageExtension]
+
+OID=1.3.6.1.5.5.7.3.1
+
+;-----------------------------------------------</pre><div class="para">
+ For more information on the <code class="filename">.inf</code> request file, see the Microsoft documentation, such as <a href="http://technet.microsoft.com/en-us/library/cc783835.aspx">http://technet.microsoft.com/en-us/library/cc783835.aspx</a>.
+ </div></li><li class="listitem"><div class="para">
+ Generate the certificate request.
+ </div><pre class="screen">certreq -new request.inf request.req</pre></li><li class="listitem"><div class="para">
+ Submit the request to the Active Directory CA. For example:
+ </div><pre class="screen">certreq -submit request.req certnew.cer</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ If the command-line tool returns an error message, then use the Web browser to access the CA and submit the certificate request. If IIS is running, then the CA URL is <code class="command">http://</code><span class="emphasis"><em>servername</em></span><code class="command">/certsrv</code>.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Accept the certificate request. For example:
+ </div><pre class="screen">certreq -accept certnew.cer</pre></li><li class="listitem"><div class="para">
+ Make sure that the server certificate is present on the Active Directory server.
+ </div><div class="para">
+ In the <span class="guimenu"><strong>File</strong></span> menu, click <span class="guimenuitem"><strong>Add/Remove</strong></span>, then click <span class="guimenuitem"><strong>Certificates</strong></span> and <span class="guimenuitem"><strong>Personal>Certificates</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Import the CA certificate from Directory Server into Active Directory. Click <span class="guilabel"><strong>Trusted Root CA</strong></span>, then <span class="guilabel"><strong>Import</strong></span>, and browse for the Directory Server CA certificate.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Reboot the domain controller.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Install the Password Sync Service on every domain controller in the Active Directory domain in order to synchronize Windows passwords.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Download the <code class="filename">PassSync.msi</code> file from Red Hat Network and save it to the Active Directory machine.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ There are two PassSync packages available, one for 32-bit Windows servers and one for 64-bit. Make sure to select the appropriate packages for your Windows platform.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Double-click on the <code class="filename">PassSync.msi</code> file to install it.
+ </div></li><li class="listitem"><div class="para">
+ The <span class="application"><strong>Password Sync Setup</strong></span> window appears. Hit <span class="guilabel"><strong>Next</strong></span> to begin installing.
+ </div></li><li class="listitem"><div class="para">
+ Fill in the Directory Server hostname, secure port number, user name (such as <code class="command">cn=sync user,cn=config</code>), the certificate token (password), and the search base (e.g., <code class="command">ou=People,dc=example,dc=com</code>).
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/passsync.png" /></div></div><div class="para">
+ Hit <span class="guibutton"><strong>Next</strong></span>, then <span class="guibutton"><strong>Finish</strong></span> to install Password Sync.
+ </div></li><li class="listitem"><div class="para">
+ Reboot the Windows machine to start Password Sync.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The Windows machine must be rebooted. Without the rebooting, <code class="filename">PasswordHook.dll</code> is not enabled, and password synchronization will not function.
+ </div></div></div></li></ol></div></li></ol></div><div class="para">
+ The first attempt to synchronize passwords, which happened when the Password Sync application is installed, will always fail because of the SSL connection between the Directory Server and Active Directory sync peers. The tools to create the certificate and key databases is installed with the <code class="filename">.msi</code>.
+ </div></div><div class="section" id="password-sync"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="password-sync">7.3. Exempting Active Directory Users from Password Synchronization</h2></div></div></div><div class="para">
+ The passwords in password change operations are still subject to the password policy settings, such as password expiration times. For example, in FreeIPA every password change requires an immediate password reset. While normal user passwords need to be subject to password policies, administrative passwords should be exempt from any password rules. A list of user DNs can be set in the password synchronization configuration that are exempted from the password policy.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The Directory Manager password is always exempt from password policy.
+ </div></div></div><div class="para">
+ Edit the password synchronization entry, <code class="command">cn=ipa_pwd_extop,cn=plugins,cn=config</code>, and add the <em class="parameter"><code>passSyncManagersDNs</code></em> attribute with the name of the user. This attribute is multi-valued. For example:
+ </div><pre class="screen">$ ldapmodify -x -D "cn=Directory Manager" -w secret -h ldap.example.com -p 389
+
+dn: cn=ipa_pwd_extop,cn=plugins,cn=config
+changetype: modify
+add: passSyncManagersDNs
+passSyncManagersDNs: uid=admin,cn=users,cn=accounts,dc=example,dc=com</pre></div><div class="section" id="managing-sync-agmt"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="managing-sync-agmt">7.4. Managing Synchronization Agreements</h2></div></div></div><div class="section" id="exporting-ad-cert"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="exporting-ad-cert">7.4.1. Obtaining the Active Directory CA Certificate</h3></div></div></div><div class="para">
+ The Active Directory CA certificate is required to create the synchronization agreement. To export this certificate from the Active Directory service:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ In <span class="guilabel"><strong>My Network Places</strong></span>, open the CA distribution point. For example, the location on Windows Server 2003 is <code class="filename">C:\WINDOWS\system32\certsrv\CertEnroll\</code>.
+ </div></li><li class="listitem"><div class="para">
+ Double-click the security certificate file (<code class="filename">.crt</code> file) to display the <span class="guilabel"><strong>Certificate</strong></span> dialog box.
+ </div></li><li class="listitem"><div class="para">
+ On the <span class="guilabel"><strong>Details</strong></span> tab, click <span class="guibutton"><strong>Copy to File</strong></span> to start the <span class="application"><strong>Certificate Export Wizard</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Next</strong></span>, and then select <span class="guilabel"><strong>Base-64 encoded X.509 (.CER)</strong></span>.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/ASCII_Cert_Export.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Specify a suitable directory and file name for the exported file. Click <span class="guibutton"><strong>Next</strong></span> to export the certificate, and then click <span class="guibutton"><strong>Finish</strong></span>.
+ </div></li></ol></div></div><div class="section" id="Creating_Synchronization_Agreements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Creating_Synchronization_Agreements">7.4.2. Creating Synchronization Agreements</h3></div></div></div><div class="para">
+ Synchronization agreements are created on the FreeIPA server using the <code class="command">ipa-replica-manage connect</code> command because it creates a <span class="emphasis"><em>connection</em></span> to the Active Directory domain. The options to create the synchronization agreement are listed in <a class="xref" href="#tab.sync-agmt">Table 7.3, “Synchronization Agreement Options”</a>.
+ </div><div class="example" id="ex.adding-sync-agmt"><h6>Example 7.1. Adding a WinSync agreement between an IPA server and an AD server.</h6><div class="example-contents"><pre class="screen">$ ipa-replica-manage connect --winsync --binddn cn=administrator,cn=users,dc=example,dc=com --bindpw secret --passsync secretpwd --cacert /path/to/certfile.cer adserver.example.com -v</pre></div></div><br class="example-break" /><div class="table" id="tab.sync-agmt"><h6>Table 7.3. Synchronization Agreement Options</h6><div class="table-contents"><table summary="Synchronization Agreement Options" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Option
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td>
+ --winsync
+ </td><td>
+ Identifies this as a synchronization agreement.
+ </td></tr><tr><td>
+ --binddn
+ </td><td>
+ Gives the full user DN of the synchronization identity. This is the user DN that the FreeIPA LDAP server uses to bind to Active Directory. This user must exist in the Active Directory domain and must have read, search, and write permissions on the Active Directory subtree.
+ </td></tr><tr><td>
+ --bindpw
+ </td><td>
+ Gives the password for the sync user.
+ </td></tr><tr><td>
+ --passsync
+ </td><td>
+ Gives the password for the Windows user account which is involved in synchronization.
+ </td></tr><tr><td>
+ --cacert
+ </td><td>
+ Gives the full path and file name of the Active Directory CA certificate. This certificate is exported in <a class="xref" href="#exporting-ad-cert">Section 7.4.1, “Obtaining the Active Directory CA Certificate”</a>.
+ </td></tr><tr><td>
+ --win-subtree
+ </td><td>
+ Gives the DN of the Windows subtree containing the users to synchronize. The default value is <code class="systemitem">cn=Users,$SUFFIX</code>.
+ </td></tr><tr><td>
+ <span class="emphasis"><em>AD_server_name</em></span>
+ </td><td>
+ Gives the hostname of the Active Directory domain controller.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Modifying_Synchronization_Agreements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Modifying_Synchronization_Agreements">7.4.3. Changing the Behavior for Syncing User Account Attributes</h3></div></div></div><div class="para">
+ When the sync agreement is created, it has certain default behaviors defined for how the synchronization process handled the user account attributes during synchronization. The types of behaviors are things like how to handle lockout attributes or how to handle different DN formats. This behavior can be changed by editing the synchronization agreement. The list of attribute-related parameters are in <a class="xref" href="#tab.sync-agmt-attrs">Table 7.4, “Synced Attribute Settings”</a>.
+ </div><div class="para">
+ The sync agreement exists as a special plug-in entry in the LDAP server and each attribute behavior is set through an LDAP attribute. To change the sync behavior, use the <code class="command">ldapmodify</code> command to modify the LDAP server entry directly.
+ </div><div class="para">
+ For example, account lockout attributes are synchronized between FreeIPA and Active Directory by default, but this can be disabled by editing the <em class="parameter"><code>ipaWinSyncAcctDisable</code></em> attribute. (Changing this means that if an account is disabled in Active Directory, it is still active in FreeIPA and vice versa.)
+ </div><pre class="screen">$ ldapmodify -x -D "cn=directory manager" -w password
+
+dn: cn=ipa-winsync,cn=plugins,cn=config
+changetype: modify
+replace: ipaWinSyncAcctDisable
+ipaWinSyncAcctDisable: none
+
+modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
+</pre><div class="table" id="tab.sync-agmt-attrs"><h6>Table 7.4. Synced Attribute Settings</h6><div class="table-contents"><table summary="Synced Attribute Settings" border="1"><colgroup><col class="col1" width="33%" /><col class="col2" width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ Parameter
+ </th><th>
+ Description
+ </th><th>
+ Possible Values
+ </th></tr></thead><tbody><tr><td colspan="2">
+ <span class="bold bold"><strong>General User Account Parameters</strong></span>
+ </td><td class="auto-generated"> </td></tr><tr><td>
+ ipaWinSyncNewEntryFilter
+ </td><td>
+ Sets the search filter to use to find the entry which contains the list of object classes to add to new user entries.
+ </td><td>
+ The default is <code class="command">(cn=ipaConfig)</code>.
+ </td></tr><tr><td>
+ ipaWinSyncNewUserOCAttr
+ </td><td>
+ Sets the attribute in the configuration entry which actually contains the list of object classes to add to new user entries.
+ </td><td>
+ The default is <code class="command">ipauserobjectclasses</code>.
+ </td></tr><tr><td>
+ ipaWinSyncHomeDirAttr
+ </td><td>
+ Identifies which attribute in the entry contains the default location of the POSIX home directory.
+ </td><td>
+ The default is <code class="command">ipaHomesRootDir</code>.
+ </td></tr><tr><td>
+ ipaWinSyncUserAttr
+ </td><td>
+ Sets an additional attribute with a specific value to add to Active Directory users when they are synced over from the Active Directory domain. If the attribute is multi-valued, then it can be set multiple times, and the sync process adds all of the values to the entry.
+ <div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This only sets the attribute value if the entry does not already have that attribute present. If the attribute is present, then the entry's value is used when the Active Directory entry is synced over.
+ </div></div></div>
+
+ </td><td>
+ ipaWinSyncUserAttr: <span class="emphasis"><em>attributeName attributeValue</em></span>
+ </td></tr><tr><td>
+ ipaWinSyncUserFlatten
+ </td><td>
+ Sets whether to normalize the DN of Active Directory entries to conform with the FreeIPA directory structure. In FreeIPA, all users are stored under the <code class="command">cn=users,cn=accounts,$SUFFIX</code> entry, but Active Directory can have more branches in its directory, which can result in DNs like <code class="command">cn=John Smith,ou=Development,ou=Engineering,cn=users,dc=example,dc=com</code>. <span class="emphasis"><em>Flattening</em></span> the DN discards any additional intervening organizational units in the Active Directory DN and creating a simple DN on the FreeIPA side.
+ <div class="para">
+ Any <em class="parameter"><code>ou</code></em> attributes are stored in the FreeIPA user entry.
+ </div>
+
+ </td><td>
+ true | false
+ </td></tr><tr><td>
+ ipaWinSyncForceSync
+ </td><td>
+ Sets whether to check existing FreeIPA users which match an existing Active Directory user should be automatically edited so they can be synchronized. If a FreeIPA user account has a <em class="parameter"><code>uid</code></em> parameter which is identical to the <em class="parameter"><code>samAccountName</code></em> in an existing Active Directory user, then that account is <span class="emphasis"><em>not</em></span> synced by default. This attribute tells the sync service to add the <em class="parameter"><code>ntUser</code></em> and <em class="parameter"><code>ntUserDomainId</code></em> to the FreeIPA user entries automatically, which allows them to be synchronized.
+ </td><td>
+ true | false
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>User Account Lock Parameters</strong></span>
+ </td><td class="auto-generated"> </td></tr><tr><td>
+ ipaWinSyncAcctDisable
+ </td><td>
+ Sets which way to synchronize account lockout attributes. It is possible to control which account lockout settings are in effect. For example, <code class="command">to_ad</code> means that when account lockout attribute is set in FreeIPA, its value is synced over to Active Directory and overrides the local Active Directory value. By default, account lockout attributes are synced from both domains.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ both (default)
+ </div></li><li class="listitem"><div class="para">
+ to_ad
+ </div></li><li class="listitem"><div class="para">
+ to_ds
+ </div></li><li class="listitem"><div class="para">
+ none
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ ipaWinSyncInactivatedFilter
+ </td><td>
+ Sets the search filter to use to find the DN of the group used to hold inactivated (disabled) users. This does not need to be changed in most deployments.
+ </td><td>
+ The default is <code class="command">(&(cn=inactivated)(objectclass=groupOfNames))</code>.
+ </td></tr><tr><td>
+ ipaWinSyncActivatedFilter
+ </td><td>
+ Sets the search filter to use to find the DN of the group used to hold activate users. This does not need to be changed in most deployments.
+ </td><td>
+ The default is <code class="command">(&(cn=activated)(objectclass=groupOfNames))</code>.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Group Parameters</strong></span>
+ </td><td class="auto-generated"> </td></tr><tr><td>
+ ipaWinSyncDefaultGroupAttr
+ </td><td>
+ Sets the attribute in the new user account to reference to see what the default group for the user is. The group name in the entry is then used to find the <em class="parameter"><code>gidNumber</code></em> for the user account.
+ </td><td>
+ The default is <code class="command">ipaDefaultPrimaryGroup</code>.
+ </td></tr><tr><td>
+ ipaWinSyncDefaultGroupFilter
+ </td><td>
+ Sets the search filter to map the group name to the POSIX <em class="parameter"><code>gidNumber</code></em>.
+ </td><td>
+ The default is <code class="command">(&(gidNumber=*)(objectclass=posixGroup)(cn=</code><span class="emphasis"><em>groupAttr_value</em></span><code class="command">))</code>.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Realm Parameters</strong></span>
+ </td><td class="auto-generated"> </td></tr><tr><td>
+ ipaWinSyncRealmAttr
+ </td><td>
+ Sets the attribute which contains the realm name in the realm entry.
+ </td><td>
+ The default is <em class="parameter"><code>cn</code></em>.
+ </td></tr><tr><td>
+ ipaWinSyncRealmFilter
+ </td><td>
+ Sets the search filter to use to find the entry which contains the FreeIPA realm name.
+ </td><td>
+ The default is <code class="command">(objectclass=krbRealmContainer)</code>.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="changing-subtree"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="changing-subtree">7.4.4. Changing the Synchronized Windows Subtree</h3></div></div></div><div class="para">
+ Creating a synchronization agreement automatically sets the two subtrees to use as the synchronized user database. In FreeIPA, the default is <code class="command">cn=users,cn=accounts,$SUFFIX</code>, and for Active Directory, the default is <code class="command">CN=Users,$SUFFIX</code>.
+ </div><div class="para">
+ The value for the Active Directory subtree can be set to a non-default value when the sync agreement is created by using the <code class="option">--win-subtree</code> option. After the agreement is created, the Active Directory subtree can be changed by using the <code class="command">ldapmodify</code> command to edit the <em class="parameter"><code>nsds7WindowsReplicaSubtree</code></em> value in the sync agreement entry.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen">$ ldapmodify -x -D "cn=directory manager" -w password
+
+dn: cn=ipa-winsync,cn=plugins,cn=config
+changetype: modify
+replace: nsds7WindowsReplicaSubtree
+nsds7WindowsReplicaSubtree: CN=People,DC=example,DC=com
+
+modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
+</pre></div><div class="section" id="Deleting_Synchronization_Agreements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Deleting_Synchronization_Agreements">7.4.5. Deleting Synchronization Agreements</h3></div></div></div><div class="para">
+ Synchronization can be stopped by deleting the sync agreement which <span class="emphasis"><em>disconnects</em></span> the FreeIPA and Active Directory servers. In the inverse of creating a sync agreement, deleting a sync agreement uses the <code class="command">ipa-replica-manage disconnect</code> command and then the hostname of the Active Directory server.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Delete the sync agreement.
+ </div><pre class="screen"># ipa-replica-manage disconnect adserver.example.com</pre></li><li class="listitem"><div class="para">
+ Remove the Active Directory CA certificate from the FreeIPA server database:
+ </div><pre class="screen"># certutil -D -d /etc/dirsrv/slapd-EXAMPLE.COM/ -n "Imported CA"</pre></li></ol></div></div><div class="section" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">7.4.6. Winsync Agreement Failures</h3></div></div></div><div class="formalpara" id="Winsync_Agreement_Failures-Symptom"><h5 class="formalpara">Creating the sync agreement fails because it cannot connect to the Active Directory server.</h5>
+ One of the most common sync agreement failures is that the FreeIPA server cannot connect to the Active Directory server:
+<pre class="screen">"Update failed! Status: [81 - LDAP error: Can't contact LDAP server]
+</pre>
+
+ </div><div class="para">
+ This can occur if the wrong Active Directory CA certificate was specified when the agreement was created. This creates duplicate certificates in the FreeIPA LDAP database (in the <code class="filename">/etc/dirsrv/slapd-DOMAIN/</code> directory) with the name <span class="emphasis"><em>Imported CA</em></span>. This can be checked using <code class="command">certutil</code>:
+<pre class="screen">$ certutil -L -d /etc/dirsrv/slapd-DOMAIN/
+
+Certificate Nickname Trust Attributes
+SSL,S/MIME,JAR/XPI
+
+CA certificate CTu,u,Cu
+Imported CA CT,,C
+Server-Cert u,u,u
+Imported CA CT,,C</pre>
+
+ </div><div class="para">
+ To resolve this issue, clear the certificate database:
+<pre class="screen"># certutil -d /etc/dirsrv/slapd-DOMAIN-NAME -D -n "Imported CA"</pre>
+
+ </div><div class="para">
+ This deletes the CA certificate from the LDAP database.
+ </div><div class="formalpara"><h5 class="formalpara" id="id733374">There are errors saying passwords aren't being synced because it says the entry exists</h5>
+ For some entries in the user database, there may be an informational error message that the password is not being reset because the entry already exists:
+ </div><pre class="screen">"Windows PassSync entry exists, not resetting password"</pre><div class="para">
+ This is not an error. This message occurs when an exempt user, the Password Sync user, it not being changed. The Password Sync user is the operational user which is used by the service to change the passwords in FreeIPA.
+ </div></div></div><div class="section" id="Configuring_Microsoft_Windows"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_Microsoft_Windows">7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</h2></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ FreeIPA does <span class="emphasis"><em>not</em></span> support Microsoft Windows client authentication.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Download the MIT Kerberos 3.x package for Windows.
+ </div></li><li class="listitem"><div class="para">
+ Run the <code class="filename">kfw-3.x-exe</code> file to launch the MIT Kerberos Installation Wizard.
+ </div></li><li class="listitem"><div class="para">
+ Read and accept the license agreement.
+ </div></li><li class="listitem"><div class="para">
+ Install the KfW client. All other components are optional.
+ </div></li><li class="listitem"><div class="para">
+ Accept the default destination path.
+ </div></li><li class="listitem"><div class="para">
+ Select <span class="guilabel"><strong>Download from web path</strong></span>, and enter the URL to the FreeIPA server. For example:
+ </div><pre class="programlisting">http://ipaserver.example.com/ipa/config/</pre></li><li class="listitem"><div class="para">
+ Select <span class="guilabel"><strong>Autostart the Network Identity Manager each time you login to Windows</strong></span>.
+ </div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Install</strong></span> to begin the installation. When the installation is complete, click <span class="guibutton"><strong>Finish</strong></span> to exit the Wizard.
+ </div></li><li class="listitem"><div class="para">
+ Edit the hosts file and add the FreeIPA server. For example:
+ </div><pre class="programlisting">1.2.3.4 ipaserver.example.com ipaserver</pre><div class="para">
+ Depending on the version of Windows, the HOSTS file could be located in different directories.
+ </div></li></ol></div><a id="id593543" class="indexterm"></a><a id="id576034" class="indexterm"></a><a id="id576045" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ One potential problem is that a ticket is not generated by Kerberos on Windows. Windows can use multiple ticket caches with MIT Kerberos. This can create odd scenarios, where it is possible to authenticate against FreeIPA's domain in the command line, but not to open the web UI.
+ </div><div class="para">
+ MIT Kerberos for Windows provides some debugging tools which can be used to troubleshoot Windows Kerberos problems, available at <a href="http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2">http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2</a>.
+ </div></div></div></div></div><div xml:lang="en-US" class="chapter" id="Working_with_DNS" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 8. Identity: Managing DNS</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-dns">8.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#enabling-dns">8.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#bind-dyndb-ldap-config">8.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="#changing-forwarder">8.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones">8.5. Adding DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones-ui">8.5.1. Adding DNS Zones from the Web UI</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones-cmd">
8.5.2. Adding DNS Zones from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#modifying-dns-zones">8.6. Modifying DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#editing-dns-zone-ui">8.6.1. Editing the Zone Configuration in the Web UI</a></span></dt><dt><span class="section"><a href="#editing-dns-zone-cmd">8.6.2. Editing the Zone Configuration in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates">8.7. Enabling Dynamic DNS Updates</a></span></dt><dd><dl><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">8.7.1. Enabling Dynamic DNS Updates in the Web UI</a></span></dt><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd">8.7.2. Enabling Dynamic DNS Updates in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#enabling-zones">8.8. Enabling and Disabling Zones</a></span></
dt><dd><dl><dt><span class="section"><a href="#enabling-zones-ui">8.8.1. Disabling Zones in the Web UI</a></span></dt><dt><span class="section"><a href="#enabling-zones-cmd">8.8.2. Disabling Zones in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">8.9. Adding Records to DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-dns-records-ui">8.9.1. Adding DNS Resource Records from the Web UI</a></span></dt><dt><span class="section"><a href="#adding-dns-records-cmd">8.9.2. Adding DNS Resource Records from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">8.10. Deleting Records from DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui">8.10.1. Deleting Records with the Web UI</a></span></dt><dt><span class="section"><a href="#Managing
_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd">8.10.2. Deleting Records with the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#dns-resolve">8.11. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></div><div class="para">
+ If the FreeIPA server was installed with DNS configured, then all of the DNS entries for the domain — host entries, locations, records — can be managed using the FreeIPA tools.
+ </div><div class="section" id="about-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-dns">8.1. About DNS in FreeIPA</h2></div></div></div><div class="para">
+ DNS is one of the services that can be configured and maintained by the FreeIPA domain. DNS is critical to the performance of the FreeIPA domain; DNS is used for the Kerberos services and SSL connections for all servers and clients and for connections to domain services like LDAP.
+ </div><div class="para">
+ While FreeIPA can use an external DNS service, there is a lot more flexibility and control over FreeIPA — DNS interactions when the DNS service is configured within the domain. For example, DNS records and zones can be managed within the domain using FreeIPA tools, and clients can update their own DNS records dynamically. When a host is added to FreeIPA, a DNS record is automatically created in FreeIPA's DNS service for that host machine.
+ </div><div class="para">
+ FreeIPA stores all DNS information as LDAP entries. Every resource record for each machine is stored for the domain. For example, the client1 resource has three IPv4 (A) records and one IPv6 (AAAA) record:
+ </div><pre class="screen">dn: idnsname=client1,idnsname=example.com,cn=dns,dc=example,dc=com
+idnsname: client1
+arecord: 10.0.0.1
+arecord: 10.0.0.2
+arecord: 10.0.0.3
+aaaarecord: fc00::1
+objectclass: top
+objectclass: idnsrecord</pre><div class="para">
+ The schema used to define the DNS entries is in the <code class="filename">/usr/share/ipa/60basev2.ldif</code> schema file.
+ </div><a id="id1547223" class="indexterm"></a><a id="id701585" class="indexterm"></a><div class="para">
+ The BIND service communicates with the Directory Server using the system <code class="filename">bind-dyndb-ldap</code> plug-in. When FreeIPA is configured to manage DNS (<a class="xref" href="#enabling-dns">Section 8.2, “Configuring DNS in FreeIPA”</a>), FreeIPA creates a <code class="command">dynamic-db</code> configuration section in the <code class="filename">/etc/named.conf</code> file for the BIND service. This configures the <code class="filename">bind-dyndb-ldap</code> plug-in for the BIND (<code class="systemitem">named</code>) service.
+ </div><div class="para">
+ When this plug-in is properly configured, it delivers the DNS records from the Directory Server to the <code class="systemitem">named</code> service. The configuration can be changed to adapt the behavior of the plug-in and, therefore, the LDAP-BIND interactions.
+ </div><div class="para">
+ The <code class="command">ipa</code> command has several subcommands to manage the DNS service.
+ </div><div class="table" id="tab.sns-tools"><h6>Table 8.1. DNS Management Tools</h6><div class="table-contents"><table summary="DNS Management Tools" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Command
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td>
+ dns-resolve
+ </td><td>
+ Resolves a hostname to see if it exists within the FreeIPA domain.
+ </td></tr><tr><td>
+ dnsrecord-add, dnsrecord-mod, and dnsrecord-del
+ </td><td>
+ Adds, edits, and deletes DNS records.
+ </td></tr><tr><td>
+ dnsrecord-find and dnsrecord-show
+ </td><td>
+ Finds and displays DNS records.
+ </td></tr><tr><td>
+ dnszone-add and dnszone-del
+ </td><td>
+ Adds and deletes DNS SOA records.
+ </td></tr><tr><td>
+ dnszone-enable and dnszone-disable
+ </td><td>
+ Enables and disables DNS zones. These tools control whether a DNS zone is active and available without deleting the configuration entries in the LDAP directory.
+ </td></tr><tr><td>
+ dnszone-find and dnszone-show
+ </td><td>
+ Finds and displays DNS zone configuration.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="enabling-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="enabling-dns">8.2. Configuring DNS in FreeIPA</h2></div></div></div><div class="para">
+ DNS can be configured as part of the FreeIPA server installation, simply by using the <code class="option">--setup-dns</code> option. If DNS is not configured then, it can be configured later using the <code class="command">ipa-dns-install</code> command. For example:
+ </div><pre class="screen">ipa-dns-install -p secret --ip-address=1.2.34.56 --no-forwarders --zone-notif</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <code class="option">-p</code> gives the password for the Directory Manager user in the 389 Directory Server. All of the DNS entries are stored in the LDAP directory, so this directory must be accessed to add the DNS configuration.
+ </div></li><li class="listitem"><div class="para">
+ <code class="option">--ip-address</code> gives the IP address for the master DNS server.
+ </div></li><li class="listitem"><div class="para">
+ <code class="option">--no-forwarders</code> means that there are no forwarders used with the DNS service, only root servers. Alternatively, a comma-separated list of forwarders can be given, using the <code class="option">--forwarders</code> option.
+ </div></li><li class="listitem"><div class="para">
+ Reverse DNS is configured automatically. It is possible to disable reverse DNS by using the <code class="option">--no-reverse</code> option.
+ </div></li><li class="listitem"><div class="para">
+ The FreeIPA server can actively check to see when new DNS zones are added and to update its DNS server accordingly. This is enabled with the <code class="option">--zone-refresh</code> option, which sets the polling interval in seconds.
+ </div></li><li class="listitem"><div class="para">
+ Similar to refreshing the zones, the FreeIPA server can leave a persistent search open with its Directory Server and capture any new zone changes immediately. This is enabled with the <code class="option">--zone-notif</code> option.
+ </div></li></ul></div></div><div class="section" id="bind-dyndb-ldap-config"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="bind-dyndb-ldap-config">8.3. Configuring the bind-dyndb-ldap Plug-in</h2></div></div></div><div class="para">
+ The <code class="filename">bind-dyndb-ldap</code> system plug-in contains a DNS record cache for zones and a history of successful DNS resolutions. Maintaining the cache improves lookup performance in the Directory Server because it is not necessary to query the directory services every time there is a new DNS request.
+ </div><div class="para">
+ When this plug-in is installed and FreeIPA is configured to manage DNS, then a new configuration section is added to the plug-in configuration.
+ </div><div class="example" id="ex.bind-dyndb-ldap"><h6>Example 8.1. Default dynamic-db Configuration</h6><div class="example-contents"><pre class="screen">dynamic-db "ipa" {
+ library "ldap.so";
+ arg "uri ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket";
+ arg "base cn=dns, dc=example,dc=com";
+ arg "fake_mname server.example.com.";
+ arg "auth_method sasl";
+ arg "sasl_mech GSSAPI";
+ arg "sasl_user DNS/server.example.com";
+};
+</pre></div></div><br class="example-break" /><div class="para">
+ This configuration uses implied default values for <span class="emphasis"><em>other</em></span> plug-in behaviors, like how long it maintains the cache. The assumed, default configuration can be changed by adding arguments to the <code class="command">dynamic-db "ipa"</code> entry.
+ </div><pre class="screen">arg "<em class="replaceable"><code>argument value</code></em>";</pre><div class="para">
+ The additional parameters are listed in <a class="xref" href="#tab.bind-dyndb-ldap-param">Table 8.2, “Additional bind-dyndb-ldap Configuration Parameters”</a>.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Both cache updates and new zone detection are usually done when the name service configuration is reloaded:
+ </div><pre class="screen"># rndc reload</pre></div></div><div class="para">
+ To improve DNS performance, it may be necessary to change the cache setting. By default, DNS records are kept in cache and considered valid for 120 seconds. This means that if a DNS record changes, it will not (necessarily) be propagated to the name server for up to 120 seconds. If the Directory Server has a high traffic volume or if records do not change frequently, then the cache time can be increased to improve performance by adding the <em class="parameter"><code>cache_ttl</code></em> parameter.
+ </div><pre class="screen">dynamic-db "ipa" {
+...
+ arg "cache_ttl 1800";
+};</pre><div class="para">
+ The other configurable behavior defines how the BIND service receives updates about new zones. The DNS service receives its information through the <code class="systemitem">bind-dyndb-ldap</code> plug-in. The plug-in resolves only zones were configured and enabled in the Directory Server when the name server started. When the name service restarts, the plug-in reloads its configuration and identifies any new zones. However, the plug-in can be used to search for zone changes actively either by refreshing the zone data on a schedule or by keeping a persistent connection open to the Directory Server and immediately catching any changes.
+ </div><div class="para">
+ Periodically checking for new zones is the same as <span class="emphasis"><em>refreshing</em></span> the zone configuration. This is set in the <em class="parameter"><code>zone_refresh</code></em> argument.
+ </div><pre class="screen">dynamic-db "ipa" {
+...
+ arg "zone_refresh 30";
+};</pre><div class="para">
+ Alternatively, the plug-in can maintain an open connection to the server through a <span class="emphasis"><em>persistent search</em></span>. Persistent searches provide immediate notification of changes, unlike polling, and maintain a local cache of the configuration data. However, there can be some performance issues related to persistent searches, which are covered in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/persistent-search.html">Directory Server Administrator's Guide</a>.
+ </div><div class="para">
+ Persistent searches are disabled by default but can be enabled in the <em class="parameter"><code>psearch</code></em> argument:
+ </div><pre class="screen">dynamic-db "ipa" {
+...
+ arg "psearch yes";
+};</pre><div class="table" id="tab.bind-dyndb-ldap-param"><h6>Table 8.2. Additional bind-dyndb-ldap Configuration Parameters</h6><div class="table-contents"><table summary="Additional bind-dyndb-ldap Configuration Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ Parameter
+ </th><th>
+ Description
+ </th><th>
+ Default Value
+ </th></tr></thead><tbody><tr><td>
+ cache_ttl
+ </td><td>
+ Checks the DNS configuration in the Directory Server for new zones.
+ </td><td>
+ 120 (seconds)
+ </td></tr><tr><td>
+ zone_refresh
+ </td><td>
+ Checks frequency, in seconds, that the server checks the DNS configuration in the Directory Server for new zones.
+ </td><td>
+ 60 (seconds)
+ </td></tr><tr><td>
+ psearch
+ </td><td>
+ Enables persistent searches for the Directory Server so the BIND service immediately receives an update notification when a new DNS zone is added.
+ </td><td>
+ no
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="changing-forwarder"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="changing-forwarder">8.4. Changing Recursive Queries Against Forwarders</h2></div></div></div><div class="para">
+ The <code class="command">ipa-client-install</code> script sets a configuration statement in the <code class="filename">/etc/named.conf</code> file that allows name resolution against hosts that are outside the FreeIPA DNS domain. (This requires that the FreeIPA server be set up with DNS configured and with forwarders configured.) What this means is that any host is permitted to issue recursive queries against configured forwarders.
+ </div><div class="para">
+ This behavior can be changed by changed the <code class="command">allow-recursion</code> statement.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <code class="filename">/etc/named.conf</code> file.
+ </div></li><li class="listitem"><div class="para">
+ Reset the <code class="command">allow-recursion</code> statement. This is set to <code class="command">any</code> by default, which allows all hosts to resolve names against all forwarders.
+ </div><pre class="screen"> forward first;
+ forwarders { 10.16.36.29; };
+ <strong class="userinput"><code>allow-recursion { any; };</code></strong></pre></li><li class="listitem"><div class="para">
+ Restart the <code class="command">named</code> service.
+ </div><pre class="screen">service named restart</pre></li></ol></div><div class="para">
+ The name server documentation has more details on editing configuration statements.
+ </div></div><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones">8.5. Adding DNS Zones</h2></div></div></div><a id="id917100" class="indexterm"></a><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones-ui">8.5.1. Adding DNS Zones from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of DNS zones.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Fill in the information about the new DNS zone. The <span class="guilabel"><strong>Zone Name</strong></span> is required; this is the actual domain name. The other information about the administrator email and the authoritative name server are optional.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the DNS zone page. In the <span class="guilabel"><strong>Settings</strong></span> tab, it is possible to reset the default zone configuration to enable dynamic binds (<a class="xref" href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">Section 8.7.1, “Enabling Dynamic DNS Updates in the Web UI”</a>) or change other default records information (<a class="xref" href="#editing-dns-zone-ui">Section 8.6.1, “Editing the Zone Configuration in the Web UI”</a>). It is also possible to begin adding new DNS resource records (<a class="xref" href="#adding-dns-records-ui">Section 8.9.1, “Adding DNS Resource Records from the Web UI”</a>) in the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li></ol></div></div><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones-cmd">8.5.2. Adding DNS Zones from the Command Line</h3></div></div></div><div class="para">
+ The <code class="command">ipa dnszone-add</code> command add a new zone to the DNS domain. At a minimum, this requires the name of the new subdomain:
+ </div><pre class="screen">$ ipa dnszone-add <em class="replaceable"><code>domainName</code></em></pre><div class="para">
+ If the name is not given, the script prompts for it. Other command-line options can also be passed with the <code class="command">ipa dnszone-add</code> command; these are described in .
+ </div><div class="para">
+ To add a zone entry:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add the new zone. For example:
+<pre class="screen">$ ipa dnszone-add newserver.example.com --admin-email=admin at example.com --minimum=3000 --allow-dynupdate</pre>
+
+ </div></li><li class="listitem"><div class="para">
+ Reload the name service.
+<pre class="screen"># rndc reload</pre>
+
+ </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ To make new zone records immediately resolvable without restarting the name service, enable persistent searches with the <code class="systemitem">named</code> service or configure the BIND service to poll the Directory Server automatically for zone changes. See <a class="xref" href="#bind-dyndb-ldap-config">Section 8.3, “Configuring the bind-dyndb-ldap Plug-in”</a>.
+ </div></div></div></li></ol></div></div></div><div class="section" id="modifying-dns-zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="modifying-dns-zones">8.6. Modifying DNS Zones</h2></div></div></div><div class="para">
+ A zone is created with a certain amount of configuration, set to default values.
+ </div><div class="example" id="ex.dns-zone-entry"><h6>Example 8.2. Default DNS Zone Entry Settings</h6><div class="example-contents"><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
+ idnsname: example.com
+ idnssoamname: server.example.com.
+ idnssoarname: root.server.example.com.
+ idnssoaserial: 2011130701
+ idnssoarefresh: 3600
+ idnssoaretry: 900
+ idnssoaexpire: 1209600
+ idnssoaminimum: 3600
+ idnsupdatepolicy: grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA;
+ idnszoneactive: TRUE
+ idnsallowdynupdate: TRUE
+ nsrecord: server.example.com.
+ objectclass: top
+ objectclass: idnsrecord
+ objectclass: idnszone
+</pre></div></div><br class="example-break" /><div class="para">
+ All of the possible zone settings are listed in <a class="xref" href="#tab.zone-attr">Table 8.3, “Zone Attributes”</a>. Along with setting the actual information for the zone, the settings define how the DNS server handles the <span class="emphasis"><em>start of authority</em></span> (SOA) record entries and how it updates its records from the DNS name server.
+ </div><div class="table" id="tab.zone-attr"><h6>Table 8.3. Zone Attributes</h6><div class="table-contents"><table summary="Zone Attributes" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ Attribute
+ </th><th>
+ Command-Line Option
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td>
+ Zone name
+ </td><td>
+ --name
+ </td><td>
+ Sets the name of the zone.
+ </td></tr><tr><td>
+ Authoritative nameserver
+ </td><td>
+ --name-server
+ </td><td>
+ Sets the fully-qualified domain name of the DNS name server.
+ </td></tr><tr><td>
+ Administrator e-mail address
+ </td><td>
+ --admin-email
+ </td><td>
+ Sets the email address to use for the zone administrator. This defaults to the root account on the host.
+ </td></tr><tr><td>
+ SOA serial
+ </td><td>
+ --serial
+ </td><td>
+ Sets a version number for the SOA record file.
+ </td></tr><tr><td>
+ SOA refresh
+ </td><td>
+ --refresh
+ </td><td>
+ Sets the interval, in seconds, for a secondary DNS server to wait before requesting updates from the primary DNS server.
+ </td></tr><tr><td>
+ SOA retry
+ </td><td>
+ --retry
+ </td><td>
+ Sets the time, in seconds, to wait before retrying a failed refresh operation.
+ </td></tr><tr><td>
+ SOA expire
+ </td><td>
+ --expire
+ </td><td>
+ Sets the time, in seconds, that a secondary DNS server will try to perform a refresh update before ending the operation attempt.
+ </td></tr><tr><td>
+ SOA minimum
+ </td><td>
+ --minimum
+ </td><td>
+ Sets the minimum amount of time, in seconds, that data are kept in cache.
+ </td></tr><tr><td>
+ SOA time to live
+ </td><td>
+ --ttl
+ </td><td>
+ Sets the maximum time, in seconds, that information is kept in the data cache.
+ </td></tr><tr><td>
+ SOA class
+ </td><td>
+ --class
+ </td><td>
+ Sets the type of record. This is almost always IN, which stands for Internet.
+ </td></tr><tr><td>
+ BIND update policy
+ </td><td>
+ --update-policy
+ </td><td>
+ Sets the permissions allowed to clients in the DNS zone.
+ </td></tr><tr><td>
+ Dynamic update
+ </td><td>
+ --allow-dynupdate
+ </td><td>
+ Enables dynamic updates to DNS records for clients.
+ </td></tr><tr><td>
+ Name server
+ </td><td>
+ --ip-address
+ </td><td>
+ Adds the DNS name server by its IP address.
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="editing-dns-zone-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="editing-dns-zone-ui">8.6.1. Editing the Zone Configuration in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Change any of the DNS zone settings. The full list of attributes is described in <a class="xref" href="#tab.zone-attr">Table 8.3, “Zone Attributes”</a>. There are some common attributes to change:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Authoritative name server</em></span>, the fully-qualified domain name of the DNS name server.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Dynamic update</em></span>, to enable dynamic updates to DNS records for clients.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>SOA refresh</em></span>, the interval, in seconds, for a secondary DNS server to wait before requesting updates from the primary DNS server.
+ </div></li></ul></div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-settings.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the settings page.
+ </div></li></ol></div></div><div class="section" id="editing-dns-zone-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="editing-dns-zone-cmd">8.6.2. Editing the Zone Configuration in the Command Line</h3></div></div></div><div class="para">
+ The zone can be created with additional attributes and values different from the default by passing additional options with the <code class="command">dnszone-add</code> command. Likewise, attributes can be added or modified in the zone entry by passing the same attribute options with the <code class="command">dnszone-mod</code> command. These are listed in <a class="xref" href="#tab.zone-attr">Table 8.3, “Zone Attributes”</a>.
+ </div><div class="para">
+ If an attribute does not exist in the DNS zone entry, than the <code class="command">dnszone-mod</code> command adds the attribute. If the attribute exists, then it overwrites the current value with the specified value.
+ </div><div class="para">
+ For example, to set a time to live for SOA records:
+ </div><pre class="screen">$ ipa dnszone-mod server.example.com --ttl=1800</pre><div class="para">
+ This adds a new attribute to the DNS zone entry:
+ </div><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
+ idnsname: example.com
+ idnssoamname: server.example.com.
+ idnssoarname: root.server.example.com.
+ idnssoaserial: 2011130701
+ idnssoarefresh: 3600
+ idnssoaretry: 900
+ idnssoaexpire: 1209600
+ idnssoaminimum: 3600
+ <strong class="userinput"><code>dnsttl: 1800</code></strong>
+ idnsupdatepolicy: grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA;
+ idnszoneactive: TRUE
+ idnsallowdynupdate: TRUE
+ nsrecord: server.example.com.
+ objectclass: top
+ objectclass: idnsrecord
+ objectclass: idnszone
+</pre></div></div><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates">8.7. Enabling Dynamic DNS Updates</h2></div></div></div><a id="id820442" class="indexterm"></a><div class="para">
+ Dynamic DNS updates are not enabled by default for new DNS zones in FreeIPA. If dynamic updates are not allowed, then it may not be possible for the <code class="command">ipa-client-install</code> script to join a client to the domain because it cannot add a DNS record pointing to the new client.
+ </div><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">8.7.1. Enabling Dynamic DNS Updates in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll down to the <span class="guilabel"><strong>Dynamic update</strong></span> field, and set the value to TRUE.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-dynamic.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the settings page.
+ </div></li></ol></div></div><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd">8.7.2. Enabling Dynamic DNS Updates in the Command Line</h3></div></div></div><div class="para">
+ To allow dynamic updates to the DNS zones, set the <code class="option">--allow-dynupdate</code> option.
+ </div><pre class="screen">$ ipa dnszone-mod server.example.com --allow-dynupdate</pre></div></div><div class="section" id="enabling-zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="enabling-zones">8.8. Enabling and Disabling Zones</h2></div></div></div><a id="id1555716" class="indexterm"></a><div class="para">
+ Active zones can have clients added to them, are available for lookups, and are used by FreeIPA services like Kerberos. Deleting a DNS zone removes the zone entry and all the associated configuration.
+ </div><div class="para">
+ There can be situations when it is necessary to remove a zone from activity without permanently removing the zone. This is done by <span class="emphasis"><em>disabling</em></span> the zone.
+ </div><div class="section" id="enabling-zones-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="enabling-zones-ui">8.8.1. Disabling Zones in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll down to the <span class="guilabel"><strong>Active zone</strong></span> field. To disable the zone, set the value to FALSE.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-active.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the settings page.
+ </div></li></ol></div></div><div class="section" id="enabling-zones-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="enabling-zones-cmd">8.8.2. Disabling Zones in the Command Line</h3></div></div></div><div class="para">
+ Disabling a zone is done by using the <code class="command">dnszone-disable</code> command.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa dnszone-disable server.example.com</pre><div class="para">
+ When the zone needs to be brought back online, it can be re-enabled using the <code class="command">dnszone-enable</code> command.
+ </div></div></div><div class="section" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones">8.9. Adding Records to DNS Zones</h2></div></div></div><a id="id803051" class="indexterm"></a><a id="id890796" class="indexterm"></a><a id="id890804" class="indexterm"></a><div class="para">
+ FreeIPA supports several different types of DNS records, listed in <a class="xref" href="#tab.record-types">Table 8.4, “DNS Record Types”</a>.
+ </div><a id="id890821" class="indexterm"></a><a id="id710281" class="indexterm"></a><div class="table" id="tab.record-types"><h6>Table 8.4. DNS Record Types</h6><div class="table-contents"><table summary="DNS Record Types" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><tbody><tr><td>
+ A
+ </td><td>
+ DS
+ </td><td>
+ NSEC3PARAM
+ </td></tr><tr><td>
+ AAAA
+ </td><td>
+ HIP
+ </td><td>
+ PTR
+ </td></tr><tr><td>
+ A6
+ </td><td>
+ IPSECKEY
+ </td><td>
+ RRSIG
+ </td></tr><tr><td>
+ AFSDB
+ </td><td>
+ KX
+ </td><td>
+ RP
+ </td></tr><tr><td>
+ APL
+ </td><td>
+ LOC
+ </td><td>
+ SIG
+ </td></tr><tr><td>
+ CERT
+ </td><td>
+ MX
+ </td><td>
+ SPF
+ </td></tr><tr><td>
+ CNAME
+ </td><td>
+ NAPTR
+ </td><td>
+ SRV
+ </td></tr><tr><td>
+ DHCID
+ </td><td>
+ NS
+ </td><td>
+ SSHFP
+ </td></tr><tr><td>
+ DLV
+ </td><td>
+ NSEC
+ </td><td>
+ TA
+ </td></tr><tr><td>
+ DNAME
+ </td><td>
+ NSEC3
+ </td><td>
+ TXT
+ </td></tr><tr><td>
+ DNSKEY
+ </td><td>
+
+ </td><td>
+
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="adding-dns-records-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-dns-records-ui">8.9.1. Adding DNS Resource Records from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to which to add records.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab, click the <span class="guilabel"><strong>Add</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the type of record to create in the <span class="guilabel"><strong>Record Type</strong></span> drop-down menu. The type of record affects the information that is required in the <span class="guilabel"><strong>Record Name</strong></span> and <span class="guilabel"><strong>Data</strong></span> fields.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-new.png" width="444" /></div></div><div class="para">
+ Although FreeIPA supports many different record types, there are four frequent record types that are used:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>IPv4</em></span>. This is a basic map for a hostname and an ordinary IPv4 address. The <span class="guilabel"><strong>Record Name</strong></span> is a hostname, such as <span class="bold bold"><strong>www</strong></span>. The <span class="guilabel"><strong>Data</strong></span> is a standard IPv4 address, such as <span class="bold bold"><strong>192.168.1.2</strong></span>.
+ </div><div class="para">
+ More information about A records is in <a href="http://tools.ietf.org/html/rfc1035">RFC 1035</a>.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>IPv6</em></span>. This is a basic map for a hostname and an IPv6 address. The <span class="guilabel"><strong>Record Name</strong></span> is a hostname, such as <span class="bold bold"><strong>www</strong></span>. The <span class="guilabel"><strong>Data</strong></span> is a standard hexadecimal IPv6 address, such as <span class="bold bold"><strong>fe80::20c:29ff:fe02:a1b3</strong></span>.
+ </div><div class="para">
+ More information about AAAA records is in <a href="http://tools.ietf.org/html/rfc3596">RFC 3596</a>.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>SRV</em></span>. <em class="firstterm">Service (SRV) resource records</em> map service names to the DNS name of the server that is providing that particular service. The <span class="guilabel"><strong>Record Name</strong></span> has the format <span class="emphasis"><em>_service._protocol</em></span>, such as <span class="bold bold"><strong>_ldap._tcp</strong></span>. The <span class="guilabel"><strong>Data</strong></span> value sets the priority, weight, port number, and hostname for the target service. For example, <span class="bold bold"><strong>0 100 389 ldap.example.com</strong></span>.
+ </div><div class="para">
+ More information about SRV records is in <a href="http://tools.ietf.org/html/rfc2782">RFC 2782</a>.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>PTR</em></span>. A pointer record type (PTR) record adds a <span class="emphasis"><em>reverse</em></span> DNS record, which maps an IP address to a domain name. In this case, the <span class="guilabel"><strong>Record Name</strong></span> is the record ID number for the DNS entry of the resource and the <span class="guilabel"><strong>Data</strong></span> value is the hostname with a terminal period, such as <span class="bold bold"><strong>server.example.com.</strong></span>.
+ </div><div class="para">
+ More information about PTR records is in <a href="http://tools.ietf.org/html/rfc1035#page-12">RFC 1035</a>.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the new resource record.
+ </div></li></ol></div></div><div class="section" id="adding-dns-records-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-dns-records-cmd">8.9.2. Adding DNS Resource Records from the Command Line</h3></div></div></div><div class="para">
+ The <code class="command">ipa dnsrecord-add</code> command adds records to DNS zones, based on the type. Adding a record has the same basic command format:
+ </div><a id="id765258" class="indexterm"></a><a id="id765270" class="indexterm"></a><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>domainName urlLabel</code></em> --<em class="replaceable"><code>recordType</code></em>--rec <em class="replaceable"><code>record</code></em></pre><div class="para">
+ The <span class="emphasis"><em>recordType</em></span> is an identifier, such as <code class="command">a</code> for A or IPv4 records. The <span class="emphasis"><em>record</em></span> value is the actual entry, which has a value corresponding to the record type.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="command">ipa dnsrecord-add</code> command only creates forward entries, not reverse entries.
+ </div></div></div><a id="id915344" class="indexterm"></a><a id="id915356" class="indexterm"></a><div class="example" id="ex.ipv4-record"><h6>Example 8.3. IPv4 Record</h6><div class="example-contents"><div class="para">
+ Type A resource records map hostnames to IPv4 addresses. The <span class="emphasis"><em>record</em></span> value for these commands, then, is a standard IPv4 address. The URL label is usually www.
+<pre class="screen">$ ipa dnsrecord-add example.com www --a-rec 10.64.14.165</pre>
+ This creates the record <code class="uri">www.example.com</code> with the IP address 10.64.14.165.
+ </div><div class="para">
+ More information about A records is in <a href="http://tools.ietf.org/html/rfc1035">RFC 1035</a>.
+ </div></div></div><br class="example-break" /><a id="id880954" class="indexterm"></a><a id="id930486" class="indexterm"></a><div class="example" id="ex.ipv6-record"><h6>Example 8.4. IPv6 Record</h6><div class="example-contents"><div class="para">
+ Type AAAA resource records (<em class="firstterm">quad-A records)</em> map hostnames to IPv6 addresses. The <span class="emphasis"><em>record</em></span> value for these commands is an IPv6 address. As with Type A records, the URL label is usually www.
+<pre class="screen">$ ipa dnsrecord-add example.com www --aaaa-rec fe80::20c:29ff:fe02:a1b3</pre>
+ This creates the record <code class="uri">www.example.com</code> with the IP address fe80::20c:29ff:fe02:a1b3. More information about AAAA records is in <a href="http://tools.ietf.org/html/rfc3596">RFC 3596</a>.
+ </div></div></div><br class="example-break" /><a id="id779018" class="indexterm"></a><a id="id779030" class="indexterm"></a><div class="example" id="ex.srv-record"><h6>Example 8.5. SRV Record</h6><div class="example-contents"><div class="para">
+ <em class="firstterm">Service (SRV) resource records</em> map service names to the DNS name of the server that is providing that particular service. For example, this record type can map a service like an LDAP directory to the DNS server which manages it.
+ </div><div class="para">
+ As with Type A and Type AAAA records, SRV records specify a way to connect to and identify the service, but the record format is different.
+ </div><div class="para">
+ The <span class="emphasis"><em>urlLabel</em></span> identifies the service type and the connection protocol, in the format <span class="emphasis"><em>_service._protocol</em></span>.
+ </div><div class="para">
+ The <span class="emphasis"><em>record</em></span> information has the format <span class="emphasis"><em>"priority weight port target"</em></span>.
+ </div><pre class="screen">$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="0 100 389 server1.example.com"
+
+$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="1 100 389 server2.example.com"</pre><div class="para">
+ More information about SRV records is in <a href="http://tools.ietf.org/html/rfc2782">RFC 2782</a>.
+ </div></div></div><br class="example-break" /><a id="id850184" class="indexterm"></a><a id="id829008" class="indexterm"></a><div class="example" id="ex.ptr-record"><h6>Example 8.6. PTR Record</h6><div class="example-contents"><div class="para">
+ A pointer record type (PTR) record adds a <span class="emphasis"><em>reverse</em></span> DNS record, which maps an IP address to a domain name, rather than the other way around.
+ </div><div class="para">
+ All reverse DNS lookups for IPv4 addresses user reverse entries that are defined in the <code class="command">in-addr.arpa.</code> domain. The reverse address, in human-readable form, is the exact reverse of the regular IP address, with the <code class="command">in-addr.arpa.</code> domain appended to it. For example, for the IP address <code class="systemitem">192.0.1.2</code>, the reverse address is <code class="systemitem">2.1.0.192..in-addr.arpa</code>.
+ </div><div class="para">
+ When adding the reverse DNS record, the format of the <code class="command">dnsrecord-add</code> command is also reverse, compared to the usage for adding regular DNS entries:
+ </div><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>reverseIpAddress recordId</code></em> --ptr-rec <em class="replaceable"><code>FQDN</code></em></pre><div class="para">
+ The <span class="emphasis"><em>recordId</em></span> is the numeric identifier to use for the entry in the zone.
+ </div><div class="para">
+ For example, this adds a record with an ID of 4 for <code class="command">server2.example.com</code>:
+ </div><pre class="screen">$ ipa dnsrecord-add 2.1.0.192..in-addr.arpa 4 --ptr-rec server2.example.com.</pre><div class="para">
+ More information about PTR records is in <a href="http://tools.ietf.org/html/rfc1035#page-12">RFC 1035</a>.
+ </div></div></div><br class="example-break" /></div></div><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">8.10. Deleting Records from DNS Zones</h2></div></div></div><a id="id840052" class="indexterm"></a><a id="id840064" class="indexterm"></a><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui">8.10.1. Deleting Records with the Web UI</h3></div></div></div><div class="para">
+ To delete only a specific record from the resource record:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab, click the name of the resource record.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link by the name of the record type to delete. This deletes only that record type while leaving the other configuration intact.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-types.png" width="444" /></div></div></li></ol></div><div class="para">
+ Alternatively, delete all of the records for the resource in the zone:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab, select the checkbox by the name of the resource record to delete. This deletes the entire record.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link at the top of the zone records page.
+ </div></li></ol></div></div><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd">8.10.2. Deleting Records with the Command Line</h3></div></div></div><div class="para">
+ Records are removed from the zone using the <code class="command">ipa dnsrecord-del</code> command. As with adding records, records are deleted using an option that specifies the type of record (<code class="option">--</code><span class="emphasis"><em>recordType</em></span><code class="option">-rec</code>) and the record value.
+ </div><div class="para">
+ For example, to remove the A type record:
+<pre class="screen">$ ipa dnsrecord-del example.com www --a-rec 10.64.14.213</pre>
+
+ </div><div class="para">
+ Alternatively, using the <code class="option">--del-all</code> option removes all associated records for the zone.
+ </div></div></div><div class="section" id="dns-resolve"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="dns-resolve">8.11. Resolving Hostnames in the FreeIPA Domain</h2></div></div></div><div class="para">
+ It is possible to check the DNS entries for FreeIPA domain members using the <code class="command">dns-resolve</code> command. If the record exists and is properly formatted in the DNS configuration, then the command returns the DNS record. If not, the command returns an error, that the hostname is not recognized within the DNS service.
+ </div><pre class="screen">$ipa dns-resolve server1.example.com</pre><div class="para">
+ This can be helpful with troubleshooting connection problems between servers, clients, and services.
+ </div></div></div><div xml:lang="en-US" class="chapter" id="automount" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 9. Policy: Using Automount</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-automount">9.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="#configuring-automount">9.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Automount-Configuring_autofs_on_Linux">9.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="#Configuring_Automount-Solaris_automount">9.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="#adding-locations">9.3. Configuring Locations</a></span></dt><dd><dl><dt><span class="section"><a href="#configuring-locations-ui">9.3.1. Configuring Locations through the Web UI</a></span></dt><dt><span class="section"><a href="#configuring-locat
ions-cmd">9.3.2. Configuring Locations through the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#configuring-maps">9.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="#Configuring_Direct_Maps">9.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="#Configuring_Indirect_Maps">9.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="#importing-maps">9.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></div><div class="para">
+ Automount is a way of making directories on different servers available, automatically, when requested by a user. This works exceptionally well within an FreeIPA domain since it allows directories on clients within the domain to be shared easily. This is especially important with user home directories (<a class="xref" href="#home-directories">Section 5.1, “Setting up User Home Directories”</a>).
+ </div><div class="para">
+ In FreeIPA, automount works with the internal LDAP directory and, if it is configured, DNS services.
+ </div><div class="section" id="about-automount"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-automount">9.1. About Automount and FreeIPA</h2></div></div></div><div class="para">
+ Automount is a way to manage, organize, and access directories across multiple systems. Automount automatically mounts a directory whenever that resource is requested. Automount also provides a coherent structure to the way that this directories are organized. Every single directory, or <span class="emphasis"><em>mount point</em></span> is called a <span class="emphasis"><em>key</em></span>. Multiple keys that are grouped together are a <span class="emphasis"><em>map</em></span>, and maps are associated according to their physical or conceptual <span class="emphasis"><em>location</em></span>.
+ </div><div class="para">
+ The base configuration file for autofs is the <code class="filename">auto.master</code> file in the <code class="filename">/etc/</code> directory. There can be multiple <code class="filename">auto.master</code> configuration files in separate server locations, if necessary.
+ </div><div class="para">
+ When <code class="command">autofs</code> is configured on a server and that server is a client in a FreeIPA domain, then all of the configuration information for automount is stored in the FreeIPA directory. Rather than being stored in separate text files, the autofs configuration — maps, locations, and keys — are stored as LDAP entries. For example, the default map file, <code class="filename">auto.master</code>, is stored as:
+ </div><pre class="screen">dn: automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=com
+objectClass: automountMap
+objectClass: top
+automountMapName: auto.master</pre><div class="para">
+ Each new location is added as a container entry under <code class="command">cn=automount,dc=example,dc=com</code>, and each map and each key are stored beneath that location.
+ </div><div class="para">
+ As with other FreeIPA domain services, automount works with FreeIPA natively. The automount configuration can be managed by FreeIPA tools:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Locations</em></span>, using <code class="command">ipa automountlocation*</code> commands
+ </div></li><li class="listitem"><div class="para">
+ Both direct and indirect <span class="emphasis"><em>maps</em></span>, using <code class="command">ipa automountmap*</code> commands
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Keys</em></span>, using <code class="command">ipa automountkey*</code> commands
+ </div></li></ul></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Solaris uses a different schema for autofs configuration than the schema used by FreeIPA. FreeIPA uses the 2307bis-style automount schema which is defined for 389 Directory Server.
+ </div></div></div><div class="para">
+ For automount to work within the FreeIPA domain, the NFS server must be configured as a FreeIPA client. Configuring NFS itself is covered in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Storage_Administration_Guide/ch-nfs.html">Red Hat Enterprise Linux Storage Administration Guide</a>.
+ </div></div><div class="section" id="configuring-automount"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="configuring-automount">9.2. Configuring Automount</h2></div></div></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Test that the <code class="filename">/home</code> directory can be mounted from the command line successfully before changing the automount configuration. Making sure that NFS is already working properly makes it easier to troubleshoot any potential FreeIPA automount configuration errors later.
+ </div></div></div><div class="section" id="Configuring_Automount-Configuring_autofs_on_Linux"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Automount-Configuring_autofs_on_Linux">9.2.1. Configuring autofs on Fedora</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Edit the <code class="filename">/etc/sysconfig/autofs</code> file to specify the schema attributes that autofs searches for:
+ </div><pre class="programlisting">#
+# Other common LDAP naming
+#
+MAP_OBJECT_CLASS="automountMap"
+ENTRY_OBJECT_CLASS="automount"
+MAP_ATTRIBUTE="automountMapName"
+ENTRY_ATTRIBUTE="automountKey"
+VALUE_ATTRIBUTE="automountInformation"
+</pre></li><li class="listitem"><div class="para">
+ Specify the LDAP configuration. There are two ways to do this. The simplest is to let the automount service discover the LDAP server and locations on its own:
+ </div><pre class="programlisting">LDAP_URI="ldap:///dc=example,dc=com"
+</pre><div class="para">
+ Alternatively, explicitly set which LDAP server to use and the base DN for LDAP searches:
+ </div><pre class="programlisting">LDAP_URI="ldap://ipa.example.com"
+SEARCH_BASE="cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com"
+</pre><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
+ The default value for <span class="emphasis"><em>location</em></span> is <code class="literal">default</code>. If additional locations are added (<a class="xref" href="#adding-locations">Section 9.3, “Configuring Locations”</a>), then the client can be pointed to use those locations, instead.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Edit the <code class="filename">/etc/autofs_ldap_auth.conf</code> file so that autofs allows client authentication with the FreeIPA LDAP server. Change <em class="parameter"><code>authrequired</code></em> to yes and set the principal to the Kerberos host principal:
+ </div><pre class="programlisting"><span class="perl_Keyword"><autofs_ldap_sasl_conf</span>
+<span class="perl_Others"> usetls=</span><span class="perl_String">"no"</span>
+<span class="perl_Others"> tlsrequired=</span><span class="perl_String">"no"</span>
+<span class="perl_Others"> authrequired=</span><span class="perl_String">"yes"</span>
+<span class="perl_Others"> authtype=</span><span class="perl_String">"GSSAPI"</span>
+<span class="perl_Others"> clientprinc=</span><span class="perl_String">"host/server.example.com at EXAMPLE COM"</span>
+ <span class="perl_Keyword">/></span></pre><div class="para">
+ If necessary, run <code class="command">klist -k</code> to get the exact host principal information.
+ </div></li><li class="listitem"><div class="para">
+ Check the <code class="filename">/etc/nssswitch.conf</code> file, so that LDAP is listed as a source for automount configuration:
+ </div><pre class="screen">automount: files <strong class="userinput"><code>ldap</code></strong></pre></li><li class="listitem"><div class="para">
+ Restart autofs:
+ </div><pre class="screen"># service autofs restart</pre></li><li class="listitem"><div class="para">
+ Test the configuration by listing a user's <code class="filename">/home</code> directory:
+ </div><pre class="screen"># ls /home/<em class="replaceable"><code>userName</code></em></pre><div class="para">
+ If this does not mount the remote file system, check the <code class="filename">/var/log/messages</code> file for errors. If necessary, increase the debug level in the <code class="filename">/etc/sysconfig/autofs</code> file by setting the <em class="parameter"><code>LOGGING</code></em> parameter to <code class="literal">debug</code>.
+ </div></li></ol></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ If there are problems with automount, then cross-reference the automount attempts with the 389 Directory Server access logs, which will show the attempted access, user, and search base.
+ </div><div class="para">
+ It is also simple to run automount in the foreground with debug logging on.
+<pre class="screen">automount -f -d</pre>
+ This prints the debug log information directly, without having to cross-check the LDAP access log with automount's log.
+ </div></div></div></div><div class="section" id="Configuring_Automount-Solaris_automount"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Automount-Solaris_automount">9.2.2. Configuring Automount on Solaris</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ If the NFS server is running on Fedora, specify on the Solaris machine that NFSv3 is the maximum supported version. Edit the <code class="filename">/etc/default/nfs</code> file and set the following parameter:
+ </div><pre class="programlisting">NFS_CLIENT_VERSMAX=3
+</pre></li><li class="listitem"><div class="para">
+ Use the <code class="command">ldapclient</code> command to configure the host to use LDAP:
+ </div><pre class="programlisting">ldapclient -v manual -a authenticationMethod=none
+ -a defaultSearchBase=dc=example,dc=com
+ -a defaultServerList=ipa.example.com
+ -a serviceSearchDescriptor=passwd:cn=users,cn=accounts,dc=example,dc=com
+ -a serviceSearchDescriptor=group:cn=groups,cn=compat,dc=example,dc=com
+ -a serviceSearchDescriptor=auto_master:automountMapName=auto.master,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one
+ -a serviceSearchDescriptor=auto_home:automountMapName=auto_home,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one
+ -a objectClassMap=shadow:shadowAccount=posixAccount
+ -a searchTimelimit=15
+ -a bindTimeLimit=5
+</pre></li><li class="listitem"><div class="para">
+ Enable <code class="command">automount</code>:
+ </div><pre class="screen"># svcadm enable svc:/system/filesystem/autofs</pre></li><li class="listitem"><div class="para">
+ Test the configuration.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Check the LDAP configuration:
+<pre class="screen"># ldapclient -l auto_master
+
+dn: automountkey=/home,automountmapname=auto.master,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com
+objectClass: automount
+objectClass: top
+automountKey: /home
+automountInformation: auto.home
+</pre>
-CA certificate CTu,u,Cu
-Imported CA CT,,C
-Server-Cert u,u,u
-Imported CA CT,,C</pre>
+ </div></li><li class="listitem"><div class="para">
+ List a user's <code class="filename">/home</code> directory:
+ </div><div class="para">
+
+<pre class="screen"># ls /home/<em class="replaceable"><code>userName</code></em></pre>
+ </div></li></ol></div></li></ol></div></div></div><div class="section" id="adding-locations"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="adding-locations">9.3. Configuring Locations</h2></div></div></div><div class="para">
+ A location is a set of maps, which are all stored in <code class="filename">auto.master</code>, and a location can store multiple maps. The location entry only works as a container for map entries; it is not an automount configuration in and of itself.
+ </div><div class="section" id="configuring-locations-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="configuring-locations-ui">9.3.1. Configuring Locations through the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Automount</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of automount locations.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location-list.png" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name for the new location.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go to the map configuration for the new location. Create maps, as described in <a class="xref" href="#Configuring_Direct_Maps-ui">Section 9.4.1.1, “Configuring Direct Maps from the Web UI”</a> and <a class="xref" href="#Configuring_Indirect_Maps-ui">Section 9.4.2.1, “Configuring Indirect Maps from the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="configuring-locations-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="configuring-locations-cmd">9.3.2. Configuring Locations through the Command Line</h3></div></div></div><div class="para">
+ To create a map, using the <code class="command">automountlocation-add</code> and give the location name.
+<pre class="screen">$ ipa automountlocation-add <em class="replaceable"><code>location</code></em></pre>
+ For example:
+ </div><pre class="screen">$ ipa automountlocation-add raleigh
+----------------------------------
+Added automount location "raleigh"
+----------------------------------
+ Location: raleigh</pre><div class="para">
+ When a new location is created, two maps are automatically created for it, <code class="filename">auto.master</code> and <code class="filename">auto.direct</code>. <code class="filename">auto.master</code> is the root map for all automount maps for the location. <code class="filename">auto.direct</code> is the default map for direct mounts and is mounted on <code class="filename">/-</code>.
</div><div class="para">
- To resolve this issue, clear the certificate database:
-<pre class="screen"># certutil -d /etc/dirsrv/slapd-DOMAIN-NAME -D -n "Imported CA"</pre>
+ To view all of the maps configured for a location as if they were deployed on a filesystem, use the <code class="command">automountlocation-tofiles</code> command:
+ </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
+/etc/auto.master:
+/- /etc/auto.direct
+---------------------------
+/etc/auto.direct:</pre></div></div><div class="section" id="configuring-maps"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="configuring-maps">9.4. Configuring Maps</h2></div></div></div><div class="para">
+ Configuring maps not only creates the maps, it associates mount points through the keys and it assigns mount options that should be used when the directory is accessed. FreeIPA supports both direct and indirect maps.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Different clients can use different map sets. Map sets use a tree structure, so maps <span class="emphasis"><em>cannot</em></span> be shared between locations.
+ </div></div></div><div class="section" id="Configuring_Direct_Maps"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Direct_Maps">9.4.1. Configuring Direct Maps</h3></div></div></div><div class="para">
+ Direct maps define exact locations, meaning absolute paths, to the file mount. In the location entry, a direct map is identified by the preceding forward slash:
+<pre class="screen">---------------------------
+/etc/auto.direct:
+/shared/man server.example.com:/shared/man</pre>
+ </div><div class="section" id="Configuring_Direct_Maps-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Direct_Maps-ui">9.4.1.1. Configuring Direct Maps from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Automount</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click name of the automount location to which to add the map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location-list.png" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Automount Maps</strong></span> tab, click the <span class="guilabel"><strong>+ Add</strong></span> link to create a new map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-map-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In pop-up window, select the <span class="guilabel"><strong>Direct</strong></span> radio button and enter the name of the new map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-direct1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Automount Keys</strong></span> tab, click the <span class="guilabel"><strong>+ Add</strong></span> link to create a new key for the map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-key-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the mount point. The key defines the actual mount point in the key name. The <span class="guilabel"><strong>Info</strong></span> field sets the network location of the directory, as well as any <code class="command">mount</code> options to use.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-direct2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the new key.
+ </div></li></ol></div></div><div class="section" id="Configuring_Direct_Maps-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Direct_Maps-cmd">9.4.1.2. Configuring Direct Maps from the Command Line</h4></div></div></div><div class="para">
+ The key defines the actual mount point (in the key name) and any options. A map is a direct or indirect map based on the format of its key.
+ </div><div class="para">
+ Each location is created with an <code class="systemitem">auto.direct</code> item. The simplest configuration is to define a direct mapping by adding an automount key the existing direct map entry. It is also possible to create different direct map entries.
+ </div><div class="para">
+ Add the key for the direct map to the location's <code class="filename">auto.direct</code> file. The <code class="option">--key</code> option identifies the mount point, and <code class="option">--info</code> gives the network location of the directory, as well as any <code class="command">mount</code> options to use. For example:
+ </div><pre class="screen">$ ipa automountkey-add raleigh auto.direct --key=/share --info="-ro,soft, ipaserver.example.com:/home/share"
+ Key: /share
+ Mount information: -ro,soft, ipaserver.example.com:/home/share</pre><div class="para">
+ Mount options are described in the mount manpage, <a href="http://linux.die.net/man/8/mount">http://linux.die.net/man/8/mount</a>.
+ </div><div class="para">
+ On Solaris, add the direct map and key using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
+ </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_direct:automountMapName=auto.direct,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div></div><div class="section" id="Configuring_Indirect_Maps"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Indirect_Maps">9.4.2. Configuring Indirect Maps</h3></div></div></div><div class="para">
+ An indirect map essentially specifies a relative path for maps. A parent entry sets the base directory for all of the indirect maps. The indirect map key sets a sub directory; whenever the indirect map location is loaded, the key is appended to that base directory. For example, if the base directory is <code class="filename">/docs</code> and the key is <code class="filename">man</code>, then the map is <code class="filename">/docs/man</code>.
+ </div><div class="section" id="Configuring_Indirect_Maps-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Indirect_Maps-ui">9.4.2.1. Configuring Indirect Maps from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Automount</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click name of the automount location to which to add the map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location-list.png" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Automount Maps</strong></span> tab, click the <span class="guilabel"><strong>+ Add</strong></span> link to create a new map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-map-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In pop-up window, select the <span class="guilabel"><strong>Indirect</strong></span> radio button and enter the required information for the indirect map:
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-indirect1.png" width="444" /></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The name of the new map
+ </div></li><li class="listitem"><div class="para">
+ The mount point. The <span class="guilabel"><strong>Mount</strong></span> field sets the base directory to use for all the indirect map keys.
+ </div></li><li class="listitem"><div class="para">
+ Optionally, a parent map. The default parent is <code class="filename">auto.master</code>, but if another map exists which should be used, that can be specified in the <span class="guilabel"><strong>Parent Map</strong></span> field.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the new key.
+ </div></li></ol></div></div><div class="section" id="Configuring_Indirect_Maps-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Indirect_Maps-cmd">9.4.2.2. Configuring Indirect Maps from the Command Line</h4></div></div></div><div class="para">
+ The primary difference between a direct map and an indirect map is that there is no forward slash in front of an indirect key.
+ </div><pre class="screen">---------------------------
+/etc/auto.share:
+man ipa.example.com:/docs/man
+---------------------------</pre><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create an indirect map to set the base entry using the <code class="command">automountmap-add-indirect</code> command. The <code class="option">--mount</code> option sets the base directory to use for all the indirect map keys. The default parent entry is <code class="filename">auto.master</code>, but if another map exists which should be used, that can be specified using the <code class="option">--parentmap</code> option.
+<pre class="screen">$ ipa automountmap-add-indirect <em class="replaceable"><code>location mapName</code></em> --mount=<em class="replaceable"><code>directory</code></em> [--parentmap=<em class="replaceable"><code>mapName</code></em>]</pre>
+ For example:
+ </div><pre class="screen">$ ipa automountmap-add-indirect raleigh auto.share --mount=/share
+--------------------------------
+Added automount map "auto.share"
+--------------------------------</pre></li><li class="listitem"><div class="para">
+ Add the indirect key for the mount location:
+ </div><pre class="screen">$ ipa automountkey-add raleigh auto.share --key=docs --info="ipa.example.com:/export/docs"
+-------------------------
+Added automount key "docs"
+-------------------------
+ Key: docs
+ Mount information: ipa.example.com:/export/docs</pre></li><li class="listitem"><div class="para">
+ To verify the configuration, check the location file list using <code class="command">automountlocation-tofiles</code>:
+ </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
+/etc/auto.master:
+/- /etc/auto.direct
+/share /etc/auto.share
+---------------------------
+/etc/auto.direct:
+---------------------------
+/etc/auto.share:
+man ipa.example.com:/export/docs</pre></li></ol></div><div class="para">
+ On Solaris, add the indirect map using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
+ </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_share:automountMapName=auto.share,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div></div><div class="section" id="importing-maps"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="importing-maps">9.4.3. Importing Automount Maps</h3></div></div></div><div class="para">
+ If there are existing automount maps, these can be imported into the FreeIPA automount configuration.
+ </div><pre class="screen">ipa automountlocation-import <em class="replaceable"><code>location map_file</code></em> [--continuous]</pre><div class="para">
+ The only required information is the FreeIPA automount location and the full path and name of the map file. The <code class="option">--continuous</code> option tells the <code class="command">automountlocation-import</code> command to continue through the map file, even if the command encounters errors.
</div><div class="para">
- This deletes the CA certificate from the LDAP database.
- </div><div class="formalpara"><h5 class="formalpara" id="id3407285">There are errors saying passwords aren't being synced because it says the entry exists</h5>
- For some entries in the user database, there may be an informational error message that the password is not being reset because the entry alreayd exists:
- </div><pre class="screen">"Windows PassSync entry exists, not resetting password"</pre><div class="para">
- This is not an error. This message occurs when an exempt user, the Password Sync user, it not being changed. The Password Sync user is the operational user which is used by the service to change the passwords in FreeIPA.
- </div></div></div><div class="section" id="Configuring_Microsoft_Windows"><div class="titlepage"><div><div><h2 class="title" id="Configuring_Microsoft_Windows">8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</h2></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA does <span class="emphasis"><em>not</em></span> support Microsoft Windows client authentication.
- </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Download the MIT Kerberos 3.x package for Windows.
- </div></li><li class="listitem"><div class="para">
- Run the <code class="filename">kfw-3.x-exe</code> file to launch the MIT Kerberos Installation Wizard.
- </div></li><li class="listitem"><div class="para">
- Read and accept the license agreement.
- </div></li><li class="listitem"><div class="para">
- Install the KfW client. All other components are optional.
- </div></li><li class="listitem"><div class="para">
- Accept the default destination path.
- </div></li><li class="listitem"><div class="para">
- Select <span class="guilabel"><strong>Download from web path</strong></span>, and enter the URL to the FreeIPA server. For example:
- </div><pre class="programlisting">http://ipaserver.example.com/ipa/config/</pre></li><li class="listitem"><div class="para">
- Select <span class="guilabel"><strong>Autostart the Network Identity Manager each time you login to Windows</strong></span>.
- </div></li><li class="listitem"><div class="para">
- Click <span class="guibutton"><strong>Install</strong></span> to begin the installation. When the installation is complete, click <span class="guibutton"><strong>Finish</strong></span> to exit the Wizard.
- </div></li><li class="listitem"><div class="para">
- Edit the hosts file and add the FreeIPA server. For example:
- </div><pre class="programlisting">1.2.3.4 ipaserver.example.com ipaserver</pre><div class="para">
- Depending on the version of Windows, the HOSTS file could be located in different directories.
- </div></li></ol></div><a id="id3248474" class="indexterm"></a><a id="id3705148" class="indexterm"></a><a id="id3705160" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- One potential proble is that a ticket is not generated by Kerberos on Windows. Windows can use multiple ticket caches with MIT Kerberos. This can create odd scenarios, where it is possible to authenticate against FreeIPA's domain in the command line, but not to open the web UI.
- </div><div class="para">
- MIT Kerberos for Windows provides some debugging tools which can be used to troubleshoot Windows Kerberos problems, available at <a href="http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2">http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2</a>.
- </div></div></div></div></div><div xml:lang="en-US" class="chapter" id="nis" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 9. Identity: Integrating with NIS Domains and Netgroups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-nis">9.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="#adding-netgroups">9.2. Adding Netgroups</a></span></dt><dt><span class="section"><a href="#Exposing_Automount_Maps_to_NIS_Clients">9.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="#migrating-from-nis">9.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-netgroup-entries">9.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="#nis-migr-exporting-data">9.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></div><div class="para">
- Network information service (NIS) is one of the most common ways to manage identities and authentication on Unix networks. It is simple and easy to use, but it also has inherent security risks and a lack of flexibility that can make administrering NIS domains problematic.
+ For example:
+ </div><pre class="screen">$ ipa automountlocation-import raleigh /etc/custom.map</pre></div></div></div><div xml:lang="en-US" class="chapter" id="nis" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 10. Policy: Integrating with NIS Domains and Netgroups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-nis">10.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="#adding-netgroups">10.2. Creating Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="#add-netgroup">10.2.1. Adding Netgroups</a></span></dt><dt><span class="section"><a href="#add-netgroup-members">10.2.2. Adding Netgroup Members</a></span></dt></dl></dd><dt><span class="section"><a href="#Exposing_Automount_Maps_to_NIS_Clients">10.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="#migrating-from-nis">10.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class
="section"><a href="#creating-netgroup-entries">10.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="#nis-migr-exporting-data">10.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></div><div class="para">
+ Network information service (NIS) is one of the most common ways to manage identities and authentication on Unix networks. It is simple and easy to use, but it also has inherent security risks and a lack of flexibility that can make administering NIS domains problematic.
</div><div class="para">
- FreeIPA supplies a way to integrate netgroups into the FreeIPA domain, which incorporates the stronger security strucutre of FreeIPA over the NIS configuration. Alternatively, administrators can simply migrate user and host identities from a NIS domain into the FreeIPA domain.
- </div><div class="section" id="about-nis"><div class="titlepage"><div><div><h2 class="title" id="about-nis">9.1. About NIS and FreeIPA</h2></div></div></div><div class="para">
+ FreeIPA supplies a way to integrate netgroups into the FreeIPA domain, which incorporates the stronger security structure of FreeIPA over the NIS configuration. Alternatively, administrators can simply migrate user and host identities from a NIS domain into the FreeIPA domain.
+ </div><div class="section" id="about-nis"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-nis">10.1. About NIS and FreeIPA</h2></div></div></div><div class="para">
Network information service (NIS) centrally manages authentication and identity information such as users and passwords, hosts and IP addresses, and POSIX groups. This was originally called <span class="emphasis"><em>Yellow Pages</em></span> (abbreviated YP) because of its simple focus on identity and authentication lookups.
</div><div class="para">
NIS is considered too insecure for most modern network environments because it provides no host authentication mechanisms and it transmits all of its information over the network unencrypted, including password hashes. Still, while NIS has been falling out of favor with administrators, it is still actively used by many system client. Clients such as <code class="command">sudo</code> only use netgroups to manage authentication. There are ways to work around those insecurities by integrating NIS with other protocols which offer enhanced security.
@@ -3686,15 +4783,55 @@ Member Host: VirtGuests</pre><div class="para">
When a client attempts to access the NIS netgroup, then FreeIPA translates the LDAP entry into a traditional NIS map and sends it to a client over the NIS protocol (using a NIS plug-in) or it translates it into an LDAP format that is compliant with RFC 2307 or RFC 2307bis (using a compatibility plug-in).
</div><div class="para">
For more information on NIS, see the Berkeley lab manpages at <a href="http://compute.cnr.berkeley.edu/cgi-bin/man-cgi?netgroup+4">http://compute.cnr.berkeley.edu/cgi-bin/man-cgi?netgroup+4</a>.
- </div></div><div class="section" id="adding-netgroups"><div class="titlepage"><div><div><h2 class="title" id="adding-netgroups">9.2. Adding Netgroups</h2></div></div></div><div class="para">
- New netgroups are added using the <code class="command">netgroup-add</code> command. This adds only the group; members are added separately. Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them. There is also an option to set the NIS domain name to use for the group; this defaults to the FreeIPA domain, but it can be set to something different, depending on the network configuration.
- </div><pre class="screen">$ ipa netgroup-add --desc="<em class="replaceable"><code>description</code></em>" [--nisdomain=<em class="replaceable"><code>domainName</code></em>] <em class="replaceable"><code>groupName</code></em></pre><div class="para">
- For example:
- </div><pre class="screen"># ipa netgroup-add --desc="my new netgroup" --nisdomain=exampledomain example-group</pre><div class="para">
- Once the group is configured, then begin adding netgroup members with the <code class="command">netgroup-add-member</code> command. Users, groups, hosts, host groups, and other netgroups can all be added to the netgroup entry. The entry name of the NIS group being edited usually comes at the end of the command:
- </div><pre class="screen"># ipa netgroup-add-member --users=<em class="replaceable"><code>users</code></em> --groups=<em class="replaceable"><code>groups</code></em> --hosts=<em class="replaceable"><code>hosts</code></em> --hostgroups=<em class="replaceable"><code>hostGroups</code></em> --netgroups=<em class="replaceable"><code>netgroups</code></em> <em class="replaceable"><code>groupName</code></em></pre><div class="para">
- To set more than one member, use a comma-separated list with the option. For example, this sets two users and two hosts with the other configuration:
- </div><pre class="screen"># ipa netgroup-add-member --users=jsmith,bjensen --groups=ITadmin --hosts=host1.example.com,host2.example.com --hostgroups=EngDev --netgroups=nisgroup2 example-group</pre></div><div class="section" id="Exposing_Automount_Maps_to_NIS_Clients"><div class="titlepage"><div><div><h2 class="title" id="Exposing_Automount_Maps_to_NIS_Clients">9.3. Exposing Automount Maps to NIS Clients</h2></div></div></div><div class="para">
+ </div></div><div class="section" id="adding-netgroups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="adding-netgroups">10.2. Creating Netgroups</h2></div></div></div><div class="para">
+ All netgroups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
+ </div><div class="para">
+ Netgroups are added in two steps: the group itself is created, and then members are added to it.
+ </div><div class="section" id="add-netgroup"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="add-netgroup">10.2.1. Adding Netgroups</h3></div></div></div><div class="section" id="add-netgroup-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-ui">10.2.1.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Netgroups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the netgroups list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter both a unique name and a description for the netgroup. Both the name and description are required.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-add.png" width="444" /></div></div><div class="para">
+ The group name is the identifier used for the netgroup in the FreeIPA domain, and it cannot be changed after it is created. The name cannot contain spaces, but other separators like an underscore (_) are allowed.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go immediately to the netgroup's edit pages.
+ </div></li><li class="listitem"><div class="para">
+ Optionally, set the NIS domain for the netgroup. This defaults to the FreeIPA domain, but it can be changed.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Enter the name of the alternate NIS domain in the <span class="guilabel"><strong>NIS domain name</strong></span> field.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-domain.png" width="444" /></div></div></li></ol></div></li><li class="listitem"><div class="para">
+ Add members, as described in <a class="xref" href="#add-netgroup-members-ui">Section 10.2.2.1, “With the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="add-netgroup-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-cmd">10.2.1.2. With the Command Line</h4></div></div></div><div class="para">
+ New netgroups are added using the <code class="command">netgroup-add</code> command. This adds only the group; members are added separately. Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them. There is also an option to set the NIS domain name to use for the group; this defaults to the FreeIPA domain, but it can be set to something different, depending on the network configuration.
+ </div><pre class="screen">$ ipa netgroup-add --desc="<em class="replaceable"><code>description</code></em>" [--nisdomain=<em class="replaceable"><code>domainName</code></em>] <em class="replaceable"><code>groupName</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen"># ipa netgroup-add --desc="my new netgroup" --nisdomain=exampledomain example-group</pre></div></div><div class="section" id="add-netgroup-members"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="add-netgroup-members">10.2.2. Adding Netgroup Members</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Netgroups can contain user groups, host groups, and other netgroups as their members. These are <span class="emphasis"><em>nested</em></span> groups.
+ </div><div class="para">
+ It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div><div class="para">
+ When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
+ </div></div></div><div class="section" id="add-netgroup-members-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-members-ui">10.2.2.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Netgroups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the netgroup to which to add members.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the tab for the type of netgroup member to add. Netgroups can have users, user groups, hosts, host groups, and other netgroups as members.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroups-menu.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the users to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the names to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/nis-members.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="add-netgroup-members-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-members-cmd">10.2.2.2. With the Command Line</h4></div></div></div><div class="para">
+ Once the group is configured, begin adding netgroup members with the <code class="command">netgroup-add-member</code> command. Users, groups, hosts, host groups, and other netgroups can all be added to the netgroup entry. The entry name of the NIS group being edited usually comes at the end of the command:
+ </div><pre class="screen"># ipa netgroup-add-member --users=<em class="replaceable"><code>users</code></em> --groups=<em class="replaceable"><code>groups</code></em> --hosts=<em class="replaceable"><code>hosts</code></em> --hostgroups=<em class="replaceable"><code>hostGroups</code></em> --netgroups=<em class="replaceable"><code>netgroups</code></em> <em class="replaceable"><code>groupName</code></em></pre><div class="para">
+ To set more than one member, use a comma-separated list with the option. For example, this sets two users and two hosts with the other configuration:
+ </div><pre class="screen"># ipa netgroup-add-member --users=jsmith,bjensen --groups=ITadmin --hosts=host1.example.com,host2.example.com --hostgroups=EngDev --netgroups=nisgroup2 example-group</pre></div></div></div><div class="section" id="Exposing_Automount_Maps_to_NIS_Clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Exposing_Automount_Maps_to_NIS_Clients">10.3. Exposing Automount Maps to NIS Clients</h2></div></div></div><div class="para">
When the NIS service is enabled on a system, the FreeIPA server is automatically configured to set the NIS domain to the FreeIPA domain's name, and to include FreeIPA users, groups, and netgroups as passwd, group, and netgroup maps in the NIS domain.
</div><div class="para">
If any automount maps are already defined, these maps need to be manually added to the NIS configuration in FreeIPA for them to be exposed to NIS clients. The NIS server is managed by a special plug-in entry in the FreeIPA LDAP directory; this is a container entry, and each NIS domain and map used by the NIS server is configured as a child entry beneath that container. The NIS domain entry in the must have the name of the NIS domain, the name of the NIS map, how to find the directory entries to use as the NIS map's contents, and which attributes to use as the NIS map's key and value. Most of these settings will be the same for every map.
@@ -3715,15 +4852,15 @@ nis-base: automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=com
</div><div class="para">
A similar add operation needs to be run for every map that is configured.
- </div></div><div class="section" id="migrating-from-nis"><div class="titlepage"><div><div><h2 class="title" id="migrating-from-nis">9.4. Migrating from NIS to FreeIPA</h2></div></div></div><div class="para">
- There is no direct migration path from NIS to FreeIPA. This is a manual process with three major steps: setting up netgroup entries in FreeIPA, exporting the existing data from NIS, and importing that data into FreeIPA. There are several options for how to set up the FreeIPA environment and how to export data; the best option depends on the type of data and the overal network environment that you have.
- </div><div class="section" id="creating-netgroup-entries"><div class="titlepage"><div><div><h3 class="title" id="creating-netgroup-entries">9.4.1. Preparing Netgroup Entries in FreeIPA</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="migrating-from-nis"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="migrating-from-nis">10.4. Migrating from NIS to FreeIPA</h2></div></div></div><div class="para">
+ There is no direct migration path from NIS to FreeIPA. This is a manual process with three major steps: setting up netgroup entries in FreeIPA, exporting the existing data from NIS, and importing that data into FreeIPA. There are several options for how to set up the FreeIPA environment and how to export data; the best option depends on the type of data and the overall network environment that you have.
+ </div><div class="section" id="creating-netgroup-entries"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-netgroup-entries">10.4.1. Preparing Netgroup Entries in FreeIPA</h3></div></div></div><div class="para">
The first step is to identify what kinds of identities are being managed by NIS. Frequently, a NIS server is used for either user entries or host entries, but not for both, which can simplify the data migration process.
- </div><div class="formalpara"><h5 class="formalpara" id="id3338566">For user entries</h5>
- Determine what applications are using the user information in the NIS server. While some clients (like <code class="command">sudo</code>) require NIS netgroups, many clients can use Unix groups instead. If no netgroups are required, then simply create corresponding user accounts in FreeIPA and delete the netgroups entirely. Otherwise, create the user entries in FreeIPA and then create a FreeIPA-managed netgroup and add those users as members. This is described in <a class="xref" href="#adding-netgroups">Section 9.2, “Adding Netgroups”</a>.
- </div><div class="formalpara"><h5 class="formalpara" id="id3362245">For host entries</h5>
+ </div><div class="formalpara"><h5 class="formalpara" id="id1005744">For user entries</h5>
+ Determine what applications are using the user information in the NIS server. While some clients (like <code class="command">sudo</code>) require NIS netgroups, many clients can use Unix groups instead. If no netgroups are required, then simply create corresponding user accounts in FreeIPA and delete the netgroups entirely. Otherwise, create the user entries in FreeIPA and then create a FreeIPA-managed netgroup and add those users as members. This is described in <a class="xref" href="#adding-netgroups">Section 10.2, “Creating Netgroups”</a>.
+ </div><div class="formalpara"><h5 class="formalpara" id="id1005767">For host entries</h5>
Whenever a host group is created in FreeIPA, a corresponding shadow NIS group is automatically created. These netgroups can then be managed using the <code class="command">ipa-host-net-manage</code> command.
- </div><div class="formalpara"><h5 class="formalpara" id="id3362262">For a direct conversion</h5>
+ </div><div class="formalpara"><h5 class="formalpara" id="id703026">For a direct conversion</h5>
It may be necessary to have an exact conversion, with every NIS user and host having an exact corresponding entry in FreeIPA. In that case, each entry can be created using the original NIS names:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create an entry for every user referenced in a netgroup.
@@ -3733,7 +4870,7 @@ nis-base: automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=com
Create a netgroup with the same name as the original netgroup.
</div></li><li class="listitem"><div class="para">
Add the users and hosts as direct members of the netgroup. Alternatively, put add the users and hosts into FreeIPA groups or other netgroups, and then add those groups as members to the netgroup.
- </div></li></ol></div></div><div class="section" id="nis-migr-exporting-data"><div class="titlepage"><div><div><h3 class="title" id="nis-migr-exporting-data">9.4.2. Exporting the Existing NIS Data</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="nis-migr-exporting-data"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="nis-migr-exporting-data">10.4.2. Exporting the Existing NIS Data</h3></div></div></div><div class="para">
There are three main approaches that can be used to obtain the information from the NIS domain:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Export an LDIF file from the NIS server.
@@ -3744,683 +4881,797 @@ nis-base: automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=com
</div></li><li class="listitem"><div class="para">
Import the edited LDIF file into FreeIPA using the <code class="command">ldapmodify</code> command.
</div></li></ol></div></li><li class="listitem"><div class="para">
- Use scripts to obtain the information and automatically create the corresponding FreeIPA entries.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create a script to retrieve data from the source. There are several ways to access this information, such as parsing an LDIF file or connecting to the NIS server and listing the information.
- </div></li><li class="listitem"><div class="para">
- Create a second script that runs through the FreeIPA command-line tulities to create all of the entries, using the NIS information as inputs.
- </div></li></ol></div></li><li class="listitem"><div class="para">
- Manually create the required netgroups, users, and hosts.
- </div></li></ol></div></div></div></div><div xml:lang="en-US" class="chapter" id="Working_with_DNS" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 10. Identity: Managing DNS</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-dns">10.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#enabling-dns">10.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="#bind-dyndb-ldap-config">10.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="#changing-forwarder">10.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="#finding-dns-zones">10.5. Finding and Displaying DNS Zones</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_DNS_Zones">10.6. Adding DNS Zones</a></span></dt><dt><span class="section"><a href="#modifying-dns-zones">10.7. Modifying DNS Zones</a></s
pan></dt><dt><span class="section"><a href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates">10.8. Enabling Dynamic DNS Updates</a></span></dt><dt><span class="section"><a href="#enabling-zones">10.9. Enabling and Disabling Zones</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">10.10. Adding Records to DNS Zones</a></span></dt><dt><span class="section"><a href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">10.11. Deleting Records from DNS Zones</a></span></dt><dt><span class="section"><a href="#dns-resolve">10.12. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></div><div class="para">
- If the FreeIPA server was installed with DNS configured, then all of the DNS entries for the domain — host entries, locations, records — can be managed using the FreeIPA tools.
- </div><div class="section" id="about-dns"><div class="titlepage"><div><div><h2 class="title" id="about-dns">10.1. About DNS in FreeIPA</h2></div></div></div><div class="para">
- DNS is one of the services that can be configured and maintained by the FreeIPA domain. DNS is critical to the performance of the FreeIPA domain; DNS is used for the Kerberos services and SSL connections for all servers and clients and for connections to domain services like LDAP.
- </div><div class="para">
- While FreeIPA can use an external DNS service, there is a lot more flexibility and control over FreeIPA — DNS interactions when the DNS service is configured within the domain. For example, DNS records and zones can be managed within the domain using FreeIPA tools, and clients can update their own DNS records dynamically. When a host is added to FreeIPA, a DNS record is automatically created in FreeIPA's DNS service for that host machine.
- </div><div class="para">
- FreeIPA stores all DNS information as LDAP entries. Every resource record for each machine is stored for the domain. For example, the client1 resource has three IPv4 (A) records and one IPv6 (AAAA) record:
- </div><pre class="screen">dn: idnsname=client1,idnsname=example.com,cn=dns,dc=example,dc=com
-idnsname: client1
-arecord: 10.0.0.1
-arecord: 10.0.0.2
-arecord: 10.0.0.3
-aaaarecord: fc00::1
-objectclass: top
-objectclass: idnsrecord</pre><div class="para">
- The schema used to define the the DNS entries is in the <code class="filename">/usr/share/ipa/60basev2.ldif</code> schema file.
- </div><a id="id3348842" class="indexterm"></a><a id="id4292741" class="indexterm"></a><div class="para">
- The BIND service communicates with the Directory Server using the system <code class="filename">bind-dyndb-ldap</code> plug-in. When FreeIPA is configured to manage DNS (<a class="xref" href="#enabling-dns">Section 10.2, “Configuring DNS in FreeIPA”</a>), FreeIPA creates a <code class="command">dynamic-db</code> configuration section in the <code class="filename">/etc/named.conf</code> file for the BIND service. This configures the <code class="filename">bind-dyndb-ldap</code> plug-in for the BIND (<code class="systemitem">named</code>) service.
- </div><div class="para">
- When this plug-in is properly configured, it delivers the DNS records from the Directory Server to the <code class="systemitem">named</code> service. The configuration can be changed to adapt the behavior of the plug-in and, therefore, the LDAP-BIND interactions.
- </div><div class="para">
- The <code class="command">ipa</code> command has several subcommands to manage the DNS service.
- </div><div class="table" id="tab.sns-tools"><h6>Table 10.1. DNS Management Tools</h6><div class="table-contents"><table summary="DNS Management Tools" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- Command
- </th><th>
- Description
- </th></tr></thead><tbody><tr><td>
- dns-resolve
- </td><td>
- Resolves a hostname to see if it exists within the FreeIPA domain.
- </td></tr><tr><td>
- dnsrecord-add, dnsrecord-mod, and dnsrecord-del
- </td><td>
- Adds, edits, and deletes DNS records.
- </td></tr><tr><td>
- dnsrecord-find and dnsrecord-show
- </td><td>
- Finds and displays DNS records.
- </td></tr><tr><td>
- dnszone-add and dnszone-del
- </td><td>
- Adds and deletes DNS SOA records.
- </td></tr><tr><td>
- dnszone-enable and dnszone-disable
- </td><td>
- Enables and disables DNS zones. These tools control whether a DNS zone is active and available without deleting the configuration entries in the LDAP directory.
- </td></tr><tr><td>
- dnszone-find and dnszone-show
- </td><td>
- Finds and displays DNS zone configuration.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="enabling-dns"><div class="titlepage"><div><div><h2 class="title" id="enabling-dns">10.2. Configuring DNS in FreeIPA</h2></div></div></div><div class="para">
- DNS can be configured as part of the FreeIPA server installation, simply by using the <code class="option">--setup-dns</code> option. If DNS is not configured then, it can be configured later using the <code class="command">ipa-dns-install</code> command. For example:
- </div><pre class="screen">ipa-dns-install -p secret --ip-address=1.2.34.56 --no-forwarders</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- <code class="option">-p</code> gives the password for the Directory Manager user in the 389 Directory Server. All of th DNS entries are stored in the LDAP directory, so this directory must be accessed to add the DNS configuration.
- </div></li><li class="listitem"><div class="para">
- <code class="option">--ip-address</code> gives the IP address for the master DNS server.
- </div></li><li class="listitem"><div class="para">
- <code class="option">--no-forwarders</code> means that there are no forwarders used with the DNS service, only root servers. Alternatively, a comma-separated list of forwarders can be given, using the <code class="option">--forwarders</code> option.
- </div></li><li class="listitem"><div class="para">
- Reverse DNS is configured automatically. It is possible to disable reverse DNS by using the <code class="option">--no-reverse</code> option.
- </div></li></ul></div></div><div class="section" id="bind-dyndb-ldap-config"><div class="titlepage"><div><div><h2 class="title" id="bind-dyndb-ldap-config">10.3. Configuring the bind-dyndb-ldap Plug-in</h2></div></div></div><div class="para">
- The <code class="filename">bind-dyndb-ldap</code> system plug-in contains a DNS record cache for zones and a history of successful DNS resolutions. Maintaiing the cache improves lookup performance in the Directory Server because it is not necessary to query the directory services every time there is a new DNS request.
- </div><div class="para">
- When this plug-in is intalled and FreeIPA is configured to manage DNS, then a new configuration section is added to the plug-in configuration.
- </div><div class="example" id="ex.bind-dyndb-ldap"><h6>Example 10.1. Default dynamic-db Configuration</h6><div class="example-contents"><pre class="screen">dynamic-db "ipa" {
- library "ldap.so";
- arg "uri ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket";
- arg "base cn=dns, dc=example,dc=com";
- arg "fake_mname server.example.com.";
- arg "auth_method sasl";
- arg "sasl_mech GSSAPI";
- arg "sasl_user DNS/server.example.com";
-};
-</pre></div></div><br class="example-break" /><div class="para">
- This configuration uses implied default values for <span class="emphasis"><em>other</em></span> plug-in behaviors, like how long it maintains the cache. The assumed, default configuration can be changed by adding arguments to the <code class="command">dynamic-db "ipa"</code> entry.
- </div><pre class="screen">arg "<em class="replaceable"><code>argument value</code></em>";</pre><div class="para">
- The additional parameters are listed in <a class="xref" href="#tab.bind-dyndb-ldap-param">Table 10.2, “Additional bind-dyndb-ldap Configuration Parameters”</a>.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Both cache updates and new zone detection are usually done when the name service configuration is reloaded:
- </div><pre class="screen"># rndc reload</pre></div></div><div class="para">
- To improve DNS performance, it may be necessary to change the cache setting. By default, DNS records are kept in cache and considered valid for 120 seconds. This means that if a DNS record changes, it will not (necessarily) be propogated to the name server for up to 120 seconds. If the Directory Server has a high traffic volume or if records do not change frequently, then the cache time can be increased to improve performance by adding the <em class="parameter"><code>cache_ttl</code></em> parameter.
- </div><pre class="screen">dynamic-db "ipa" {
-...
- arg "cache_ttl 1800";
-};</pre><div class="para">
- The other configurable behavior defines how the BIND service receives updates about new zones. The DNS service receives its information through the <code class="systemitem">bind-dyndb-ldap</code> plug-in. The plug-in resolves only zones were configured and enabled in the Directory Server when the name server started. When the name service restarts, the plug-in reloads its configuration and identifies any new zones. However, the plug-in can be used to search for zone changes actively either by refreshing the zone data on a schedule or by keeping a persistent connection open to the Directory Server and immediately catching any changes.
- </div><div class="para">
- Periodically checking for new zones is the same as <span class="emphasis"><em>refreshing</em></span> the zone configuration. This is set in the <em class="parameter"><code>zone_refresh</code></em> argument.
- </div><pre class="screen">dynamic-db "ipa" {
-...
- arg "zone_refresh 30";
-};</pre><div class="para">
- Alternatively, the plug-in can maintain an open connection to the server through a <span class="emphasis"><em>persistent search</em></span>. Persistent searches provide immediate notification of changes, unlike polling, and maintain a local cache of the configuration data. However, there can be some performance issues related to persistent searches, which are covered in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/persistent-search.html">Directory Server Administrator's Guide</a>.
- </div><div class="para">
- Persistent searches are disabled by default but can be enabled in the <em class="parameter"><code>psearch</code></em> argument:
- </div><pre class="screen">dynamic-db "ipa" {
-...
- arg "psearch yes";
-};</pre><div class="table" id="tab.bind-dyndb-ldap-param"><h6>Table 10.2. Additional bind-dyndb-ldap Configuration Parameters</h6><div class="table-contents"><table summary="Additional bind-dyndb-ldap Configuration Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
- Parameter
- </th><th>
- Description
- </th><th>
- Default Value
- </th></tr></thead><tbody><tr><td>
- cache_ttl
- </td><td>
- Checks the DNS configuration in the Directory Server for new zones.
- </td><td>
- 120 (seconds)
- </td></tr><tr><td>
- zone_refresh
- </td><td>
- Checks the DNS configuration in the Directory Server for new zones.
- </td><td>
- 60 (seconds)
- </td></tr><tr><td>
- psearch
- </td><td>
- Enables persistent searches for the Directory Server so the BIND service immediately receives an update notification when a new DNS zone is added.
- </td><td>
- no
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="changing-forwarder"><div class="titlepage"><div><div><h2 class="title" id="changing-forwarder">10.4. Changing Recursive Queries Against Forwarders</h2></div></div></div><div class="para">
- The <code class="command">ipa-client-install</code> script sets a configuration statement in the <code class="filename">/etc/named.conf</code> file that allows name resolution against hosts that are outside the FreeIPA DNS domain. (This requires that the FreeIPA server be set up with DNS configured and with forwarders configured.) What this means is that any host is permitted to issue recursive queries against configured forwarders.
- </div><div class="para">
- This behavior can be changed by changed the <code class="command">allow-recursion</code> statement.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open the <code class="filename">/etc/named.conf</code> file.
- </div></li><li class="listitem"><div class="para">
- Reset the <code class="command">allow-recursion</code> statement. This is set to <code class="command">any</code> by default, which allows all hosts to resolve names against all forwarders.
- </div><pre class="screen"> forward first;
- forwarders { 10.16.36.29; };
- <strong class="userinput"><code>allow-recursion { any; };</code></strong></pre></li><li class="listitem"><div class="para">
- Restart the <code class="command">named</code> service.
- </div><pre class="screen">service named restart</pre></li></ol></div><div class="para">
- The name server documentation has more details on editing configuration statements.
- </div></div><div class="section" id="finding-dns-zones"><div class="titlepage"><div><div><h2 class="title" id="finding-dns-zones">10.5. Finding and Displaying DNS Zones</h2></div></div></div><div class="para">
- The first part of managing a DNS domain is simply knowing what the domain configuration is. This is done by finding and displaying DNS zone records.
- </div><div class="para">
- Finding and displaying records can be done using the <code class="command">dnszone-find</code> command. This command can be used either to return a list of all zones or to find a specific record based on any of the attirbutes in the zone entry. Using either the <code class="command">dnszone-find</code> or the <code class="command">dnszone-show</code> command lists the full start of authority (SOA) record for the DNS zone.
- </div><div class="para">
- At its simplest, simply running the <code class="command">dnszone-find</code> returns all of the zones for the DNS service:
- </div><pre class="screen">$ ipa dnszone-find
-
- Zone name: example.com
- Authoritative nameserver: server.example.com.
- Administrator e-mail address: root.server.example.com.
- SOA serial: 2011130701
- SOA refresh: 3600
- SOA retry: 900
- SOA expire: 1209600
- SOA minimum: 3600
- Active zone: TRUE
-
- Zone name: 1.2.3.in-addr.arpa.
- Authoritative nameserver: server.example.com.
- Administrator e-mail address: root.1.2.3.in-addr.arpa.
- SOA serial: 2011130701
- SOA refresh: 3600
- SOA retry: 900
- SOA expire: 1209600
- SOA minimum: 3600
- Active zone: TRUE
-----------------------------
-Number of entries returned 2
-----------------------------</pre><div class="para">
- Alternatively, the DNS zones can be filtered by searching for a particular attribute in the SOA record. For example, this searches for the <code class="command">example.com</code> zone by the hostname:
- </div><pre class="screen">$ ipa dnszone-find --name-server=server1.example.com</pre><div class="para">
- The <code class="command">dnszone-show</code> command is equivalent to the <code class="command">dnszone-find --name</code> command because it only displays the record for the specific zone by its fully-qualified domain name.
- </div><pre class="screen">$ ipa dnszone-show example.com</pre></div><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones"><div class="titlepage"><div><div><h2 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones">10.6. Adding DNS Zones</h2></div></div></div><a id="id3384003" class="indexterm"></a><div class="para">
- The <code class="command">ipa dnszone-add</code> command add a new zone to the DNS domain. At a minimum, this requires the name of the new subdomain:
- </div><pre class="screen">$ ipa dnszone-add <em class="replaceable"><code>domainName</code></em></pre><div class="para">
- If the name is not given, the script prompts for it. Other command-line options can also be passed with the <code class="command">ipa dnszone-add</code> command; these are described in .
- </div><div class="para">
- To add a zone entry:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Add the new zone. For example:
-<pre class="screen">$ ipa dnszone-add newserver.example.com --admin-email=admin at example.com --minimum=3000 --allow-dynupdate</pre>
-
- </div></li><li class="listitem"><div class="para">
- Reload the name service.
-<pre class="screen"># rndc reload</pre>
-
- </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- To make new zone records immediately resolvable without restarting the name service, enable persistent searches with the <code class="systemitem">named</code> service or configure the BIND service to poll the Directory Server automatically for zone changes. See <a class="xref" href="#bind-dyndb-ldap-config">Section 10.3, “Configuring the bind-dyndb-ldap Plug-in”</a>.
- </div></div></div></li></ol></div></div><div class="section" id="modifying-dns-zones"><div class="titlepage"><div><div><h2 class="title" id="modifying-dns-zones">10.7. Modifying DNS Zones</h2></div></div></div><div class="para">
- A zone is created with a certain amount of configuration, set to default values:
- </div><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
- idnsname: example.com
- idnssoamname: server.example.com.
- idnssoarname: root.server.example.com.
- idnssoaserial: 2011130701
- idnssoarefresh: 3600
- idnssoaretry: 900
- idnssoaexpire: 1209600
- idnssoaminimum: 3600
- idnsupdatepolicy: grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA;
- idnszoneactive: TRUE
- idnsallowdynupdate: TRUE
- nsrecord: server.example.com.
- objectclass: top
- objectclass: idnsrecord
- objectclass: idnszone
-</pre><div class="para">
- The zone can be created with additional attributes and values different from the default by passing additional options with the <code class="command">dnszeon-add</code> command. Likewise, attributes can be added or modified in the zone entry by passing the same attribute options with the <code class="command">dnszone-mod</code> command. These are listed in <a class="xref" href="#tab.zone-attr">Table 10.3, “Zone Attributes”</a>.
+ Use scripts to obtain the information and automatically create the corresponding FreeIPA entries.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create a script to retrieve data from the source. There are several ways to access this information, such as parsing an LDIF file or connecting to the NIS server and listing the information.
+ </div></li><li class="listitem"><div class="para">
+ Create a second script that runs through the FreeIPA command-line utilities to create all of the entries, using the NIS information as inputs.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Manually create the required netgroups, users, and hosts.
+ </div></li></ol></div></div></div></div><div xml:lang="en-US" class="chapter" id="user-pwdpolicy" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 11. Policy: Defining Password Policies</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-pwd-policy">11.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="#viewing-the_Password_Policy">11.2. Viewing Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#viewing-global">11.2.1. Viewing the Global Password Policy</a></span></dt><dt><span class="section"><a href="#viewing-group-pwd-policies">11.2.2. Viewing Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="#viewing-pwdpolicy-user">11.2.3. Viewing the Password Policy in Effect for a User</a></span></dt></dl></dd><dt><span class="section"><a href="#The_IPA_Password_Policy-Editing_the_Password_Policy">11.3. Editing the Globa
l Password Policy</a></span></dt><dd><dl><dt><span class="section"><a href="#edit-global-policy-ui">11.3.1. With the UI</a></span></dt><dt><span class="section"><a href="#edit-global-policy-cmd">11.3.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_Different_Password_Policies_for_Different_User_Groups">11.4. Creating Group-Level Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-group-policy-ui">11.4.1. With the Web UI</a></span></dt><dt><span class="section"><a href="#creating-group-policy-cmd">11.4.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#Setting_the_Priority_of_Password_Policies">11.5. Changing the Priority of Group Password Policies</a></span></dt><dt><span class="section"><a href="#Setting_Account-lockout_Policies">11.6. Setting Account Lockout Policies</a></span></dt><dt><span class="section"><a href="#Using_SSH_for_Password_Authentication">11.7.
Enabling a Password Change Dialog</a></span></dt></dl></div><div class="para">
+ All users must have a password which they use to authenticate to the Kerberos domain. FreeIPA defines and enforces rules about password complexity, password histories, and account lockouts in order to maintain security.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ FreeIPA, by default, does not expose passwords to clients, even hashed passwords, for system security.
+ </div></div></div><div class="section" id="about-pwd-policy"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-pwd-policy">11.1. About Password Policies and Policy Attributes</h2></div></div></div><div class="para">
+ A <span class="emphasis"><em>password policy</em></span> sets certain standards for passwords, such as the password complexity and the rules for changing passwords. A password policy minimizes the inherent risk of using passwords by ensuring that they meet adequate complexity standards to thwart brute force attacks and they are changed frequently enough to mitigate the risk of someone revealing or discovering a password.
</div><div class="para">
- If an attribute does not exist in the DNS zone entry, than the <code class="command">dnszone-mod</code> command adds the attribute. If the attribute exists, then it overwrites the current value with the specified value.
+ There are three main configuration areas that are defined within the password policy:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Strength or complexity requirements
+ </div></li><li class="listitem"><div class="para">
+ History
+ </div></li><li class="listitem"><div class="para">
+ Account lockout
+ </div></li></ul></div><div class="para">
+ The FreeIPA password policy is enforced jointly by the KDC and the LDAP server. While the password policy is set in the LDAP directory and is based on 389 Directory Server password policy attributes, the policy is ultimately constrained by the KDC password policy framework. The KDC policy is less flexible than the 389 Directory Server policy framework, so the FreeIPA password policy can only implement password policy elements supported in the KDC. Any other policy settings made within the 389 Directory Server are not visible or enforced in FreeIPA.
</div><div class="para">
- For example, to set a time to live for SOA records:
- </div><pre class="screen">$ ipa dnszone-mod server.example.com --ttl=1800</pre><div class="para">
- This adds a new attribute to the DNS zone entry:
- </div><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
- idnsname: example.com
- idnssoamname: server.example.com.
- idnssoarname: root.server.example.com.
- idnssoaserial: 2011130701
- idnssoarefresh: 3600
- idnssoaretry: 900
- idnssoaexpire: 1209600
- idnssoaminimum: 3600
- <strong class="userinput"><code>dnsttl: 1800</code></strong>
- idnsupdatepolicy: grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA;
- idnszoneactive: TRUE
- idnsallowdynupdate: TRUE
- nsrecord: server.example.com.
- objectclass: top
- objectclass: idnsrecord
- objectclass: idnszone
-</pre><div class="table" id="tab.zone-attr"><h6>Table 10.3. Zone Attributes</h6><div class="table-contents"><table summary="Zone Attributes" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
- Attribute
+ Password policies are assigned either globally or to groups in FreeIPA, not to individual users. The password policy is assigned a weight, so that if a user belongs to multiple groups with different password policies, the policy with the highest priority will take precedence.
+ </div><div class="para">
+ The different policy attributes that can be set are listed in <a class="xref" href="#tab.pwpolicy-attrs">Table 11.1, “Password Policy Settings”</a>.
+ </div><div class="table" id="tab.pwpolicy-attrs"><h6>Table 11.1. Password Policy Settings</h6><div class="table-contents"><table summary="Password Policy Settings" border="1"><colgroup><col class="col1" width="33%" /><col class="col2" width="33%" /><col class="col3" width="33%" /></colgroup><thead><tr><th>
+ Configuration Property
</th><th>
Command-Line Option
</th><th>
Description
- </th></tr></thead><tbody><tr><td>
- Zone name
- </td><td>
- --name
- </td><td>
- Sets the name of the zone.
- </td></tr><tr><td>
- Authoritative nameserver
- </td><td>
- --name-server
- </td><td>
- Sets the fully-qualified domain name of the DNS name server.
- </td></tr><tr><td>
- Administrator e-mail address
- </td><td>
- --admin-email
- </td><td>
- Sets the email address to use for the zone administrator. This defaults to the root account on the host.
- </td></tr><tr><td>
- SOA serial
- </td><td>
- --serial
- </td><td>
- Sets a version number for the SOA record file.
+ </th></tr></thead><tbody><tr><td colspan="3">
+ <span class="bold bold"><strong>Options for both the UI and CLI</strong></span>
</td></tr><tr><td>
- SOA refresh
+ Minimum Password Lifetime
</td><td>
- --refresh
+ --minlife
</td><td>
- Sets the interval, in seconds, for a secondary DNS server to wait before requesting updates from the primary DNS server.
+ Sets the minimum period of time, in hours, that a user's password must be in effect before the user can change it. This can prevent a user from changing a password and then immediately changing it to the original value. The default value is one hour.
</td></tr><tr><td>
- SOA retry
+ Maximum Password Lifetime
</td><td>
- --retry
+ --maxlife
</td><td>
- Sets the time, in seconds, to wait before retrying a failed refresh operation.
+ Sets the maximum period of time, in days, that a user's password can be in effect before it must be changed. The default value is 90 days.
</td></tr><tr><td>
- SOA expire
+ Minimum Number of Character Classes
</td><td>
- --expire
+ --minclasses
</td><td>
- Sets the time, in seconds, that a secondary DNS server will try to perform a refresh update before ending the operation attempt.
+ Sets the minimum number of different classes, or types, of character that must exist in a password before it is considered valid. For example, setting this value to 3 requires that any password must have characters from at least three categories in order to be approved. The default value is zero (0), meaning there are no required classes.
+ <div class="para">
+ There are six character classes:
+ </div>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Upper-case characters
+ </div></li><li class="listitem"><div class="para">
+ Lower-case characters
+ </div></li><li class="listitem"><div class="para">
+ Digits
+ </div></li><li class="listitem"><div class="para">
+ Special characters (for example, punctuation)
+ </div></li><li class="listitem"><div class="para">
+ 8-bit characters (characters whose decimal code starts at 128 or below)
+ </div></li><li class="listitem"><div class="para">
+ Number of repeated characters
+ </div><div class="para">
+ This weights in the opposite direction, so that if you have too many repeated characters you will not meet the quorum to satisfy the "level" expressed by <span class="property">krbPwdMinDiffChars</span>.
+ </div></li></ul></div>
+
</td></tr><tr><td>
- SOA minimum
+ Minimum Length of Password
</td><td>
- --minimum
+ --minlength
</td><td>
- Sets the minimum amount of time, in seconds, that data are kept in cache.
+ Sets the minimum number of characters for a password. The default value is eight characters.
</td></tr><tr><td>
- SOA time to live
+ Password History
</td><td>
- --ttl
+ --history
</td><td>
- Sets the maximum time, in seconds, that information is kept in the data cache.
+ Sets the number of previous passwords that are stored and which a user is prevented from using. For example, if this is set to ten, FreeIPA prevents a user from reusing any of their previous ten passwords. The default value is zero (0), which disables password history.
+ <div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Even with the password history set to zero, users cannot reuse a <span class="emphasis"><em>current</em></span> password.
+ </div></div></div>
+
+ </td></tr><tr><td colspan="3">
+ <span class="bold bold"><strong>Options for the CLI only</strong></span>
</td></tr><tr><td>
- SOA class
+ Priority
</td><td>
- --class
+ --priority
</td><td>
- Sets the type of record. This is almost always IN, which stands for Internet.
+ Sets the priority which determines which policy is in effect. The lower the number, the higher priority.
+ <div class="para">
+ Although this priority is required when the policy is first created in the UI, it cannot be reset in the UI. It can only be reset using the CLI.
+ </div>
+
</td></tr><tr><td>
- BIND update policy
+ Maximum Consecutive Failures
</td><td>
- --update-policy
+ --maxfail
</td><td>
- Sets the permissions allowed to clients in the DNS zone.
+ Specifies the maximum number of consecutive failures to input the correct password before the user's account is locked.
</td></tr><tr><td>
- Dynamic update
+ Fail Interval
</td><td>
- --allow-dynupdate
+ --failinterval
</td><td>
- Enables dynamic updates to DNS records for clients.
+ Specifies the period (in seconds) after which the failure count will be reset.
</td></tr><tr><td>
- Name server
+ Lockout Time
</td><td>
- --ip-address
+ --lockouttime
</td><td>
- Adds the DNS name server by its IP address.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates"><div class="titlepage"><div><div><h2 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates">10.8. Enabling Dynamic DNS Updates</h2></div></div></div><a id="id3264180" class="indexterm"></a><div class="para">
- Dynamic DNS updates are not enabled by default for new DNS zones in FreeIPA. If dynamic updates are not allowed, then it may not be possible for the <code class="command">ipa-client-install</code> script to join a client to the domain because it cannot add a DNS record pointing to the new client.
- </div><div class="para">
- To allow dynamic updates to the DNS zones, set the <code class="option">--allow-dynupdate</code> option.
- </div><pre class="screen">$ ipa dnszone-mod server.example.com --allow-dynupdate</pre></div><div class="section" id="enabling-zones"><div class="titlepage"><div><div><h2 class="title" id="enabling-zones">10.9. Enabling and Disabling Zones</h2></div></div></div><a id="id3090012" class="indexterm"></a><div class="para">
- Active zones can have clients added to them, are available for lookups, and are used by FreeIPA services like Kerberos. Deleting a DNS zone removes the zone entry and all the associated configuration.
+ Specifies the period (in seconds) for which a lockout is enforced.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="viewing-the_Password_Policy"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="viewing-the_Password_Policy">11.2. Viewing Password Policies</h2></div></div></div><div class="para">
+ There can be multiple password policies configured in FreeIPA. There is always a global policy, which is created with the server. Additional policies can be created for groups in FreeIPA.
</div><div class="para">
- There can be situations when it is necessary to remove a zone from activity without permanently removing the zone. This can be done by using the <code class="command">dnszone-disable</code> command.
+ The UI lists all of the group password policies and the global policy on the <span class="guilabel"><strong>Password Policies</strong></span> page.
</div><div class="para">
- For example:
- </div><pre class="screen">$ ipa dnszone-disable server.example.com</pre><div class="para">
- When the zone needs to be brought back online, it can be re-enabled using the <code class="command">dnszone-enable</code> command.
- </div></div><div class="section" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones"><div class="titlepage"><div><div><h2 class="title" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones">10.10. Adding Records to DNS Zones</h2></div></div></div><a id="id3130464" class="indexterm"></a><a id="id3130476" class="indexterm"></a><a id="id3130484" class="indexterm"></a><div class="para">
- FreeIPA supports several different types of DNS records, listed in <a class="xref" href="#tab.record-types">Table 10.4, “DNS Record Types”</a>.
- </div><a id="id3031530" class="indexterm"></a><a id="id3031541" class="indexterm"></a><div class="table" id="tab.record-types"><h6>Table 10.4. DNS Record Types</h6><div class="table-contents"><table summary="DNS Record Types" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><tbody><tr><td>
- A
- </td><td>
- DS
- </td><td>
- NSEC3PARAM
- </td></tr><tr><td>
- AAAA
- </td><td>
- HIP
- </td><td>
- PTR
- </td></tr><tr><td>
- A6
- </td><td>
- IPSECKEY
- </td><td>
- RRSIG
- </td></tr><tr><td>
- AFSDB
- </td><td>
- KX
- </td><td>
- RP
- </td></tr><tr><td>
- APL
- </td><td>
- LOC
- </td><td>
- SIG
- </td></tr><tr><td>
- CERT
- </td><td>
- MX
- </td><td>
- SPF
- </td></tr><tr><td>
- CNAME
- </td><td>
- NAPTR
- </td><td>
- SRV
- </td></tr><tr><td>
- DHCID
- </td><td>
- NS
- </td><td>
- SSHFP
- </td></tr><tr><td>
- DLV
- </td><td>
- NSEC
- </td><td>
- TA
- </td></tr><tr><td>
- DNAME
- </td><td>
- NSEC3
- </td><td>
- TXT
- </td></tr><tr><td>
- DNSKEY
- </td><td>
+ Using the CLI, both global and group-level password policies can be viewed using the <code class="command">pwpolicy-show</code> command. The CLI can also display the password policy in effect for a user.
+ </div><div class="section" id="viewing-global"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="viewing-global">11.2.1. Viewing the Global Password Policy</h3></div></div></div><div class="para">
+ The global password policy is created with the server. This applies to every user until a group-level password policy supersedes it.
+ </div><div class="para">
+ The default settings for the global password policy are listed in <a class="xref" href="#tab.default-global">Table 11.2, “Default Global Password Policy”</a>.
+ </div><div class="table" id="tab.default-global"><h6>Table 11.2. Default Global Password Policy</h6><div class="table-contents"><table summary="Default Global Password Policy" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Attribute
+ </th><th>
+ Value
+ </th></tr></thead><tbody><tr><td>
+ Max lifetime
+ </td><td>
+ 90
+ </td></tr><tr><td>
+ Max lifetime
+ </td><td>
+ 90 (days)
+ </td></tr><tr><td>
+ Min lifetime
+ </td><td>
+ 1 (hour)
+ </td></tr><tr><td>
+ History size
+ </td><td>
+ 0 (unset)
+ </td></tr><tr><td>
+ Character classes
+ </td><td>
+ 0 (unset)
+ </td></tr><tr><td>
+ Min length
+ </td><td>
+ 8
+ </td></tr><tr><td>
+ Max failures
+ </td><td>
+ 6
+ </td></tr><tr><td>
+ Failure reset interval
+ </td><td>
+ 60
+ </td></tr><tr><td>
+ Lockout duration
+ </td><td>
+ 600
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="viewing-global-pwdpolicy-u"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-global-pwdpolicy-u">11.2.1.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. The global password policy is defined by the <span class="guilabel"><strong>global_policy</strong></span> group. Click the group link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ The global policy is displayed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-global.png" width="444" /></div></div></li></ol></div></div><div class="section" id="viewing-global-pwdpolicy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-global-pwdpolicy-cmd">11.2.1.2. With the Command Line</h4></div></div></div><div class="para">
+ To view the global policy, simply run the <code class="command">pwpolicy-show</code> command with no arguments:
+ </div><pre class="screen">$ ipa pwpolicy-show
- </td><td>
+ Group: global_policy
+ Max lifetime (days): 90
+ Min lifetime (hours): 1
+ History size: 0
+ Character classes: 0
+ Min length: 8
+ Max failures: 6
+ Failure reset interval: 60
+ Lockout duration: 600</pre></div></div><div class="section" id="viewing-group-pwd-policies"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="viewing-group-pwd-policies">11.2.2. Viewing Group-Level Password Policies</h3></div></div></div><div class="section" id="viewing-group-pwdpolicy-u"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-group-pwdpolicy-u">11.2.2.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. Click the name of the group which is assigned the policy.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ The group policy is displayed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy2.png" width="444" /></div></div></li></ol></div></div><div class="section" id="viewing-group-pwdpolicy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-group-pwdpolicy-cmd">11.2.2.2. With the Command Line</h4></div></div></div><div class="para">
+ For a group-level password policy, specify the group name with the command:
+ </div><pre class="screen">$ ipa pwpolicy-show examplegroup
+
+ Group: global_policy
+ Max lifetime (days): 90
+ Min lifetime (hours): 1
+ History size: 3
+ Character classes: 4
+ Min length: 8
+ Max failures: 3
+ Failure reset interval: 15
+ Lockout duration: 150</pre></div></div><div class="section" id="viewing-pwdpolicy-user"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="viewing-pwdpolicy-user">11.2.3. Viewing the Password Policy in Effect for a User</h3></div></div></div><div class="para">
+ A user may belong to multiple groups, each with their own separate password policies. These policies are not additive. Only one policy is in effect at a time and it applies to all password policy attributes. To see which policy is in effect for a specific user, the <code class="command">pwpolicy-show</code> command can be run for a specific user. The results also show <span class="emphasis"><em>which</em></span> group policy is in effect for that user.
+ </div><pre class="screen">$ ipa pwpolicy-show jsmith
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- The <code class="command">ipa dnsrecord-add</code> command adds records to DNS zones, based on the type. Adding a record has the same basic command format:
- </div><a id="id4680073" class="indexterm"></a><a id="id4680085" class="indexterm"></a><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>domainName urlLabel</code></em> --<em class="replaceable"><code>recordType</code></em>--rec <em class="replaceable"><code>record</code></em></pre><div class="para">
- The <span class="emphasis"><em>recordType</em></span> is an identifier, such as <code class="command">a</code> for A or IPv4 records. The <span class="emphasis"><em>record</em></span> value is the actual entry, which has a value corresponding to the record type.
+ Group: admins
+ Max lifetime (days): 90
+ Min lifetime (hours): 1
+ History size: 0
+ Character classes: 0
+ Min length: 8
+ Max failures: 6
+ Failure reset interval: 60
+ Lockout duration: 600</pre></div></div><div class="section" id="The_IPA_Password_Policy-Editing_the_Password_Policy"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="The_IPA_Password_Policy-Editing_the_Password_Policy">11.3. Editing the Global Password Policy</h2></div></div></div><div class="para">
+ A password policy can be selective; it may only define certain elements. A <span class="emphasis"><em>global</em></span> password policy sets defaults that are used for every user entry, unless a group policy takes priority.
+ </div><div class="para">
+ A global policy always exists, so there is no reason to add a global password policy.
+ </div><div class="section" id="edit-global-policy-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="edit-global-policy-ui">11.3.1. With the UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. The global password policy is defined by the <span class="guilabel"><strong>global_policy</strong></span> group. Click the group link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ The group policy is displayed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-global.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Change the policy fields. Leaving a field blank removes that attribute from the password policy configuration.
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max lifetime</em></span> sets the maximum amount of time, in days, that a password is valid before a user must reset it.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min lifetime</em></span> sets the minimum amount of time, in hours, that a password must remain in effect before a user is permitted to change it. This prevents a user from attempting to change a password back immediately to an older password or from cycling through the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>History size</em></span> sets how many previous passwords are stored. A user cannot re-use a password that is still in the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Character classes</em></span> sets the different categories of character that must be used in the password. For example, a character class can be a number, special character, or capital; the complete list of categories is in <a class="xref" href="#tab.pwpolicy-attrs">Table 11.1, “Password Policy Settings”</a>. This is part of setting the complexity requirements.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min length</em></span> sets how many characters must be in a password. This is part of setting the complexity requirements.
+ </div></li></ul></div></li></ol></div></div><div class="section" id="edit-global-policy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="edit-global-policy-cmd">11.3.2. With the Command Line</h3></div></div></div><div class="para">
+ To edit the global password policy, use the <code class="command">pwpolicy-mod</code> command with the attributes to change:
+ </div><pre class="screen">ipa pwpolicy-mod <em class="replaceable"><code>--attribute=value</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen">ipa pwpolicy-mod --lockouttime=300 --history=5 --minlength=8</pre></div></div><div class="section" id="Setting_Different_Password_Policies_for_Different_User_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_Different_Password_Policies_for_Different_User_Groups">11.4. Creating Group-Level Password Policies</h2></div></div></div><div class="para">
+ Group-level policies override the global policies and offer specific policies that only apply to group members. Password policies are not cumulative. Either a group policy or the global policy is in effect for a user or group, but not both simultaneously.
+ </div><div class="para">
+ Group-level policies do not exist by default, so they must be created manually.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The <code class="command">ipa dnsrecord-add</code> command only creates forward entries, not reverse entries.
- </div></div></div><a id="id3246365" class="indexterm"></a><a id="id3246377" class="indexterm"></a><div class="example" id="ex.ipv4-record"><h6>Example 10.2. IPv4 Record</h6><div class="example-contents"><div class="para">
- Type A resource records map hostnames to IPv4 addresses. The <span class="emphasis"><em>record</em></span> value for these commands, then, is a standard IPv4 address. The URL label is usually www.
-<pre class="screen">$ ipa dnsrecord-add example.com www --a-rec 10.64.14.165</pre>
- This creates the record <code class="uri">www.example.com</code> with the IP address 10.64.14.165.
- </div><div class="para">
- More information about A records is in <a href="http://tools.ietf.org/html/rfc1035">RFC 1035</a>.
- </div></div></div><br class="example-break" /><a id="id3207503" class="indexterm"></a><a id="id3207515" class="indexterm"></a><div class="example" id="ex.ipv6-record"><h6>Example 10.3. IPv6 Record</h6><div class="example-contents"><div class="para">
- Type AAAA resource records (<em class="firstterm">quad-A records)</em> map hostnames to IPv6 addresses. The <span class="emphasis"><em>record</em></span> value for these commands is an IPv6 address. As with Type A records, the URL label is usually www.
-<pre class="screen">$ ipa dnsrecord-add example.com www --aaaa-rec fe80::20c:29ff:fe02:a1b3</pre>
- This creates the record <code class="uri">www.example.com</code> with the IP address fe80::20c:29ff:fe02:a1b3. More information about AAAA records is in <a href="http://tools.ietf.org/html/rfc3596">RFC 3596</a>.
- </div></div></div><br class="example-break" /><a id="id3124519" class="indexterm"></a><a id="id3124530" class="indexterm"></a><div class="example" id="ex.srv-record"><h6>Example 10.4. SRV Record</h6><div class="example-contents"><div class="para">
- <em class="firstterm">Service (SRV) resource records</em> map service names to the DNS name of the server that is providing that particular service. For example, this record type can map a service like an LDAP directory to the DNS server which manages it.
- </div><div class="para">
- As with Type A and Type AAAA records, SRV records specify a way to connect to and identify the service, but the record format is different.
+ It is not possible to set a password policy for a non-existent group.
+ </div></div></div><div class="section" id="creating-group-policy-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-group-policy-ui">11.4.1. With the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. The global password policy is defined by the <span class="guilabel"><strong>global_policy</strong></span> group. Click the group link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top.
+ </div></li><li class="listitem"><div class="para">
+ In the pop-up box, select the group for which to create the password policy.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy1a.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Set the priority of the policy. The higher the number, the lower the priority.
+ </div><div class="para">
+ Only one password policy is in effect for a user, and that is the highest priority policy.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy1b.png" /></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The priority cannot be changed in the UI once the policy is created.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button so that the policy form immediately opens.
+ </div></li><li class="listitem"><div class="para">
+ Set the policy fields. Leaving a field blank means that attribute is not added the password policy configuration.
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max lifetime</em></span> sets the maximum amount of time, in days, that a password is valid before a user must reset it.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min lifetime</em></span> sets the minimum amount of time, in hours, that a password must remain in effect before a user is permitted to change it. This prevents a user from attempting to change a password back immediately to an older password or from cycling through the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>History size</em></span> sets how many previous passwords are stored. A user cannot re-use a password that is still in the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Character classes</em></span> sets the different categories of character that must be used in the password. For example, a character class can be a number, special character, or capital; the complete list of categories is in <a class="xref" href="#tab.pwpolicy-attrs">Table 11.1, “Password Policy Settings”</a>. This is part of setting the complexity requirements.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min length</em></span> sets how many characters must be in a password. This is part of setting the complexity requirements.
+ </div></li></ul></div></li></ol></div></div><div class="section" id="creating-group-policy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-group-policy-cmd">11.4.2. With the Command Line</h3></div></div></div><div class="para">
+ Password policies are added with the <code class="command">pwpolicy-add</code> command.
+ </div><pre class="screen">$ ipa pwpolicy-add <em class="replaceable"><code>groupName --attribute-value</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa pwpolicy-add examplegroup --minlife=7 --maxlife=49 --history= --priority=1
+Group: examplegroup
+Max lifetime (days): 49
+Min lifetime (hours): 7
+Priority: 1
+</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Setting an attribute to a blank value effectively removes that attribute from the password policy.
+ </div></div></div></div></div><div class="section" id="Setting_the_Priority_of_Password_Policies"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_the_Priority_of_Password_Policies">11.5. Changing the Priority of Group Password Policies</h2></div></div></div><div class="para">
+ A user may belong to multiple groups, each with different password policies. Since only one policy can be in effect for a user, there has to be a method to assign precedence to policies. That is done through <span class="emphasis"><em>priority</em></span>.
+ </div><div class="para">
+ The highest priority is zero (0). The lower the number, the higher the priority.
+ </div><div class="para">
+ This is set initially when the password policy is created. It can be modified after the policy is created by resetting the <code class="option">--priority</code> option.
+ </div><pre class="screen">$ ipa pwpolicy-mod examplegroup --priority=10</pre><div class="para">
+ When a user belongs to multiple groups, the group password policy with the lowest number has the priority.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The password policy priority cannot be changed in the UI after it is created.
+ </div></div></div></div><div class="section" id="Setting_Account-lockout_Policies"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_Account-lockout_Policies">11.6. Setting Account Lockout Policies</h2></div></div></div><div class="para">
+ A brute force attack occurs when a malefactor attempts to guess a password by simply slamming the server with multiple login attempts. An account lockout policy prevents brute force attacks by blocking an account from logging into the system after a certain number of login failures — even if the correct password is subsequently entered.
+ </div><div class="para">
+ There are three parts to the account lockout policy:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The number of failed login attempts before the account is locked (<code class="option">--maxfail</code>).
+ </div></li><li class="listitem"><div class="para">
+ How long an account is locked after the max number of failures is reached (<code class="option">--lockouttime</code>). This is in seconds.
+ </div></li><li class="listitem"><div class="para">
+ The time after a failed login attempt before the counter resets (<code class="option">--failinterval</code>). Since mistakes do happen honestly, the count of failed attempts is not kept forever; it naturally lapses after a certain amount of time. This is in seconds.
+ </div></li></ul></div><div class="para">
+ These can all be set when a password policy is created with <code class="command">pwpolicy-add</code> or added later using <code class="command">pwpolicy-mod</code>. For example:
+ </div><pre class="screen">$ ipa pwpolicy-mod examplegroup --maxfail=4 --lockouttime=600 --failinterval=30</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The account lockout policy priority cannot be set or modified in the UI.
+ </div></div></div></div><div class="section" id="Using_SSH_for_Password_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Using_SSH_for_Password_Authentication">11.7. Enabling a Password Change Dialog</h2></div></div></div><div class="para">
+ To use password authentication with new users rather than Kerberos tickets and GSS-API, enable <span class="emphasis"><em>challenge-response</em></span> authentication. Using challenge-response authentication enables FreeIPA to open a password change dialog box. This is not enabled by default because some SSL clients may not support challenge-response authentication, and it is needed only if the password has expired.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <code class="filename">/etc/ssh/sshd_config</code> file.
+ </div></li><li class="listitem"><div class="para">
+ Set <em class="parameter"><code>ChallengeResponseAuthentication</code></em> to <code class="literal">yes</code>.
+ </div></li></ol></div></div></div><div xml:lang="en-US" class="chapter" id="kerberos" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 12. Policy: Managing the Kerberos Domain</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-kerberos">12.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href="#about-principal-names">12.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="#about-keytabs">12.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="#kerb-policies">12.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="#kerb-policies-global">12.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="#user-ticket-policies">12.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Authentication-Refreshing_Kerbero
s_Tickets">12.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="#kerberos-pwd-cache">12.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="#removing-keytabs">12.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="#Kerberos_Errors">12.6. Troubleshooting Kerberos Errors</a></span></dt></dl></div><div class="para">
+ Kerberos authentication is the core of authentication within the FreeIPA domain. The FreeIPA server actually runs a Kerberos server within it, and this Kerberos server can be configured for custom policies for managing tickets and keytabs.
+ </div><div class="para">
+ For more information on Kerberos concepts, see the MIT Kerberos documentation, <a href="http://web.mit.edu/kerberos/www/">http://web.mit.edu/kerberos/www/</a>.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ FreeIPA has its own command-line tools to use to manage Kerberos policies. <span class="bold bold"><strong>Do not</strong></span> use <code class="command">kadmin</code> or <code class="command">kadmin.local</code> to manage FreeIPA Kerberos settings.
+ </div></div></div><div class="section" id="about-kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-kerberos">12.1. About Kerberos</h2></div></div></div><a id="id589427" class="indexterm"></a><div class="para">
+ Kerberos provides an authentication layer between services and users. Kerberos centralizes authentication into a single location; a user authenticates to the Kerberos server, and then when that user attempts to access any resource on the network, that resource can check the <span class="emphasis"><em>key distribution center</em></span> (KDC) for the stored user credentials. This allows users to access multiple resources without having to supply credentials separately to each and every one.
+ </div><div class="para">
+ All of the users and services, combined, and all of the KDCs and Kerberos servers that are aware of each other constitute a <span class="emphasis"><em>realm</em></span>. Each user, machine, and service within the realm is identified by a unique name called the <span class="emphasis"><em>principal</em></span>. The user or service uses the principal and a verifying credential (usually a password) to authenticate to the KDC. The credential that is shared with the KDC is a <span class="emphasis"><em>key</em></span> and it is stored in a file called a <span class="emphasis"><em>key table</em></span> or <span class="emphasis"><em>keytab</em></span>.
+ </div><div class="para">
+ When the KDC verifies the user's identity, it issues a <span class="emphasis"><em>ticket</em></span>. The ticket is a long-term pass to any service and machine on the realm. The KDC issues the user a special kind of ticket called a <span class="emphasis"><em>ticket-granting ticket</em></span> (TGT). Whenever the user tries to access a resource within the Kerberos realm, the resource sends a request for a ticket specifically for it. The TGT is used to issue a resource-specific ticket that the resource then uses to authenticate the user and grant access.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ When a FreeIPA client is first configured, the host principal is automatically retrieved by the setup script and stored in the <code class="filename">/etc/krb5.keytab</code> file. This host principal is stored within the host record so that local service commands cannot be used with this principal. This prepares the client to function in the FreeIPA realm.
+ </div></div></div><div class="section" id="about-principal-names"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-principal-names">12.1.1. About Principal Names</h3></div></div></div><div class="para">
+ The principal identifies not only the user or service, but also the realm that that entity belongs to. A principal name has two parts, the identifier and the realm:
+ </div><pre class="screen"><em class="replaceable"><code>identifier</code></em>@<em class="replaceable"><code>REALM</code></em></pre><div class="para">
+ For a user, the <span class="emphasis"><em>identifier</em></span> is only the Kerberos username. For a service, the <span class="emphasis"><em>identifier</em></span> is a combination of the service name and the hostname of the machine it runs on:
+ </div><pre class="screen"><em class="replaceable"><code>service/FQDN</code></em>@<em class="replaceable"><code>REALM</code></em></pre><div class="para">
+ The <span class="emphasis"><em>service</em></span> name is a case-sensitive string that is specific to the service type, like <code class="command">host</code>, <code class="command">ldap</code>, <code class="command">http</code>, and <code class="command">dns</code>. Not all services have obvious principal identifiers; the <code class="systemitem">sshd</code> daemon, for example, uses the host service principal.
</div><div class="para">
- The <span class="emphasis"><em>urlLabel</em></span> identifies the service type and the connection protocol, in the format <span class="emphasis"><em>_service._protocol</em></span>.
+ The host principal is usually stored in <code class="filename">/etc/krb5.keytab</code>.
</div><div class="para">
- The <span class="emphasis"><em>record</em></span> information has the format <span class="emphasis"><em>"priority weight port target"</em></span>.
- </div><pre class="screen">$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="0 100 389 server1.example.com"
+ When Kerberos requests a ticket, it always resolves a CNAME to the corresponding DNS A records. When service or host principals are created, then it must use the A record. For example, a CNAME is mapped to a slightly different A record:
+ </div><pre class="screen">CNAME www.example.com -> A name web-01.example.com</pre><div class="para">
+ A service attempts to connect to the host using its CNAME:
+ </div><pre class="screen">$ ssh www.example.com</pre><div class="para">
+ The Kerberos server requests a ticket for the resolved A name, <code class="command">host/web-01.example.com at EXAMPLE.COM</code>, so that must be the host principal used.
+ </div></div><div class="section" id="about-keytabs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-keytabs">12.1.2. About Protecting Keytabs</h3></div></div></div><div class="para">
+ To protect keytab files, reset the permissions and ownership to restrict access to the files to only the keytab owner. : For example, set the owner of the Apache keytab (<code class="filename">/etc/httpd/conf/ipa.keytab</code>) to <code class="literal">httpd</code> and the mode to <code class="literal">0600</code>.
+ </div></div></div><div class="section" id="kerb-policies"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="kerb-policies">12.2. Setting Kerberos Ticket Policies</h2></div></div></div><a id="id780269" class="indexterm"></a><a id="id780038" class="indexterm"></a><div class="para">
+ The Kerberos <span class="emphasis"><em>ticket policy</em></span> sets basic restrictions on managing tickets within the Kerberos realm, such as the maximum ticket lifetime and the maximum renewal age (the period during which the ticket is renewable).
+ </div><div class="para">
+ The Kerberos ticket policy is set globally so that it applies to every ticket issued within the realm. FreeIPA also has the ability to set user-level ticket policies which override the global policies. This can be used, for example, to set extended expiration times for administrators or to set shorter expiration times for some employees.
+ </div><div class="section" id="kerb-policies-global"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="kerb-policies-global">12.2.1. Setting Global Ticket Policies</h3></div></div></div><a id="id898251" class="indexterm"></a><div class="section" id="kerb-policies-global-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="kerb-policies-global-ui">12.2.1.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Kerberos Ticket Policy</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Change the ticket lifetime policies.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/krb-ticket-policy.png" width="444" /></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max renew</em></span> sets the period after a ticket expires that it can be renewed.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max life</em></span> sets the active period (lifetime) of a Kerberos ticket.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the policy page.
+ </div></li><li class="listitem"><div class="para">
+ Restart the KDC.
+ </div><pre class="screen"># service krb5kdc restart</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Any change to the global Kerberos ticket policy requires a restart of the KDC for the changes to take effect.
+ </div></div></div></li></ol></div></div><div class="section" id="kerb-policies-global-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="kerb-policies-global-cmd">12.2.1.2. From the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">ipa krbtpolicy-mod</code> command modifies the policy, while the <code class="command">ipa krbtpolicy-reset</code> command resets the policy to the default values.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen"># ipa krbtpolicy-mod --maxlife=3600 --maxrenew=18000
+ Max life: 3600
+ Max renew: 18000</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Any change to the global Kerberos ticket policy requires a restart of the KDC for the changes to take effect. Restart the KDC:
+<pre class="screen"># service krb5kdc restart</pre>
-$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="1 100 389 server2.example.com"</pre><div class="para">
- More information about SRV records is in <a href="http://tools.ietf.org/html/rfc2782">RFC 2782</a>.
- </div></div></div><br class="example-break" /><a id="id3161676" class="indexterm"></a><a id="id3161688" class="indexterm"></a><div class="example" id="ex.ptr-record"><h6>Example 10.5. PTR Record</h6><div class="example-contents"><div class="para">
- A pointer record type (PTR) record adds a <span class="emphasis"><em>reverse</em></span> DNS record, which maps an IP address to a domain name, rather than the other way around.
- </div><div class="para">
- All reverse DNS lookups for OPv4 addresses user reverse entries that are defined in the <code class="command">in-addr.arpa.</code> domain. The reverse address, in human-readable form, is the exact reverse of the regular IP address, with the <code class="command">in-addr.arpa.</code> domain appended to it. For example, for the IP address <code class="systemitem">192.0.1.2</code>, the reverse address is <code class="systemitem">2.1.0.192..in-addr.arpa</code>.
- </div><div class="para">
- When adding the reverse DNS record, the format of the <code class="command">dnsrecord-add</code> command is also reverse, compared to the usage for adding regular DNS entries:
- </div><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>reverseIpAddress recordId</code></em> --ptr-rec <em class="replaceable"><code>FQDN</code></em></pre><div class="para">
- The <span class="emphasis"><em>recordId</em></span> is the numeric identifier to use for the entry in the zone.
+ </div></div></div></div></div><div class="section" id="user-ticket-policies"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="user-ticket-policies">12.2.2. Setting User-Level Ticket Policies</h3></div></div></div><a id="id601842" class="indexterm"></a><div class="para">
+ User-level Kerberos ticket policies are set using the same commands as global policies, but the user is specified in the command.
</div><div class="para">
- For example, this adds a record with an ID of 4 for <code class="command">server2.example.com</code>:
- </div><pre class="screen">$ ipa dnsrecord-add 2.1.0.192..in-addr.arpa 4 --ptr-rec server2.example.com.</pre><div class="para">
- More information about PTR records is in <a href="http://tools.ietf.org/html/rfc1035#page-12">RFC 1035</a>.
- </div></div></div><br class="example-break" /></div><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones"><div class="titlepage"><div><div><h2 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">10.11. Deleting Records from DNS Zones</h2></div></div></div><a id="id2996396" class="indexterm"></a><a id="id2996407" class="indexterm"></a><div class="para">
- Records are removed from the zone using the <code class="command">ipa dnsrecord-del</code> command. As with adding records, records are deleted using an option that specifies the type of record (<code class="option">--</code><span class="emphasis"><em>recordType</em></span><code class="option">-rec</code>) and the record value.
+ For example:
+ </div><pre class="screen"># ipa krbtpolicy-mod jsmith --maxlife=3600
+ Max life: 3600</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ User-level policies take effect immediately on the next requested ticket (such as running <code class="command">kinit</code>), without having to restart the KDC service.
+ </div></div></div></div></div><div class="section" id="Configuring_Authentication-Refreshing_Kerberos_Tickets"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_Authentication-Refreshing_Kerberos_Tickets">12.3. Refreshing Kerberos Tickets</h2></div></div></div><div class="para">
+ Kerberos keys are analogous to passwords. Like passwords, security policies may require that Kerberos tickets are manually refreshed after a specified interval.
</div><div class="para">
- For example, to remove the A type record:
-<pre class="screen">$ ipa dnsrecord-del example.com www --a-rec 10.64.14.213</pre>
+ The version of the key is shown in its <span class="emphasis"><em>key version number</em></span> (KVNO). Refreshing (also called rotating) the principal's key increments the KVNO in the keytab entry. When a key is refreshed, a new entry is added to the keytab with a higher KVNO. The original key remains in the keytab but is no longer used to issue tickets.
+ </div><div class="para">
+ Each keytab for the FreeIPA realm has an entry in the FreeIPA LDAP server, which includes its last change time. The principals which need to be refreshed can be regenerated using the <code class="command">ipa-getkeytab</code> command.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="command">ipa-getkeytab</code> command does not delete the old keytab in case it already exists in the file.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Find all keytabs issued before the requisite date. For example, this looks for any principals created between midnight on January 1, 2010, and 11:59 PM on December 31, 2010:
+ </div><pre class="screen"># ldapsearch -x -b "cn=computers,cn=accounts,dc=example,dc=com" "(&(krblastpwdchange>=20100101000000)(krblastpwdchange<=20101231235959))" dn krbprincipalname
+
+# ldapsearch -x -b "cn=services,cn=accounts,dc=example,dc=com" "(&(krblastpwdchange>=20100101000000)(krblastpwdchange<=20101231235959))" dn krbprincipalname</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Host (machine) principals are stored under the <code class="command">cn=computers,cn=accounts,dc=example,dc=com</code> subtree.
+ </div></li><li class="listitem"><div class="para">
+ Service principals are stored under the <code class="command">cn=services,cn=accounts,dc=example,dc=com</code> subtree.
+ </div></li><li class="listitem"><div class="para">
+ Filter by the last change date (<em class="parameter"><code>krblastpwdchange</code></em>).
+ </div></li><li class="listitem"><div class="para">
+ Limit the search result information to only the entry name and principal by specifying the <em class="parameter"><code>dn krbprincipalname</code></em> attributes.
+ </div></li></ul></div><div class="para">
+ Dates are expressed in YYYYMMDD format, and times in HHMMSS format (GMT).
+ </div></li><li class="listitem"><div class="para">
+ Retrieve a new keytab for the principal using the <code class="command">ipa-getkeytab</code> command. This requires the location of the original keytab for the service or host (<code class="option">-k</code>), the principal (<code class="option">-p</code>), and the FreeIPA server hostname (<code class="option">-s</code>).
+ </div><div class="para">
+ For example, this refreshes the host principal with a keytab in the default location of <code class="filename">/etc/krb5.keytab</code>:
+<pre class="screen"># ipa-getkeytab -p host/client.example.com at EXAMPLE.COM -s ipa.example.com -k /etc/krb5.keytab</pre>
+
+ </div><div class="para">
+ This refreshes the keytab for the Apache service, with a keytab in the default location of <code class="filename">/etc/httpd/conf/ipa.keytab</code>:
+<pre class="screen"># ipa-getkeytab -p HTTP/client.example.com at EXAMPLE.COM -s ipa.example.com -k /etc/httpd/conf/ipa.keytab</pre>
+
+ </div></li><li class="listitem"><div class="para">
+ Regenerate the keytab using <code class="command">ipa-getkeytab</code> for every service.
+ </div></li></ol></div><div class="para">
+ The <code class="command">klist</code> command displays the new key version number for the refreshed keytab. The original keytab still exists in the database, and it is listed with the previous KVNO.
+<pre class="screen"># klist -kt /etc/krb5.keytab
+Keytab: WRFILE:/etc/krb5.keytab
+KVNO Timestamp Principal
+---- ----------------- --------------------------------------------------------
+ 1 06/09/10 11:23:01 host/client.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
+ 2 06/09/11 05:58:47 host/client.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
+ 1 03/09/11 13:57:16 krbtgt/EXAMPLE.COM at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
+ 1 03/09/11 13:57:16 HTTP/ipa.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
+ 1 03/09/11 13:57:16 ldap/ipa.example.com at EXAMPLE.COM(aes256-cts-hmac-sha1-96)
+</pre>
</div><div class="para">
- Alternatively, using the <code class="option">--del-all</code> option removes all associated records for the zone.
- </div></div><div class="section" id="dns-resolve"><div class="titlepage"><div><div><h2 class="title" id="dns-resolve">10.12. Resolving Hostnames in the FreeIPA Domain</h2></div></div></div><div class="para">
- It is possible to check the DNS entries for FreeIPA domain members using the <code class="command">dns-resolve</code> command. If the record exists and is properly formatted in the DNS configuration, then the command returns the DNS record. If not, the command returns an error, that the hostname is not recognized within the DNS service.
- </div><pre class="screen">$ipa dns-resolve server1.example.com</pre><div class="para">
- This can be helpful with troubleshooting connection problems between servers, clients, and services.
- </div></div></div><div xml:lang="en-US" class="chapter" id="hosts" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-hosts">11.1. About Hosts and Services in FreeIPA</a></span></dt><dt><span class="section"><a href="#adding-host-entry">11.2. Adding Host Entries</a></span></dt><dt><span class="section"><a href="#managing-services">11.3. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-service-entry">11.3.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="#request-service-service">11.3.2. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">11.3.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a hr
ef="#Creating_an_IPA_Service-Using_NSS">11.3.4. Storing Certificates in NSS Databases</a></span></dt></dl></dd><dt><span class="section"><a href="#host-disable">11.4. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="#host-groups">11.5. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-host-groups">11.5.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="#hg-adding-members">11.5.2. Adding Group Members</a></span></dt></dl></dd><dt><span class="section"><a href="#Extending_the_Permissions_of_IPA_Managed_Hosts">11.6. Extending the Permissions of FreeIPA Managed Hosts</a></span></dt><dd><dl><dt><span class="section"><a href="#Delegating_Service_Management">11.6.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="#Delegating_Host_Management">11.6.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="#accessing-service">11.6.3. A
ccessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="#configuring-host-access">11.7. Configuring Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="#HBAC_Service_Groups">11.7.1. Defining Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dt><span class="section"><a href="#hbac-rules">11.7.2. Setting Host-Based Access Control Rules</a></span></dt><dt><span class="section"><a href="#hbac-testing">11.7.3. Testing Host-Based Access Control Rules</a></span></dt></dl></dd></dl></div><div class="para">
- Clients within the FreeIPA domain are simply machines (hosts) and services that are recognized by and participate in domain services. Managing hosts and services within the FreeIPA environment allows clear relationships to be established between the domain hosts and services and can be used to create a hierarchy of management (called <span class="emphasis"><em>delegation</em></span>).
- </div><div class="section" id="about-hosts"><div class="titlepage"><div><div><h2 class="title" id="about-hosts">11.1. About Hosts and Services in FreeIPA</h2></div></div></div><div class="para">
- The basic function of an enrollment process is to create a <span class="emphasis"><em>host</em></span> entry for the client machine in the FreeIPA directory. This host entry is used to establish relationships between other hosts and even services within the domain. These relationships are part of <span class="emphasis"><em>delegating</em></span> authorization and control to hosts within the domain.
+ Tickets issued against the old keytab continue to work, while new tickets are issued using the key with the highest KVNO. This avoids any disruption to system operations.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Some services, such as NFSv4, only support a limited set of encryption types. Pass the appropriate arguments to the <code class="command">ipa-getkeytab</code> command to configure the keytab properly.
+ </div></div></div></div><div class="section" id="kerberos-pwd-cache"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="kerberos-pwd-cache">12.4. Caching Kerberos Passwords</h2></div></div></div><a id="id869747" class="indexterm"></a><a id="id869759" class="indexterm"></a><div class="para">
+ A machine may not always be on the same network as the FreeIPA domain; for example, a machine may need to be logged into a VPN before it can access the FreeIPA domain. If a user logs into a system when it is offline and then later attempts to connect to FreeIPA services, then the user is blocked because there is no FreeIPA Kerberos ticket for that user. FreeIPA works around that limitation by using SSSD to store the Kerberos passwords in the SSSD cache.
</div><div class="para">
- A host entry contains all of the information about the client within FreeIPA:
+ This is configured by default by the <code class="command">ipa-client-install</code> script. A configuration parameter is added to the <code class="filename">/etc/sssd/sssd.conf</code> file which specifically instructs SSSD to store those Kerberos passwords for the FreeIPA domain:
+ </div><pre class="programlisting"><span class="perl_String">[</span><span class="perl_Reserved">domain</span><span class="perl_String">/example.com]</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">cache_credentials = True</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">ipa_domain = example.com</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">id_provider = ipa</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">auth_provider = ipa</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">access_provider = ipa</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">chpass_provider = ipa</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">ipa_server = _srv_, server.example.com</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = true</span></pre><a id="id790803" class="indexterm"></a><div class="para">
+ This default behavior can be disabled during the client installation by using the <code class="option">--no-krb5-offline-passwords</code> option.
+ </div><div class="para">
+ This behavior can also be disabled by editing the <code class="filename">/etc/sssd/sssd.conf</code> file and removing the <code class="option">krb5_store_password_if_offline</code> line or changing its value to false.
+ </div><pre class="programlisting"><span class="perl_String">[</span><span class="perl_Reserved">domain</span><span class="perl_String">/example.com]</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">...</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = false</span></pre></div><div class="section" id="removing-keytabs"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="removing-keytabs">12.5. Removing Keytabs</h2></div></div></div><div class="para">
+ Refreshing Kerberos tickets adds a new key to the keytab, but it does not clear the keytab. If a host is being unenrolled and re-added to the FreeIPA domain or if there are Kerberos connection errors, then it may be necessary to remove the keytab and create a new keytab.
+ </div><div class="para">
+ This is done using the <code class="command">ipa-rmkeytab</code> command. To remove all principals on the host, specify the realm with the <code class="option">-r</code> option:
+ </div><pre class="screen"># ipa-rmkeytab -r EXAMPLE.COM -k /etc/krb5.keytab</pre><div class="para">
+ To remove the keytab for a specific service, use the <code class="option">-p</code> option to specify the service principal:
+ </div><pre class="screen"># ipa-rmkeytab -p ldap/client.example.com -k /etc/krb5.keytab</pre></div><div class="section" id="Kerberos_Errors"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Kerberos_Errors">12.6. Troubleshooting Kerberos Errors</h2></div></div></div><div class="para">
+ Kerberos errors frequently become apparent when trying to connect to the realm using <code class="command">kinit</code> or a similar client. For information related to Kerberos, first check the Kerberos manpages, help files, and other resources.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ FreeIPA has its own command-line tools to use to manage Kerberos policies. <span class="bold bold"><strong>Do not</strong></span> use <code class="command">kadmin</code> or <code class="command">kadmin.local</code> to manage FreeIPA Kerberos settings.
+ </div></div></div><div class="para">
+ There are several places to look for Kerberos error log information:
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ For <code class="command">kinit</code> problems or other Kerberos server problems, look at the KDC log in <code class="filename">/var/log/krb5kdc.log</code>.
+ </div></li><li class="listitem"><div class="para">
+ For FreeIPA-specific errors, look in <code class="filename">/var/log/httpd/error_log</code>.
+ </div></li></ul></div>
+
+ </div><div class="para">
+ The FreeIPA logs, both for the server and for FreeIPA-associated services, are covered in <a class="xref" href="#logging">Section 16.1.3, “Checking FreeIPA Server Logs”</a>.
+ </div><div class="formalpara"><h5 class="formalpara" id="id646377">Problems making connections with SSH when using GSS-API</h5>
+ If there are bad reverse DNS entries in the DNS configuration, then it may not be possible to log into FreeIPA resources using SSH. When SSH attempts to connect to a resource using GSS-API as its security method, GSS-API first checks the DNS records. The bad records prevent SSH from locating the resource.
+ </div><div class="para">
+ It is possible to disable reverse DNS lookups in the SSH configuration. Rather than using reverse DNS records, SSH passes the given username directly to GSS-API.
+ </div><div class="para">
+ To disable reverse DNS lookups with SSH, add or edit the <em class="parameter"><code>GSSAPITrustDNS</code></em> directive and set the value to <code class="command">no</code>.
+ </div><pre class="screen"># vim /etc/ssh/ssh_config
+
+GSSAPITrustDNS no</pre><div class="formalpara"><h5 class="formalpara" id="id776618">There are problems connecting to an NFS server after changing a keytab</h5>
+ Clients attempting to mount NFS exports rely on the existence of a valid principal and secret key on both the NFS server and the client host. Clients themselves should not have access to the NFS keytab. The ticket for the NFS connection will be given to clients from the KDC.
+ </div><div class="para">
+ Failure to export an updated keytab can cause problems that are difficult to isolate. For example, existing service connections may continue to function, but no new connections may be possible.
+ </div></div></div><div xml:lang="en-US" class="chapter" id="sudo" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 13. Policy: Using sudo</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-sudo">13.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="#defining-sudocmds">13.2. Setting up sudo Commands and Command Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-sudo-cmds">13.2.1. Adding sudo Commands</a></span></dt><dt><span class="section"><a href="#adding-sudo-cmdgrp">13.2.2. Adding sudo Command Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#defining-sudorules">13.3. Defining sudo Rules</a></span></dt><dd><dl><dt><span class="section"><a href="#sudo-rules-ui">13.3.1. Defining sudo Rules in the Web UI</a></span></dt><dt><span class="section"><a href="#sudo-rules-cmd">13.3.2. Defining sudo Rules in the Command Line</a></span></dt></dl></dd><dt><span cla
ss="section"><a href="#example-configuring-sudo">13.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">13.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">13.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></div><div class="para">
+ FreeIPA provides a mechanism for predictably and consistently apply <code class="command">sudo</code> policies across the FreeIPA domain. The <code class="command">sudo</code> policies apply to domain users and domain hosts.
+ </div><div class="section" id="about-sudo"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-sudo">13.1. About sudo and IPA</h2></div></div></div><div class="para">
+ The <code class="command">sudo</code> command allows a system administrator to delegate authority to specific users to run specific commands as root. <code class="command">sudo</code> provides an audit trail of the commands and their arguments, so access can be tracked.
+ </div><div class="para">
+ <code class="command">sudo</code> uses a local configuration file, <code class="filename">/etc/sudoers</code>, which defines the commands and users with sudo access. While this file can be shared among machines, there's no native way to distribute <code class="command">sudo</code> configuration files among machines.
+ </div><div class="para">
+ FreeIPA uses its centralized LDAP database to contain the <code class="command">sudo</code> configuration, which makes it globally available to all domain hosts. FreeIPA also has a specialized LDAP schema for <code class="command">sudo</code> entries that allows a lot more flexible and simpler configuration. This schema adds two key features:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Service entries associated with the host
- </div></li><li class="listitem"><div class="para">
- The host and service principal
- </div></li><li class="listitem"><div class="para">
- Access control rules
+ The FreeIPA schema supports host groups in addition to netgroups for <code class="command">sudo</code>, while <code class="command">sudo</code> only supports netgroups.
+ </div><div class="para">
+ For every host group, FreeIPA also creates a corresponding shadow netgroup. This allows FreeIPA administrators to create <code class="command">sudo</code> rules that reference host groups, while the local <code class="command">sudo</code> command uses the corresponding netgroup.
</div></li><li class="listitem"><div class="para">
- Machine information, such as its physical location and operating system
+ FreeIPA introduces the concept of a <span class="emphasis"><em>sudo command group</em></span>. The group contains multiple commands, and then the command group can be referenced in the <code class="command">sudo</code> configuration.
</div></li></ul></div><div class="para">
- Some services that run on a host can also belong to the FreeIPA domain. Any service that can store a Kerberos principal or an SSL certificate (or both) can be configured as an FreeIPA service. Adding a service to the FreeIPA domain allows the service to request an SSL certificate or keytab from the domain. (ONly the public key for the certificate is stored in the service record. The private key is local to the service.)
+ Because <code class="command">sudo</code> does not support host groups and command groups, FreeIPA translates the FreeIPA <code class="command">sudo</code> configuration into native <code class="command">sudo</code> configuration when the <code class="command">sudo</code> rules are created.
</div><div class="para">
- A FreeIPA service can be managed from any FreeIPA host, as long as that host has been granted, or <span class="emphasis"><em>delegated</em></span>, permission to access the service. Likewise, hosts can be delegated permissions to other hosts within the domain.
- </div><div class="figure" id="fig.host-service"><div class="figure-contents"><div class="mediaobject"><img src="images/host-services.png" alt="Host and Service Delegation" /></div></div><h6>Figure 11.1. Host and Service Delegation</h6></div><br class="figure-break" /><div class="para">
- Host-based access control rules (which are described in <a class="xref" href="#configuring-host-access">Section 11.7, “Configuring Host-Based Access Control”</a>) can be applied to individual hosts. However, using host groups allows centralized, and potentially simplified, access control management because an access control rule only needs to be defined once and then it is applied immediately and consistently to all the hosts within the group.
- </div><div class="figure" id="fig.host-hbac"><div class="figure-contents"><div class="mediaobject"><img src="images/host-hbac.png" width="600" alt="Host Groups and Host-Based Access Control" /></div></div><h6>Figure 11.2. Host Groups and Host-Based Access Control</h6></div><br class="figure-break" /></div><div class="section" id="adding-host-entry"><div class="titlepage"><div><div><h2 class="title" id="adding-host-entry">11.2. Adding Host Entries</h2></div></div></div><div class="para">
- A host entry is always created when a client is configured. On Fedora systems, this is done automatically with the <code class="command">ipa-client-install</code> script. On other platforms — and in alternative enrollment scenarios, as in <a class="xref" href="#enrolling-machines">Section 14.2, “Enrolling Clients Manually”</a> — the host entry is created manually.
+ FreeIPA also defines a default <code class="command">sudo</code> user, <code class="systemitem">uid=sudo,cn=sysaccounts,cn=etc,$SUFFIX</code>, which can be set in the LDAP/<code class="command">sudo</code> configuration file, <code class="filename">/etc/nss_ldap.conf</code>.
</div><div class="para">
- Host entries are created using the <code class="command">host-add</code> command. This commands adds the host entry to the FreeIPA Directory Server. The full list of options with <code class="command">host-add</code> are listed in <a class="xref" href="#ipa-command-host">Section B.4, “ipa Host Commands”</a>. At its most basic, an add operation only requires the client hostname to add the client to the Kerberos realm and to create an entry in the FreeIPA LDAP server:
- </div><pre class="screen">$ ipa host-add client1.example.com</pre><div class="para">
- If the FreeIPA server is configured to manage DNS, then the host can also be added to the DNS resource records using the <code class="option">--ip-address</code> and <code class="option">--force</code> options.
- </div><div class="example" id="ex.host-dns"><h6>Example 11.1. Creating Host Entries with Static IP Addresses</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force --ip-address=192.168.166.31 client1.example.com</pre></div></div><br class="example-break" /><a id="id3055455" class="indexterm"></a><a id="id3151416" class="indexterm"></a><a id="id3151406" class="indexterm"></a><div class="para">
- Commonly, hosts may not have a static IP address or the IP address may not be known at the time the client is configured. For example, laptops may be preconfigured as FreeIPA clients, but they do not have IP addresses at the time they're configured. Hosts which use DHCP can still be configured with a DNS entry by using <code class="option">--force</code>. This essentially creates a placeholder entry in the FreeIPA DNS service. When the DNS service dynamically updates its records, the host's current IP address is detected and its DNS record is updated.
- </div><div class="example" id="ex.host-dns-dhcp"><h6>Example 11.2. Creating Host Entries with DHCP</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force client1.example.com</pre></div></div><br class="example-break" /><div class="para">
- Host records are deleted using the <code class="command">host-del</code> command. If the FreeIPA domain uses DNS, then the <code class="option">--updatedns</code> option also removes the associated records of any kind for the host from the DNS.
-<pre class="screen">$ ipa host-del --updatedns client1.example.com</pre>
+ Both <code class="command">sudo</code> and FreeIPA support user groups as part of the <code class="command">sudo</code> configuration. User groups can be either POSIX or Unix groups. Creating POSIX groups can create some access issues because any users in the group inherit POSIX rights from the group. Having the choice between POSIX and Unix groups allows administrators the choice in group formatting and to avoid problems with inherited permissions or GID information.
+ </div></div><div class="section" id="defining-sudocmds"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="defining-sudocmds">13.2. Setting up sudo Commands and Command Groups</h2></div></div></div><div class="para">
+ Just as in regular <code class="command">sudo</code> configuration, any command which will be governed by <code class="command">sudo</code> access must be listed in the configuration. FreeIPA adds an extra control measure with <span class="emphasis"><em>sudo command groups</em></span>, which allow a group of commands to be defined and then applied to the <code class="command">sudo</code> configuration as one.
+ </div><div class="para">
+ Adding a command or a command group makes it available to FreeIPA to be defined in a <code class="command">sudo</code> rule; simply adding a command does not automatically include it in a <code class="command">sudo</code> rule.
+ </div><div class="section" id="adding-sudo-cmds"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-sudo-cmds">13.2.1. Adding sudo Commands</h3></div></div></div><div class="section" id="adding-sudo-cmds-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmds-ui">13.2.1.1. Adding sudo Commands with the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Sudo</strong></span> subtab, and then select the <span class="guilabel"><strong>Sudo Commands</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of commands.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmd-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the full system path and name of the command and, optionally, a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmd-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to the edit pages for the command.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Sudo Command Groups</strong></span> tab, click the <span class="guilabel"><strong>Enroll</strong></span> button to add the sudo command to a command group.
+ </div></li><li class="listitem"><div class="para">
+ Click the checkbox by the groups for the command to join, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the group to the selection box.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="adding-sudo-cmds-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmds-cmd">13.2.1.2. Adding sudo Commands with the Command Line</h4></div></div></div><div class="para">
+ To add a single command, use the <code class="command">sudocmd-add</code> command. This requires the full, local path to the command executable and a description of the command:
+ </div><pre class="programlisting">$ ipa sudocmd-add --desc "<em class="replaceable"><code>description</code></em>" <em class="replaceable"><code>/local/path/to/command</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa sudocmd-add --desc 'For reading log files' '/usr/bin/less'
+----------------------------------
+Added sudo command "/usr/bin/less"
+----------------------------------
+ sudo Command: /usr/bin/less
+ Description: For reading log files</pre></div></div><div class="section" id="adding-sudo-cmdgrp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-sudo-cmdgrp">13.2.2. Adding sudo Command Groups</h3></div></div></div><div class="section" id="adding-sudo-cmdgrp-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmdgrp-ui">13.2.2.1. Adding sudo Command Groups with the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Sudo</strong></span> subtab, and then select the <span class="guilabel"><strong>Sudo Command Groups</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of command groups.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name and description for the new command group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to the edit pages for the group.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Sudo Commands</strong></span> tab, click the <span class="guilabel"><strong>Enroll</strong></span> button to add a sudo command to the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-svc-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Sudo Commands</strong></span> tab, click the <span class="guilabel"><strong>Enroll</strong></span> button to add a sudo command to the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-svc-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the commands to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the command to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-addsvc.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="adding-sudo-cmdgrp-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmdgrp-cmd">13.2.2.2. Adding sudo Command Groups with the Command Line</h4></div></div></div><div class="para">
+ Creating a command group requires creating two entries, one for the group and one for the command itself:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the command group using the <code class="command">sudocmdgroup-add</code> command:
+ </div><pre class="screen">$ ipa sudocmdgroup-add --desc 'File editing commands' files
+-----------------------------------
+Added sudo command group "files"
+-----------------------------------
+ sudo Command Group: files
+ Description: File editing commands</pre></li><li class="listitem"><div class="para">
+ Create a command entry using the <code class="command">sudocmd-add</code> command:
+ </div><pre class="screen">$ ipa sudocmd-add --desc 'For editing files' '/usr/bin/vim'
+----------------------------------
+Added sudo command "/usr/bin/vim"
+----------------------------------
+ sudo Command: /usr/bin/vim
+ Description: For editing files</pre></li><li class="listitem"><div class="para">
+ Add the command, using its full directory location as its name, to the command group using the <code class="command">sudocmdgroup-add-member</code> command:
+<pre class="screen">$ ipa sudocmdgroup-add-member --sudocmds '/usr/bin/vim' files
+ sudo Command Group: files
+ Description: File editing commands
+ Member sudo commands: /usr/bin/vim
+-------------------------
+Number of members added 1
+-------------------------</pre>
- </div></div><div class="section" id="managing-services"><div class="titlepage"><div><div><h2 class="title" id="managing-services">11.3. Managing Services</h2></div></div></div><div class="section" id="adding-service-entry"><div class="titlepage"><div><div><h3 class="title" id="adding-service-entry">11.3.1. Adding and Editing Service Entries and Keytabs</h3></div></div></div><div class="para">
- As with host entries, service entries for the host (and any other services on that host which will belong to the domain) must be added manually to the FreeIPA domain. This is a two step process. First, the service entry must be created, and then a keytab must be created for that service which it will use to access the domain.
- </div><div class="para">
- By default, FreeIPA saves its HTTP keytab to <code class="filename">/etc/httpd/conf/ipa.keytab</code>. This keytab is used in the webUI, and so you should be aware that if a key were stored in <code class="filename">ipa.keytab</code> and you later deleted that keytab file, the FreeIPA interface would stop working, because the original key would also be deleted.
- </div><div class="para">
- Similar locations can be specified for each service that needs to be made Kerberos aware. There is no specific location that must be used, but, when using <code class="command">ipa-getkeytab</code>, you should avoid using <code class="filename">/etc/krb5.keytab</code>. This file should not contain service-specific keytabs; each service should have its keytab saved in a specific location and the access privileges (and possibly SELinux rules) should be configured so that only this service has access to the keytab.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
- </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em></pre><div class="para">
- For example:
- </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com
--------------------------------------------------------
-Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</span>
--------------------------------------------------------
- Principal: HTTP/server.example.com at EXAMPLE.COM
- Managed by: ipaserver.example.com
-</pre></li><li class="listitem"><div class="para">
- Create the service keytab file. This is done using the <code class="command">ipa-getkeytab</code> command. The command requires the Kerberos serice principal (<code class="option">-p</code>), the FreeIPA server name (<code class="option">-s</code>), the file to write (<code class="option">-k</code>), and the encryption method (<code class="option">-e</code>). Be sure to copy the keytab to the appropriate directory for the service.
- </div><div class="para">
- For example:
- </div><pre class="programlisting"><span class="perl_Comment"># ipa-getkeytab -s server.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</span></pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The realm name is optional. The FreeIPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm.
- </div></li><li class="listitem"><div class="para">
- The hostname must resolve to a DNS A record for it to work with Kerberos. You can use the <code class="option">--force</code> flag to force the creation of a principal should this prove necessary.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-e</code> argument can include a comma-separated list of encryption types to include in the keytab. This supersedes any default encryption type.
- </div></li></ul></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
- The <code class="command">ipa-getkeytab</code> command resets the secret for the specified principal. This means that all other keytabs for that principal are rendered invalid.
- </div></div></div></li></ol></div></div><div class="section" id="request-service-service"><div class="titlepage"><div><div><h3 class="title" id="request-service-service">11.3.2. Adding Services and Certificates for Services</h3></div></div></div><div class="para">
- While services can use keytabs, some services require certificates for access. In that case, a service can be added (or modified) to include a certificate with its service entry.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create a certificate for the service. s done using the <code class="command">ipa-getkeytab</code> command. The command requires the Kerberos serice principal (<code class="option">-p</code>), the FreeIPA server name (<code class="option">-s</code>), the file to write (<code class="option">-k</code>), and the encryption method (<code class="option">-e</code>). Be sure to copy the keytab to the appropriate directory for the service.
+ </div></li></ol></div></div></div></div><div class="section" id="defining-sudorules"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="defining-sudorules">13.3. Defining sudo Rules</h2></div></div></div><div class="para">
+ <code class="command">sudo</code> rules are in a sense similar to access control rules: they define users who are granted access, the commands which are within the scope of the rule, and then the target hosts to which the rule applies. In FreeIPA, additional information can be configured in the rule, such as <code class="command">sudoers</code> options and run-as settings, but the basic elements always define who, what (services), and where (hosts).
+ </div><div class="section" id="sudo-rules-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="sudo-rules-ui">13.3.1. Defining sudo Rules in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Sudo</strong></span> subtab, and then select the <span class="guilabel"><strong>Sudo Rules</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of sudo rules.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rules-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name for the rule.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to set the configuration for the rule.
</div><div class="para">
- For example:
- </div><pre class="programlisting">$ ipa cert-request --principal=HTTP/web.example.com example.csr</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Use the <code class="option">--add</code> option to create the service automatically when requesting the certificate.
- </div></div></div><div class="para">
- Alternatively, use the <code class="command">getcert</code> command, which creates and manages the certificate through <code class="command">certmonger</code>. The options are described more in <a class="xref" href="#certmonger-req">Section 14.6.1, “Requesting a Certificate with certmonger”</a> and .
- </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre></li><li class="listitem"><div class="para">
- Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
- </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em> --certificate="<em class="replaceable"><code>CSR</code></em>"</pre><div class="para">
- For example (this example shortens the certificate):
- </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com --certificate=<span class="perl_String">"MIICbTCCAVUCAQ...IzSljdLMYNg=="</span>
-
--------------------------------------------------------
-Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</span>
--------------------------------------------------------
- Principal: HTTP/server.example.com at EXAMPLE.COM
- Managed by: ipaserver.example.com
+ There are a number of configuration areas for the rule. The most basic elements are set in the <span class="guilabel"><strong>Who</strong></span>, <span class="guilabel"><strong>Access This Host</strong></span>, and <span class="guilabel"><strong>Run Commands</strong></span> areas; the others are optional and are used to refine the rule.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Optional.</em></span> In the <span class="guilabel"><strong>Options</strong></span> area, add any <code class="command">sudoers</code> options. The complete list of options is in the <code class="command">sudoers</code> manpage and at <a href="http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options">http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options</a>.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the options list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-opt.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the <code class="command">sudoers</code> option.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-opt-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Who</strong></span> area, select the users or user groups to which the sudo rule is applied.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-user.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the users to add to the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the users to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-user-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Access This Host</strong></span> area, select the hosts on which the sudo rule is in effect.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-host.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the hosts to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-host-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Run Commands</strong></span> area, select the commands which are included in the sudo rule. The <code class="command">sudo</code> rule can grant access or deny access to commands, and it can grant allow access to one command and also deny access to another.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Allow/Deny</strong></span> area, click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the commands list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-allow.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the commands or command groups to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the commands to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-allow-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Optional.</em></span> The sudo rule can be configured to run the given commands as a specific, non-root user.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>As Whom</strong></span> area, click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-runas.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the users to run the command as, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the users to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-runas-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li></ol></div></div><div class="section" id="sudo-rules-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="sudo-rules-cmd">13.3.2. Defining sudo Rules in the Command Line</h3></div></div></div><div class="para">
+ Each element is added to the rule command using a different command (listed in <a class="xref" href="#tab.sudo-rules-cmds">Table 13.1, “sudo Commands”</a>).
+ </div><div class="para">
+ The basic outline of a <code class="command">sudo</code> rule command is:
+ </div><pre class="screen">$ ipa sudorule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="example" id="ex.-sudo-basic"><h6>Example 13.1. Creating Basic sudo Rules</h6><div class="example-contents"><div class="para">
+ In the most basic case, the <code class="command">sudo</code> configuration is going to grant the right to one user for one command on one host.
+ </div><div class="para">
+ The first step is to add the initial rule entry.
+ </div><pre class="screen">$ ipa sudorule-add files-commands
+-----------------------------------
+Added sudo rule "files-commands"
+-----------------------------------
+ Rule name: files-commands
+ Enabled: TRUE
</pre><div class="para">
- Include the <span class="emphasis"><em>complete</em></span> certificate request in the <code class="option">--certificate</code> option.
- </div></li></ol></div></div><div class="section" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server">11.3.3. Configuring an NFS Service</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create a directory for the NFS information which is writable by all users.
-<pre class="screen"># mkdir /export
-
-# chmod 777 /export</pre>
+ Next, add the commands to <span class="emphasis"><em>grant</em></span> access to. This can be a single command, using <code class="option">--sudocmd</code>, or a group of commands, using <code class="option">--sudocmdgroups</code>.
+<pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/vim" files-commands
+ Rule name: files-commands
+ Enabled: TRUE
+ sudo Commands: /usr/bin/vim
+-------------------------
+Number of members added 1
+-------------------------
+</pre>
+ </div><div class="para">
+ Add a host or a host group to the rule.
+ </div><pre class="screen">$ ipa sudorule-add-host --host server.example.com files-commands
+ Rule name: files-commands
+ Enabled: TRUE
+ Hosts: server.example.com
+ sudo Commands: /usr/bin/vim
+-------------------------
+Number of members added 1
+-------------------------</pre><div class="para">
+ Last, add the user or group to the rule. This is the user who is allowed to use <code class="command">sudo</code> as defined in the rule; if no "run-as" user is given, then this user will run the <code class="command">sudo</code> commands as root.
+ </div><pre class="screen">$ ipa sudorule-add-user --user jsmith files-commands
+ Rule name: readonly-commands
+ Enabled: TRUE
+ Users: jsmith
+ Hosts: server.example.com
+ sudo Commands: /usr/bin/vim"
+-------------------------
+Number of members added 1
+-------------------------
+</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-allowing-denying"><h6>Example 13.2. Allowing and Denying Commands</h6><div class="example-contents"><div class="para">
+ The <code class="command">sudo</code> rule can grant access or deny access to commands. For example, this rule would allow read access to files but prevent editing:
+ </div><pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/less" readfiles
+$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/tail" readfiles
+$ ipa sudorule-add-deny-command --sudocmd "/usr/bin/vim" readfiles</pre></div></div><br class="example-break" /><div class="example" id="Ex.sudo-options"><h6>Example 13.3. Using sudoers Options</h6><div class="example-contents"><div class="para">
+ The <code class="command">sudoers</code> file has a lot of potential flags that can be set to control the behavior of <code class="command">sudo</code> users, like requiring (or not requiring) passwords to offer a user to authenticate to <code class="command">sudo</code> or using fully-qualified domain names in the <code class="command">sudoers</code> file. The complete list of options is in the <code class="command">sudoers</code> manpage and at <a href="http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options">http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options</a>.
+ </div><div class="para">
+ Any of these options can be set for the FreeIPA <code class="command">sudo</code> rule using the <code class="command">sudorule-add-option</code> command. When the command is run, it prompts for the option to add:
+ </div><pre class="screen">$ ipa sudorule-add-option readfiles
+Sudo Option: !authenticate
+-----------------------------------------------------
+Added option "!authenticate" to Sudo rule "readfiles"
+-----------------------------------------------------</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-runas"><h6>Example 13.4. Running as Other Users</h6><div class="example-contents"><div class="para">
+ The <code class="command">sudo</code> rule also has the option of specifying a non-root user or group to run the commands as. The initial rule has the user or group specified using the <code class="option">--sudorule-add-runasuser</code> or <code class="option">--sudorule-add-runasgroup</code> command, respectively.
+ </div><pre class="screen">$ ipa sudorule-add-runasuser --users=jsmith readfiles
+$ ipa sudorule-add-runasgroup --groups=ITadmins readfiles</pre><div class="para">
+ When creating a rule, the <code class="command">sudorule-add-runasuser</code> or <code class="command">sudorule-add-runasgroup</code> command can only set <span class="emphasis"><em>specific</em></span> users or groups. However, when editing a rule, it is possible to run <code class="command">sudo</code> as all users or all groups by using the <code class="option">--runasusercat</code> or <code class="option">--runasgroupcat</code> option. For example:
+ </div><pre class="screen">$ ipa sudorule-mod --runasgroupcat=all <em class="replaceable"><code>ruleName</code></em></pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="option">--sudorule-add-runasuser</code> and <code class="option">--sudorule-add-runasgroup</code> commands do not support an <code class="command">all</code> option, only specific user or group names. Specifying all users or all groups can only be used with options with the <code class="command">sudorule-mod</code> command.
+ </div></div></div><div class="table" id="tab.sudo-rules-cmds"><h6>Table 13.1. sudo Commands</h6><div class="table-contents"><table summary="sudo Commands" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th>
+ Command
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td>
+ sudorule-add
+ </td><td>
+ Adds a sudo rule entry.
+ </td></tr><tr><td>
+ sudorule-add-user
+ </td><td>
+ Adds a user or a user group to the sudo rule. This user (or every member of the group) is then entitled to sudo any of the commands in the rule.
+ </td></tr><tr><td>
+ sudorule-add-host
+ </td><td>
+ Adds a target host for the rule. These are the hosts where the users are granted sudo permissions.
+ </td></tr><tr><td>
+ sudorule-add-runasgroup
+ </td><td>
+ Sets a group to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
+ </td></tr><tr><td>
+ sudorule-add-runasuser
+ </td><td>
+ Sets a user to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
+ </td></tr><tr><td>
+ sudorule-add-allow-command
+ </td><td>
+ Adds a command that users in the rule have sudo permission to run.
+ </td></tr><tr><td>
+ sudorule-add-deny-command
+ </td><td>
+ Adds a command that users in the rule are explicitly <span class="emphasis"><em>denied</em></span> sudo permission to run.
+ </td></tr><tr><td>
+ sudorule-add-option
+ </td><td>
+ Adds a sudoers flag to the sudo rule.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><div class="section" id="example-configuring-sudo"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="example-configuring-sudo">13.4. An Example of Configuring sudo</h2></div></div></div><div class="para">
+ Implementing <code class="command">sudo</code> requires setting up the command configuration on the FreeIPA server and then configuring the local <code class="command">sudo</code> client to look for the appropriate configuration.
+ </div><div class="section" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">13.4.1. Server Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Set up a host group, as described in <a class="xref" href="#host-groups">Section 6.10, “Managing Host Groups”</a>.
</div></li><li class="listitem"><div class="para">
- Edit the <code class="filename">/etc/exports</code> file and add the Kerberos information:
- </div><div class="para">
-
-<pre class="programlisting">/export *(rw,fsid=0,insecure,no_subtree_check)
-/export gss/krb5(rw,fsid=0,insecure,no_subtree_check)
-/export gss/krb5i(rw,fsid=0,insecure,no_subtree_check)
-/export gss/krb5p(rw,fsid=0,insecure,no_subtree_check)
-</pre>
-
+ Create a user group and add the users, as described in <a class="xref" href="#Configuring_IPA_Groups-Creating_IPA_Groups">Section 5.5.1, “Creating User Groups”</a>.
</div></li><li class="listitem"><div class="para">
- To enable secure NFS, add the following line to <code class="filename">/etc/sysconfig/nfs</code>:
- </div><div class="para">
-
-<pre class="programlisting">SECURE_NFS=yes
-</pre>
-
+ Set up a bind user by setting a password for the default FreeIPA <code class="command">sudo</code> bind user.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ A password operation must occur over a secure connection. To use TLS/SSL, first export the location of the certificate to use to establish the secure connection:
+ </div><pre class="screen">$ export LDAPTLS_CACERT=/etc/ipa/ca.crt</pre></li><li class="listitem"><div class="para">
+ Using the LDAP tools, set the password for the <code class="command">sudo</code> user, <code class="command">uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com</code>:
+ </div><pre class="screen">$ ldappasswd -x -S -W -h ipaserver.ipadocs.org -ZZ -D "cn=Directory Manager" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com
+ New password:
+ Re-enter new password:
+ Enter LDAP Password:</pre></li></ol></div></li><li class="listitem"><div class="para">
+ Set up the sudo commands and command groups, as described in <a class="xref" href="#defining-sudocmds">Section 13.2, “Setting up sudo Commands and Command Groups”</a>.
</div></li><li class="listitem"><div class="para">
- Add a service principal and keytab for NFS, as in <a class="xref" href="#adding-service-entry">Section 11.3.1, “Adding and Editing Service Entries and Keytabs”</a>.
-<pre class="screen"># ipa service-add nfs/ipaserver.example.com
+ Set up the sudo rules, as described in <a class="xref" href="#defining-sudorules">Section 13.3, “Defining sudo Rules”</a>.
+ </div></li></ol></div></div><div class="section" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">13.4.2. Client Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Configure <code class="command">sudo</code> to look to LDAP for the <code class="filename">sudoers</code> file.
+<pre class="programlisting">vim /etc/nsswitch.conf
-# ipa-getkeytab -s ipaserver.example.com -p nfs/ipaserver.example.com -k /etc/nfs/conf/nfs.keytab</pre>
+sudoers: files ldap</pre>
+ </div><div class="para">
+ Leaving the <code class="option">files</code> option in place allows <code class="command">sudo</code> to check its local configuration before checking the LDAP-based FreeIPA configuration.
</div></li><li class="listitem"><div class="para">
- Reload the NFS configuration, and restart the required services, <code class="systemitem">services</code>, <code class="systemitem">nfs</code>, and <code class="systemitem">rpcgssd</code>. Use the <code class="option">-k</code> option when restarting <code class="systemitem">rpcgssd</code>; this updates the NFS configuration with the path to the NFS keytab.
-<pre class="screen"># exportfs -a
-
-# restart services
-
-# service nfs restart
+ Configure SSSD to look for NIS netgroups.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add the following line immediately after the <em class="parameter"><code>ipa_server</code></em> entry in the <code class="filename">/etc/sssd/sssd.conf</code> file:
+<pre class="programlisting">ldap_netgroup_search_base = cn=ng,cn=compat,dc=example,dc=com</pre>
-# service rpcgssd restart -k /etc/nfs/conf/nfs.keytab</pre>
+ </div></li><li class="listitem"><div class="para">
+ Restart the SSSD daemon:
+<pre class="screen"># service sssd restart</pre>
- </div></li></ol></div></div><div class="section" id="Creating_an_IPA_Service-Using_NSS"><div class="titlepage"><div><div><h3 class="title" id="Creating_an_IPA_Service-Using_NSS">11.3.4. Storing Certificates in NSS Databases</h3></div></div></div><div class="para">
- When services use certificates, the certificates and keys can be stored in NSS databases (which may also be used by the services themselves, as well as FreeIPA).
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create the NSS databases.
- </div><pre class="screen">$ certutil -N -d <em class="replaceable"><code>/path/to/database/dir</code></em></pre></li><li class="listitem"><div class="para">
- Request the certificate using <code class="command">certutil</code>, an NSS tool.
- </div><pre class="screen">$ certutil -R -s "CN=client1.example.com,O=EXAMPLE.COM" -d <em class="replaceable"><code>/path/to/database/dir</code></em> -a > example.csr</pre></li></ol></div><div class="para">
- If the FreeIPA domain is using Certificate System for its CA, only the CN of the subject name is used. With a self-signed CA, the subject must match the configured certificate subject base. The FreeIPA server rejects requests with a subject base that differs from this value.
- </div></div></div><div class="section" id="host-disable"><div class="titlepage"><div><div><h2 class="title" id="host-disable">11.4. Disabling Host and Service Entries</h2></div></div></div><a id="id3376134" class="indexterm"></a><a id="id3376119" class="indexterm"></a><div class="para">
- Active services and hosts can be accessed by other services, hosts, and users within the domain. Deleting a service or hosts remove the entry and all the associated configuration, and it removes it permanently.
- </div><div class="para">
- There can be situations when it is necessary to remove a host or a service from activity without permanently removing it from the domain. This can be done by using the <code class="command">host-disable</code> and <code class="command">service-disable</code> commands.
- </div><div class="para">
- For example, for a host:
- </div><pre class="screen">$ ipa host-disable server.example.com</pre><div class="para">
- For example, for a service, specify the principal rather than the hostname:
- </div><pre class="screen">$ ipa service-disable http/server.example.com</pre></div><div class="section" id="host-groups"><div class="titlepage"><div><div><h2 class="title" id="host-groups">11.5. Managing Host Groups</h2></div></div></div><div class="para">
- Host groups are a way of centralizing control over important management tasks, particularly access control.
- </div><div class="para">
- All groups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
- </div><div class="para">
- Because groups are easy to create, it is possible to be very flexible in what groups to create and how they are organized. Groups can be defined around organizational divisions like departments, physical locations, or FreeIPA or infrastructure usage guidelines for access controls.
- </div><div class="section" id="creating-host-groups"><div class="titlepage"><div><div><h3 class="title" id="creating-host-groups">11.5.1. Creating Host Groups</h3></div></div></div><div class="para">
- New groups are created using the <code class="command">hostgroup-add</code> command. (This adds only the group; members are added separately.)
- </div><div class="para">
- Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
- </div><pre class="screen">$ ipa hostgroup-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>"</pre></div><div class="section" id="hg-adding-members"><div class="titlepage"><div><div><h3 class="title" id="hg-adding-members">11.5.2. Adding Group Members</h3></div></div></div><div class="para">
- Members are added to a host group using the <code class="command">hostgroup-add-member</code> command. This command can add both hosts as group members and other groups as group members.
- </div><div class="para">
- The syntax of the <code class="command">hostgroup-add-member</code> command requires only the group name and a comma-separated list of hosts to add:
- </div><pre class="screen">$ ipa hostgroup-add-member <em class="replaceable"><code>groupName</code></em> [--hosts=<em class="replaceable"><code>list</code></em>] [--hostgroups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
- For example, this adds three hosts to the <code class="command">caligroup</code> group:
- </div><pre class="screen">$ ipa hostgroup-add-member caligroup --hosts=ipaserver.example.com,client1.example.com,client2.example.com
- Group name: caligroup
- Description: for machines in california
- GID: 387115842
- Member hosts: ipaserver.example.com,client1.example.com,client2.example.com
--------------------------
-Number of members added 3
--------------------------
-</pre><div class="para">
- Likewise, other groups can be added as members, which creates nested groups:
- </div><pre class="screen">$ ipa hostgroup-add-member caligroup --groups=mountainview,sandiego
- Group name: caligroup
- Description: for machines in california
- GID: 387115842
- Member groups: mountainview,sandiego
- -------------------------
- Number of members added 2
- -------------------------
-</pre></div></div><div class="section" id="Extending_the_Permissions_of_IPA_Managed_Hosts"><div class="titlepage"><div><div><h2 class="title" id="Extending_the_Permissions_of_IPA_Managed_Hosts">11.6. Extending the Permissions of FreeIPA Managed Hosts</h2></div></div></div><div class="para">
- As discussed in <a class="xref" href="#service-interactions">Section 1.3, “Relationships Between Servers and Clients”</a>, within the FreeIPA domain, <span class="emphasis"><em>manage</em></span> means being able to retrieve a keytab and certificates for another host or service. Every host and service has a <em class="parameter"><code>managedby</code></em> entry which lists what hosts or services can manage it. By default, a host can manage itself and all of its services. It is also possible to allow a host to manage other hosts, or services on other hosts, by updating the appropriate delegations or providing a suitable <em class="parameter"><code>managedby</code></em> entry.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- If a host is delegated authority to another host through a <code class="command">managedBy</code> entry, it does not mean that the host has also been delegated management for all services on that host. Each delegation has to be performed independently.
- </div></div></div><div class="section" id="Delegating_Service_Management"><div class="titlepage"><div><div><h3 class="title" id="Delegating_Service_Management">11.6.1. Delegating Service Management</h3></div></div></div><div class="para">
- A host is delegated control over a service using the <code class="command">service-add-host</code> command. There are two parts to delegating the service: specifying the principal and identifying the hosts (in a comma-separated list) with control:
- </div><pre class="screen">4ipa service-add-host <em class="replaceable"><code>principal</code></em> --hosts=<em class="replaceable"><code>hostnames</code></em></pre><div class="para">
- For example:
- </div><pre class="screen"># ipa service-add-host http/web.example.com --hosts=client1.example.com</pre><div class="para">
- Once the host is delegated authority, the host principal can be used to manage the service:
- </div><pre class="screen"># kinit -kt /etc/krb5.keytab host/`hostname`
-# ipa-getkeytab -s `hostname` -k /tmp/test.keytab -p http/web.example.com
-Keytab successfully retrieved and stored in: /tmp/test.keytab</pre><div class="para">
- To create a ticket for this service, create a certificate request on the host with the delegated authority and use the <code class="command">cert-request</code> command to create a service entry and load the certification information:
- </div><pre class="screen"># ipa cert-request --add --principal=http/web.example.com web.csr
- Certificate: MIICETCCAXqgA...[snip]
- Subject: CN=web.example.com,O=EXAMPLE.COM
- Issuer: CN=EXAMPLE.COM Certificate Authority
- Not Before: Tue Feb 08 18:51:51 2011 UTC
- Not After: Mon Feb 08 18:51:51 2016 UTC
- Fingerprint (MD5): c1:46:8b:29:51:a6:4c:11:cd:81:cb:9d:7c:5e:84:d5
- Fingerprint (SHA1):
- 01:43:bc:fa:b9:d8:30:35:ee:b6:54:dd:a4:e7:d2:11:b1:9d:bc:38
- Serial number: 1005
-</pre></div><div class="section" id="Delegating_Host_Management"><div class="titlepage"><div><div><h3 class="title" id="Delegating_Host_Management">11.6.2. Delegating Host Management</h3></div></div></div><div class="para">
- Hosts are delegated authority over other hosts through the <code class="command">host-add-managedby</code> command. This creates a <code class="command">managedby</code> entry. Once the <code class="command">managedby</code> entry is created, then the host can retrieve a keytab for the host it has delegated authority over.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Log in as the admin user.
-<pre class="screen"># kinit admin</pre>
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Edit the NSS configuration file and add the following <code class="command">sudo</code>-related lines to the <code class="filename">/etc/nss_ldap.conf</code> file:
+<pre class="programlisting">sudoers_base ou=SUDOers,dc=example,dc=com
+binddn uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com
+bindpw <em class="replaceable"><code>sudo_password</code></em>
+ssl start_tls
+tls_cacertfile /etc/ipa/ca.crt
+tls_checkpeer yes
+bind_timelimit 5
+timelimit 15
+uri ldap://ipaserver.ipadocs.org
+</pre>
- </div></li><li class="listitem"><div class="para">
- Add the <em class="parameter"><code>managedby</code></em> entry. For example, this delegates authority <span class="emphasis"><em>over</em></span> client2 <span class="emphasis"><em>to</em></span> client1.
-<pre class="screen"># ipa host-add-managedby client2.example.com --hosts=client1.example.com</pre>
+ </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Adding the <em class="parameter"><code>sudoers_debug</code></em> parameter helps with troubleshooting. Valid values for this parameter are 0, 1, and 2. The <code class="command">sudo</code> documentation at <a href="http://www.gratisoft.us/sudo/readme_ldap.html">http://www.gratisoft.us/sudo/readme_ldap.html</a> has more information on debugging the process.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Create a symlink between the <code class="command">nss_ldap</code> module configuration file and the system LDAP configuration file:
+<pre class="screen"># ln -s /etc/nss_ldap.conf /etc/ldap.conf</pre>
</div></li><li class="listitem"><div class="para">
- Obtain a ticket as the host <code class="systemitem">client1</code> and then retrieve a keytab for <code class="systemitem">client2</code>:
-<pre class="screen"># kinit -kt /etc/krb5.keytab host/`hostname`
-# ipa-getkeytab -s `hostname` -k /tmp/client2.keytab -p host/client2.example.com
-Keytab successfully retrieved and stored in: /tmp/client2.keytab</pre>
-
- </div></li></ol></div></div><div class="section" id="accessing-service"><div class="titlepage"><div><div><h3 class="title" id="accessing-service">11.6.3. Accessing Delegated Services</h3></div></div></div><div class="para">
- For both services and hosts, if a client has delegated authority, it can obtain a keytab for that principal on the local machine. For services, this has the format <span class="emphasis"><em>service/hostname at REALM</em></span>. For hosts, the <span class="emphasis"><em>service</em></span> is <code class="systemitem">host</code>.
- </div><div class="para">
- With <code class="command">kinit</code>, use the <code class="option">-k</code> option to load a keytab and the <code class="option">-t</code> option to specify the keytab.
- </div><div class="para">
- For example, to access a host:
-<pre class="screen"># kinit -kt /etc/krb5.keytab host/ipa.example.com at EXAMPLE.COM</pre>
-
- </div><div class="para">
- TO access a service:
-<pre class="screen"># kinit -kt /etc/httpd/conf/krb5.keytab http/ipa.example.com at EXAMPLE.COM</pre>
+ Set up the NIS domain. <code class="command">sudo</code> uses NIS netgroups, so the NIS domain name must be set in the system configuration for <code class="command">sudo</code> to be able to find the host groups used in the FreeIPA <code class="command">sudo</code> configuration:
+<pre class="screen"># nisdomainname example.com</pre>
- </div></div></div><div xml:lang="en-US" class="section" id="configuring-host-access" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="configuring-host-access">11.7. Configuring Host-Based Access Control</h2></div></div></div><div class="para">
+ </div></li></ol></div></div></div></div><div xml:lang="en-US" class="chapter" id="configuring-host-access" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 14. Policy: Configuring Host-Based Access Control</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-hbac">14.1. About Host-Based Access Control</a></span></dt><dt><span class="section"><a href="#HBAC_Service_Groups">14.2. Creating Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dd><dl><dt><span class="section"><a href="#adding-hbac-svc">14.2.1. Adding HBAC Services</a></span></dt><dt><span class="section"><a href="#adding-hbac-svcgrp">14.2.2. Adding Service Groups</a></span></dt></dl></dd><dt><span class="section"><a href="#hbac-rules">14.3. Defining Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="#hbac-rules-ui">14.3.1. Setting Host-Based Access Control Rules in the Web UI</a></span
></dt><dt><span class="section"><a href="#hbac-rules-cmd">14.3.2. Setting Host-Based Access Control Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#hbac-testing">14.4. Testing Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="#hbac-limits">14.4.1. The Limits of Host-Based Access Control Configuration</a></span></dt><dt><span class="section"><a href="#hbac-test-examples">14.4.2. Test Scenarios for Host-Based Access Control</a></span></dt></dl></dd></dl></div><div class="para">
FreeIPA can control access to both machines and the services on those machines within the FreeIPA domain. The rules define who can access what within the domain, not the level of access (which are defined by system or application settings). These access control rules grant access, with all other users and hosts implicitly denied.
</div><div class="para">
This is called <span class="emphasis"><em>host-based access control</em></span> because the rule defines what hosts (<span class="emphasis"><em>source</em></span>) are allowed to access other hosts (<span class="emphasis"><em>targets</em></span>) within the domain. This access can be further broken down to users and services.
@@ -4428,30 +5679,66 @@ Keytab successfully retrieved and stored in: /tmp/client2.keytab</pre>
While access must be explicitly granted to users and hosts within the FreeIPA domain, FreeIPA servers are configured by default with an <code class="command">allow all</code> access control rule which allows access for every host within the domain to every host within the domain.
</div><div class="para">
To create an FreeIPA server without the default <code class="command">allow all</code> rule, run <code class="command">ipa-server-install</code> with the <code class="option">--no_hbac_allow</code> option.
- </div></div></div><div class="para">
- The <span class="emphasis"><em>rule</em></span> first defines things that can be accessed, and there are two types of entities:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- <span class="emphasis"><em>Hosts</em></span>, or target hosts, within the FreeIPA domain.
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>Services</em></span> on the target hosts. Multiple services can be combined into <span class="emphasis"><em>service groups</em></span>. The service group can be modified without having to edit the access control rule itself.
- </div></li></ul></div><div class="para">
- The rule also sets <span class="emphasis"><em>who can have access</em></span> (the FreeIPA domain user) and <span class="emphasis"><em>what they can use to access the targets</em></span> (the source host).
- </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- It is possible to use categories for users, source hosts, and target hosts instead of adding each one individually to the access control rule. The only supported category is <code class="command">all</code>.
- </div></div></div><div class="para">
- The entities in host-based access control rules follow the Kerberos principal entries: users, hosts (machines), and services. Users, source hosts, and target hosts can be added directly to host-based access control rules. However, services must be flagged first and then added to the access control rules.
- </div><div class="section" id="HBAC_Service_Groups"><div class="titlepage"><div><div><h3 class="title" id="HBAC_Service_Groups">11.7.1. Defining Host-Based Access Control Entries for Services and Service Groups</h3></div></div></div><div class="para">
- Any PAM service can be identified as to the host-based access control system in FreeIPA. The service is added to the access control system using the <code class="command">hbacsvc-add</code> command, specifying the service by the name that PAM uses to evaluate the service.
+ </div></div></div><div class="section" id="about-hbac"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-hbac">14.1. About Host-Based Access Control</h2></div></div></div><div class="para">
+ Host-based access control rules (which are described in <a class="xref" href="#configuring-host-access">Chapter 14, <em>Policy: Configuring Host-Based Access Control</em></a>) can be applied to individual hosts. However, using host groups allows centralized, and potentially simplified, access control management because an access control rule only needs to be defined once and then it is applied immediately and consistently to all the hosts within the group.
+ </div><div class="figure" id="fig.host-hbac"><div class="figure-contents"><div class="mediaobject"><img src="images/host-hbac.png" width="444" alt="Host Groups and Host-Based Access Control" /></div></div><h6>Figure 14.1. Host Groups and Host-Based Access Control</h6></div><br class="figure-break" /><div class="para">
+ The <span class="emphasis"><em>rule</em></span> first defines things that can be accessed, and there are two types of entities:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Hosts</em></span>, or target hosts, within the FreeIPA domain.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Services</em></span> on the target hosts. Multiple services can be combined into <span class="emphasis"><em>service groups</em></span>. The service group can be modified without having to edit the access control rule itself.
+ </div></li></ul></div><div class="para">
+ The rule also sets <span class="emphasis"><em>who can have access</em></span> (the FreeIPA domain user) and <span class="emphasis"><em>what they can use to access the targets</em></span> (the source host).
+ </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ It is possible to use categories for users, source hosts, and target hosts instead of adding each one individually to the access control rule. The only supported category is <code class="command">all</code>.
+ </div></div></div><div class="para">
+ The entities in host-based access control rules follow the Kerberos principal entries: users, hosts (machines), and services. Users, source hosts, and target hosts can be added directly to host-based access control rules. However, services must be flagged first and then added to the access control rules.
+ </div></div><div class="section" id="HBAC_Service_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="HBAC_Service_Groups">14.2. Creating Host-Based Access Control Entries for Services and Service Groups</h2></div></div></div><div class="para">
+ Any PAM service can be identified as to the host-based access control (HBAC) system in FreeIPA. The service entries used in host-based access control are separate from adding a service to the FreeIPA domain. Adding a service to the domain makes it a recognized resource which is available to other resources. Adding a domain resource to the host-based access control configuration allows administrators to exert defined control over what domain users and what domain clients can access that service.
</div><div class="para">
- For example, this adds the <code class="systemitem">tftp</code> service:
- </div><pre class="screen"># ipa hbacsvc-add --desc="TFTP service" tftp
+ Some common services are already configured as HBAC services, so they can be used in host-based access control rules. Additional services can be added, and services can be added into service groups for simpler management.
+ </div><div class="section" id="adding-hbac-svc"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-hbac-svc">14.2.1. Adding HBAC Services</h3></div></div></div><div class="section" id="adding-hbac-svc-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svc-ui">14.2.1.1. Adding HBAC Services in the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Host-Based Access Control</strong></span> subtab, and then select the <span class="guilabel"><strong>HBAC Services</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of services.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-services-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the service name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-service-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new service.
+ </div></li><li class="listitem"><div class="para">
+ If a service group already exists, then add the service to the desired group, as described in <a class="xref" href="#adding-hbac-svcgrp-ui">Section 14.2.2.1, “Adding Service Groups in the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="adding-hbac-svc-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svc-cmd">14.2.1.2. Adding Services in the Command Line</h4></div></div></div><div class="para">
+ The service is added to the access control system using the <code class="command">hbacsvc-add</code> command, specifying the service by the name that PAM uses to evaluate the service.
+ </div><div class="para">
+ For example, this adds the <code class="systemitem">tftp</code> service:
+ </div><pre class="screen"># ipa hbacsvc-add --desc="TFTP service" tftp
-------------------------
Added HBAC service "tftp"
-------------------------</pre><div class="para">
- Once the invididual service is added, it can be added to the access control rule. However, if there a large number of services, then it can require frequent updates to the access control rules as services change. FreeIPA also allows groups of services to added to access control rules. This makes it much easier to manage access control, because the members of the service group can be changed without having to edit the rule itself.
- </div><div class="para">
- First create the service group entry, then create the service, and then add that service to the service group as a member. For example:
- </div><pre class="screen">$ ipa hbacsvcgroup-add --desc="login services" login
+ If a service group already exists, then the service can be added to the group using the <code class="command">hbacsvcgroup-add-member</code> command, as in <a class="xref" href="#adding-hbac-svcgrp-cmd">Section 14.2.2.2, “Adding Service Groups in the Command Line”</a>.
+ </div></div></div><div class="section" id="adding-hbac-svcgrp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-hbac-svcgrp">14.2.2. Adding Service Groups</h3></div></div></div><div class="para">
+ Once the individual service is added, it can be added to the access control rule. However, if there a large number of services, then it can require frequent updates to the access control rules as services change. FreeIPA also allows groups of services to added to access control rules. This makes it much easier to manage access control, because the members of the service group can be changed without having to edit the rule itself.
+ </div><div class="section" id="adding-hbac-svcgrp-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svcgrp-ui">14.2.2.1. Adding Service Groups in the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Host-Based Access Control</strong></span> subtab, and then select the <span class="guilabel"><strong>HBAC Service Groups</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of service groups.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the service group name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to the service configuration page.
+ </div></li><li class="listitem"><div class="para">
+ At the top of the <span class="guilabel"><strong>HBAC Services</strong></span> tab, click the <span class="guilabel"><strong>Add</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-member1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the services to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the command to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-member2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button to save the group membership.
+ </div></li></ol></div></div><div class="section" id="adding-hbac-svcgrp-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svcgrp-cmd">14.2.2.2. Adding Service Groups in the Command Line</h4></div></div></div><div class="para">
+ First create the service group entry, then create the service, and then add that service to the service group as a member. For example:
+ </div><pre class="screen">$ ipa hbacsvcgroup-add --desc="login services" login
--------------------------------
Added HBAC service group "login"
--------------------------------
@@ -4470,18 +5757,86 @@ $ ipa hbacsvcgroup-add-member --hbacsvcs=sshd login
-------------------------
Number of members added 1
-------------------------</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA defines one default service group, <code class="systemitem">SUDO</code>, for sudo services.
- </div></div></div></div><div class="section" id="hbac-rules"><div class="titlepage"><div><div><h3 class="title" id="hbac-rules">11.7.2. Setting Host-Based Access Control Rules</h3></div></div></div><div class="para">
- Access controls, at a high level, define <span class="emphasis"><em>who</em></span> has access to <span class="emphasis"><em>what</em></span>. The <span class="emphasis"><em>who</em></span> can be either a user or a host (the source host), and the <span class="emphasis"><em>what</em></span> can be either a host (target host), service, or service group.
- </div><div class="para">
- Access control rules are created using the <code class="command">hbacrule-*</code> commands (listed in <a class="xref" href="#tab.hbac-commands">Table 11.1, “Host-Based Access Control Command and Options”</a>). The first step is to create a container entry; from there, users, hosts, and services can be added to the access control entry.
- </div><div class="para">
- The basic outline of all the access control commands is:
- </div><pre class="screen">$ ipa hbacrule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- To set every user, every host as a source host, or every host as a target, use the category options.
- </div></div></div><div class="example" id="ex.hbac-all"><h6>Example 11.3. Granting All Access to One Host</h6><div class="example-contents"><div class="para">
- One simple rule is to grant every user and every source host access to a single server. The first command creates the entry and uses the category options to apply every user and every host as a source host.
- </div><pre class="screen">$ ipa hbacrule-add --usercat=all --srchostcat=all allGroup
+ FreeIPA defines one default service group, <code class="systemitem">SUDO</code>, for sudo services.
+ </div></div></div></div></div></div><div class="section" id="hbac-rules"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="hbac-rules">14.3. Defining Host-Based Access Control Rules</h2></div></div></div><div class="para">
+ Access controls, at a high level, define <span class="emphasis"><em>who</em></span> has access to <span class="emphasis"><em>what</em></span>. The <span class="emphasis"><em>who</em></span> can be either a user or a host (the source host), and the <span class="emphasis"><em>what</em></span> can be either a host (target host), service, or service group, or a combination of the three.
+ </div><div class="section" id="hbac-rules-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-rules-ui">14.3.1. Setting Host-Based Access Control Rules in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Host-Based Access Control</strong></span> subtab, and then select the <span class="guilabel"><strong>HBAC Rules</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of host-based access control rules.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rules-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name for the rule.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to set the configuration for the rule.
+ </div><div class="para">
+ There are a number of configuration areas for the rule. The four basic elements are <span class="emphasis"><em>who</em></span> the rule applies to, what hosts users can use to access resources (the source), what hosts allow access (the target), and, optionally, what services can be accessed.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Who</strong></span> area, select the users or user groups to which the access control rule is applied.
+ </div><div class="para">
+ To apply the rule to all FreeIPA users, select the <span class="guilabel"><strong>Anyone</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of users or user groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Users and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-user-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the users to add to the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the users to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-user.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Accessing</strong></span> area, select the target hosts which can be accessed through this access control rule.
+ </div><div class="para">
+ To apply the rule to all FreeIPA hosts, select the <span class="guilabel"><strong>Any Host</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of hosts or host groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Hosts and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-target.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the hosts to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-target-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Via Service</strong></span> area, select specific services on the target hosts which the users are allowed to use to access target machines.
+ </div><div class="para">
+ To apply the rule to all FreeIPA hosts, select the <span class="guilabel"><strong>Any Service</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of hosts or host groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Services and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the commands list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-viasrv.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the services or groups to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the services to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-addservice.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>From</strong></span> area, select the source hosts, from which users can access the target hosts.
+ </div><div class="para">
+ To apply the rule to all FreeIPA hosts, select the <span class="guilabel"><strong>Any Host</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of hosts or host groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Hosts and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-from.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the hosts to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-target-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li></ol></div></div><div class="section" id="hbac-rules-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-rules-cmd">14.3.2. Setting Host-Based Access Control Rules in the Command Line</h3></div></div></div><div class="para">
+ Access control rules are created using the <code class="command">hbacrule-*</code> commands (listed in <a class="xref" href="#tab.hbac-commands">Table 14.1, “Host-Based Access Control Command and Options”</a>). The first step is to create a container entry; from there, users, hosts, and services can be added to the access control entry.
+ </div><div class="para">
+ The basic outline of all the access control commands is:
+ </div><pre class="screen">$ ipa hbacrule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ To set every user, every host as a source host, or every host as a target, use the category options, such as <code class="option">--usercat=all</code>.
+ </div></div></div><div class="example" id="ex.hbac-all"><h6>Example 14.1. Granting All Access to One Host</h6><div class="example-contents"><div class="para">
+ One simple rule is to grant every user and every source host access to a single server. The first command creates the entry and uses the category options to apply every user and every host as a source host.
+ </div><pre class="screen">$ ipa hbacrule-add --usercat=all --srchostcat=all allGroup
--------------------------
Added HBAC rule "allGroup"
--------------------------
@@ -4489,8 +5844,8 @@ Added HBAC rule "allGroup"
User category: all
Source host category: all
Enabled: TRUE</pre><div class="para">
- The second rule adds the target host, using the <code class="command">hbacrule-add-host</code> command:
- </div><pre class="screen">$ ipa hbacrule-add-host --hosts=server.example.com allGroup
+ The second rule adds the target host, using the <code class="command">hbacrule-add-host</code> command:
+ </div><pre class="screen">$ ipa hbacrule-add-host --hosts=server.example.com allGroup
Rule name: allGroup
User category: all
Source host category: all
@@ -4500,114 +5855,116 @@ Added HBAC rule "allGroup"
-------------------------
Number of members added 1
-------------------------
-</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-single-service"><h6>Example 11.4. Adding Control for a Single User to a Service</h6><div class="example-contents"><div class="para">
- Another access control method is to grant a user access to a specific service on every host in the domain. For the user to have access to the service on every machine, every host must be added as both a host and target. This can be done using the category options:
- </div><pre class="screen">$ ipa hbacrule-add --hostcat=all --srchostcat=all sshd-jsmith</pre><div class="para">
- Since the access control rule applies to a specific user, the user is added to the rule using the <code class="command">hbacrule-add-user</code> command:
- </div><pre class="screen">$ ipa hbacrule-add-user --users=jsmith sshd-jsmith</pre><div class="para">
- Then, the service is added to the access control rule. (The service should have already been added to the access control system using the <code class="command">hbacsvc-add</code> command.)
- </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcs=sshd sshd-jsmith</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-srvcgroups"><h6>Example 11.5. Adding a Service Group to the Rule</h6><div class="example-contents"><div class="para">
- While a single service can be added to a rule, it is also possible to add an entire service group. Like a single service, this uses the <code class="command">hbacrule-add-service</code> command, only with the <code class="option">--hbacsvcgroups</code> option that specifies the group name.
- </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcgroups=login loginRule</pre></div></div><br class="example-break" /><div class="table" id="tab.hbac-commands"><h6>Table 11.1. Host-Based Access Control Command and Options</h6><div class="table-contents"><table summary="Host-Based Access Control Command and Options" border="1"><colgroup><col width="25%" /><col width="25%" /><col width="25%" /><col width="25%" /></colgroup><thead><tr><th>
- Command
- </th><th>
- Description
- </th><th>
- Arguments
- </th><th>
- Source or Target Entry
- </th></tr></thead><tbody><tr><td>
- hbacrule-add
- </td><td>
- Adds a new host-based access control rule.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --usercat=all, which applies the rule to every user
- </div></li><li class="listitem"><div class="para">
- --hostcat=all, which sets every host as an allowed target server
- </div></li><li class="listitem"><div class="para">
- --srchostcat=all, which sets every host as an allowed source server
- </div></li><li class="listitem"><div class="para">
- --servicecat=all, which sets every configured service as an allowed target service
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the required unique identifier for the new rule
- </div></li></ul></div>
-
- </td><td>
+</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-single-service"><h6>Example 14.2. Adding Control for a Single User to a Service</h6><div class="example-contents"><div class="para">
+ Another access control method is to specify which services users are allowed to use to access the target hosts.
+ </div><div class="para">
+ First, for the user to have access to every machine, every host must be added as both a host and target. This can be done using the category options:
+ </div><pre class="screen">$ ipa hbacrule-add --hostcat=all --srchostcat=all sshd-jsmith</pre><div class="para">
+ Since the access control rule applies to a specific user, the user is added to the rule using the <code class="command">hbacrule-add-user</code> command:
+ </div><pre class="screen">$ ipa hbacrule-add-user --users=jsmith sshd-jsmith</pre><div class="para">
+ Then, the service is added to the access control rule. (The service should have already been added to the access control system using the <code class="command">hbacsvc-add</code> command.) This is the service that the user can use to connect to the machine.
+ </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcs=sshd sshd-jsmith</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-srvcgroups"><h6>Example 14.3. Adding a Service Group to the Rule</h6><div class="example-contents"><div class="para">
+ While a single service can be added to a rule, it is also possible to add an entire service group. Like a single service, this uses the <code class="command">hbacrule-add-service</code> command, only with the <code class="option">--hbacsvcgroups</code> option that specifies the group name.
+ </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcgroups=login loginRule</pre></div></div><br class="example-break" /><div class="table" id="tab.hbac-commands"><h6>Table 14.1. Host-Based Access Control Command and Options</h6><div class="table-contents"><table summary="Host-Based Access Control Command and Options" border="1"><colgroup><col width="25%" /><col width="25%" /><col width="25%" /><col width="25%" /></colgroup><thead><tr><th>
+ Command
+ </th><th>
+ Description
+ </th><th>
+ Arguments
+ </th><th>
+ Source or Target Entry
+ </th></tr></thead><tbody><tr><td>
+ hbacrule-add
+ </td><td>
+ Adds a new host-based access control rule.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --usercat=all, which applies the rule to every user
+ </div></li><li class="listitem"><div class="para">
+ --hostcat=all, which sets every host as an allowed target server
+ </div></li><li class="listitem"><div class="para">
+ --srchostcat=all, which sets every host as an allowed source server
+ </div></li><li class="listitem"><div class="para">
+ --servicecat=all, which sets every configured service as an allowed target service
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the required unique identifier for the new rule
+ </div></li></ul></div>
- </td></tr><tr><td>
- hbacrule-add-host
- </td><td>
- Adds a target host to the access control rule. A target host can be accessed <span class="emphasis"><em>by</em></span> other servers and users in the domain.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --hosts, which adds an individual server or command-separated list of servers as an allowed target server
- </div></li><li class="listitem"><div class="para">
- --hostgroups, which adds a host group to the rule and every host within the host group is an allowed target server
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target server
- </div></li></ul></div>
+ </td><td>
- </td><td>
- Target
- </td></tr><tr><td>
- hbacrule-add-service
- </td><td>
- Adds a service type to the rule.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --hbacsvcs, which adds an individual service type or a comma-separated list of service type as an allowed target service
- </div></li><li class="listitem"><div class="para">
- --hbacsvcgroups, which adds a service group to the rule and every service within the service group is an allowed target service
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target service
- </div></li></ul></div>
+ </td></tr><tr><td>
+ hbacrule-add-host
+ </td><td>
+ Adds a target host to the access control rule. A target host can be accessed <span class="emphasis"><em>by</em></span> other servers and users in the domain.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --hosts, which adds an individual server or command-separated list of servers as an allowed target server
+ </div></li><li class="listitem"><div class="para">
+ --hostgroups, which adds a host group to the rule and every host within the host group is an allowed target server
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target server
+ </div></li></ul></div>
- </td><td>
- Target
- </td></tr><tr><td>
- hbacrule-add-sourcehost
- </td><td>
- Adds a server to the list of servers that can be used to access domain services and target servers.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --hosts, which adds an individual server or command-separated list of servers as an allowed source server
- </div></li><li class="listitem"><div class="para">
- --hostgroups, which adds a host group to the rule and every host within the host group is an allowed source server
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the source server
- </div></li></ul></div>
+ </td><td>
+ Target
+ </td></tr><tr><td>
+ hbacrule-add-service
+ </td><td>
+ Adds a service type to the rule.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --hbacsvcs, which adds an individual service type or a comma-separated list of service type as an allowed target service
+ </div></li><li class="listitem"><div class="para">
+ --hbacsvcgroups, which adds a service group to the rule and every service within the service group is an allowed target service
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target service
+ </div></li></ul></div>
- </td><td>
- Source
- </td></tr><tr><td>
- hbacrule-add-user
- </td><td>
- Adds a user to the access control rule. The user is then able to access any allowed target host or service within the domain, from any configured source host.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --users, which adds an individual user or command-separated list of users to the rule
- </div></li><li class="listitem"><div class="para">
- --groups, which adds a user group to the rule and, thus, every user within the group
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the user
- </div></li></ul></div>
+ </td><td>
+ Target
+ </td></tr><tr><td>
+ hbacrule-add-sourcehost
+ </td><td>
+ Adds a server to the list of servers that can be used to access domain services and target servers.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --hosts, which adds an individual server or command-separated list of servers as an allowed source server
+ </div></li><li class="listitem"><div class="para">
+ --hostgroups, which adds a host group to the rule and every host within the host group is an allowed source server
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the source server
+ </div></li></ul></div>
- </td><td>
- Source
- </td></tr><tr><td>
- hbacrule-disable | hbacrule-enable
- </td><td>
- Disables or enables a host-based access control rule. Rules can be disabled if their behavior needs to be evaluated (for troubleshooting or to test a new rule).
- </td><td>
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to disable or enable
- </td><td>
+ </td><td>
+ Source
+ </td></tr><tr><td>
+ hbacrule-add-user
+ </td><td>
+ Adds a user to the access control rule. The user is then able to access any allowed target host or service within the domain, from any configured source host.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --users, which adds an individual user or command-separated list of users to the rule
+ </div></li><li class="listitem"><div class="para">
+ --groups, which adds a user group to the rule and, thus, every user within the group
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the user
+ </div></li></ul></div>
+
+ </td><td>
+ Source
+ </td></tr><tr><td>
+ hbacrule-disable | hbacrule-enable
+ </td><td>
+ Disables or enables a host-based access control rule. Rules can be disabled if their behavior needs to be evaluated (for troubleshooting or to test a new rule).
+ </td><td>
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to disable or enable
+ </td><td>
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="hbac-testing"><div class="titlepage"><div><div><h3 class="title" id="hbac-testing">11.7.3. Testing Host-Based Access Control Rules</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><div class="section" id="hbac-testing"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="hbac-testing">14.4. Testing Host-Based Access Control Rules</h2></div></div></div><div class="para">
Implementing host-based access controls effectively can be tricky because it requires that all of the hosts be properly configured and the access is properly applied to users and services.
</div><div class="para">
The <code class="command">hbactest</code> command can test different host-based access control scenarios to make sure that the rules are working as expected.
- </div><div class="section" id="hbac-limits"><div class="titlepage"><div><div><h4 class="title" id="hbac-limits">11.7.3.1. The Limits of Host-Based Access Control Configuration</h4></div></div></div><div class="para">
+ </div><div class="section" id="hbac-limits"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-limits">14.4.1. The Limits of Host-Based Access Control Configuration</h3></div></div></div><div class="para">
When a request is made to one of the domain services, the identifier of the source host is sent to a PAM interface for the login application (like OpenSSH, telnet, or rlogin) which is used to access SSSD on the target host machine. This identifier can be the hostname, the IP address, or even the alias of the source host.
</div><div class="para">
This is essentially a long chain, from the source host to the target host to the service. The access control mechanism uses the identifier that is sent to the SSSD service on the target machine to verify that the source host has proper authorization granted in an access control rule.
@@ -4625,7 +5982,7 @@ Number of members added 1
The name that is sent by the client <span class="emphasis"><em>must</em></span> match the name in the rule, otherwise host-based access control fails.
</div><div class="para">
The access control configuration should always be tested before it is implemented to prevent authorization failures.
- </div></div><div class="section" id="hbac-test-examples"><div class="titlepage"><div><div><h4 class="title" id="hbac-test-examples">11.7.3.2. Test Scenarios for Host-Based Access Control</h4></div></div></div><div class="para">
+ </div></div><div class="section" id="hbac-test-examples"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-test-examples">14.4.2. Test Scenarios for Host-Based Access Control</h3></div></div></div><div class="para">
Host-based access control rules depend on a lot of interactions — between hosts, services, DNS lookups, and users. If any element is misconfigured, then the rule can behave in unexpected ways.
</div><div class="para">
FreeIPA includes a testing tool to verify that access control rules are behaving in the expected way by testing the access in a defined scenario. There are several situations where this testing is useful:
@@ -4647,7 +6004,7 @@ Number of members added 1
To target host Z (<code class="option">--host</code>)
</div></li><li class="listitem"><div class="para">
The rule to test (<code class="option">--rules</code>); if this is not used, then all enabled rules are tested
- </div></li></ul></div><div class="example" id="ex.hbac-test-all"><h6>Example 11.6. Testing All Active Rules</h6><div class="example-contents"><div class="para">
+ </div></li></ul></div><div class="example" id="ex.hbac-test-all"><h6>Example 14.4. Testing All Active Rules</h6><div class="example-contents"><div class="para">
The most basic command checks all active rules. It requires a specific connection scenario, so the user, login service, source host, and target host have to be given, and the testing tool checks the connection.
</div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh
--------------------
@@ -4656,13 +6013,13 @@ Access granted: True
notmatched: my-second-rule
notmatched: my-third-rule
matched: myrule
- matched: allow_all</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-test"><h6>Example 11.7. Testing a Specific Rule</h6><div class="example-contents"><div class="para">
+ matched: allow_all</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-test"><h6>Example 14.5. Testing a Specific Rule</h6><div class="example-contents"><div class="para">
It is possible to check a specific rules (or several rules).
</div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh --rules=myrule
---------------------
Access granted: True
---------------------
- notmatched: myrule</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-enabled"><h6>Example 11.8. Testing Specific Rules Plus All Enabled</h6><div class="example-contents"><div class="para">
+ notmatched: myrule</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-enabled"><h6>Example 14.6. Testing Specific Rules Plus All Enabled</h6><div class="example-contents"><div class="para">
The <code class="option">--rules</code> option lists specific rules to test, but it may be useful to test the specified rules against all of the enabled rules in the domain. This can be done by adding the <code class="option">--enabled</code> option, which includes the (unspecified) enabled rules along with the specified rules.
</div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh --rules=myrule --enabled
--------------------
@@ -4673,373 +6030,258 @@ Access granted: True
matched: myrule
matched: allow_all</pre><div class="para">
It is possible to run a similar comparison against <span class="emphasis"><em>disabled</em></span> rules by using the <code class="option">--disable</code> option. With the <code class="option">--rules</code> option, the specified rule plus all of the disabled rules are checked. With the <code class="option">--disabled</code> option, all disabled rules are checked.
- </div></div></div><br class="example-break" /></div></div></div></div><div xml:lang="en-US" class="chapter" id="sudo" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 12. Policy: Using sudo</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-sudo">12.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="#defining-sudocmds">12.2. Setting up sudo Commands and Command Groups</a></span></dt><dt><span class="section"><a href="#defining-sudorules">12.3. Defining sudo Rules</a></span></dt><dt><span class="section"><a href="#example-configuring-sudo">12.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">12.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">12.4.2. Client Configuration for sudo Rules</a></sp
an></dt></dl></dd></dl></div><div class="para">
- FreeIPA provides a mechanism for predictably and consistently apply <code class="command">sudo</code> policies across the FreeIPA domain. The <code class="command">sudo</code> policies apply to domain users and domain hosts.
- </div><div class="section" id="about-sudo"><div class="titlepage"><div><div><h2 class="title" id="about-sudo">12.1. About sudo and IPA</h2></div></div></div><div class="para">
- The <code class="command">sudo</code> command allows a system administrator to delegate authority to specific users to run specific commands as root. <code class="command">sudo</code> provides an audit trail of the commands and their arguments, so access can be tracked.
+ </div></div></div><br class="example-break" /></div></div></div><div xml:lang="en-US" class="chapter" id="server-access-controls" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 15. Configuration: Defining Access Control within FreeIPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-ipa-access-controls">15.1. About Access Controls for FreeIPA Entries</a></span></dt><dt><span class="section"><a href="#self-service">15.2. Defining Self-Service Settings</a></span></dt><dd><dl><dt><span class="section"><a href="#self-service-ui">15.2.1. Creating Self-Service Rules from the Web UI</a></span></dt><dt><span class="section"><a href="#self-service-cli">15.2.2. Creating Self-Service Rules from the Command Line</a></span></dt><dt><span class="section"><a href="#self-service-edit">15.2.3. Editing Self-Service Rules</a></span></dt></dl></dd><dt><span class="section"><a href="#delegating-users">15.3. Delegating Permissions
over Users</a></span></dt><dd><dl><dt><span class="section"><a href="#delegating-attributes-ui">15.3.1. Delegating Access to User Groups in the Web UI</a></span></dt><dt><span class="section"><a href="#delegating-attributes-cli">15.3.2. Delegating Access to User Groups in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="#defining-roles">15.4. Defining Role-Based Access Controls</a></span></dt><dd><dl><dt><span class="section"><a href="#creating-roles">15.4.1. Creating Roles</a></span></dt><dt><span class="section"><a href="#creating-perms">15.4.2. Creating New Permissions</a></span></dt><dt><span class="section"><a href="#creating-priv">15.4.3. Creating New Privileges</a></span></dt></dl></dd></dl></div><div class="para">
+ Access control is a security system which defines who can access certain resources — from machines to services to entries — and what kinds of operations they are allowed to perform. FreeIPA provides several access control areas to make it very clear what kind of access is being granted and to whom it is granted. As part of this, FreeIPA draws a distinction between access controls to resources within the domain and access control to the FreeIPA configuration itself.
+ </div><div class="para">
+ This chapter details the different internal access control mechanisms that are available for users within FreeIPA to the FreeIPA server and other FreeIPA users.
+ </div><div class="section" id="about-ipa-access-controls"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-ipa-access-controls">15.1. About Access Controls for FreeIPA Entries</h2></div></div></div><div class="para">
+ Access control defines the rights or permissions users have been granted to perform operations on other users or objects.
</div><div class="para">
- <code class="command">sudo</code> uses a local configuration file, <code class="filename">/etc/sudoers</code>, which defines the commands and users with sudo access. While this file can be shared among machines, there's no native way to distribute <code class="command">sudo</code> configuration files among machines.
+ The FreeIPA access control structure is based on standard LDAP access controls. Access within the FreeIPA server is based on the FreeIPA users (who are stored in the backend Directory Server instance) who are allowed to access other FreeIPA entities (which are also stored as LDAP entries in the Directory Server instance).
</div><div class="para">
- FreeIPA uses its centralized LDAP database to contain the <code class="command">sudo</code> configuration, which makes it globally available to all domain hosts. FreeIPA also has a specialized LDAP schema specifically for <code class="command">sudo</code> entries that allows a lot more flexible and simpler configuration. This schema adds two key features:
+ An access control rule has three parts:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The FreeIPA schema supports host groups in addition to netgroups for <code class="command">sudo</code>, while <code class="command">sudo</code> only supports netgroups.
- </div><div class="para">
- For every host group, FreeIPA also creates a corresponding shadow netgroup. This allows FreeIPA administrators to create <code class="command">sudo</code> rules that reference host groups, while the local <code class="command">sudo</code> command uses the corresponding netgroup.
+ <span class="emphasis"><em>Who can perform the operation</em></span>. This is the entity who is being granted permission to do something; this is the actor. In LDAP access control models, this is called the <span class="emphasis"><em>bind rule</em></span> because it defines who the user is (based on their bind information) and can optionally require other limits on the bind attempt, such as restricting attempts to a certain time of day or a certain machine.
</div></li><li class="listitem"><div class="para">
- FreeIPA introduces the concept of a <span class="emphasis"><em>sudo command group</em></span>. The group contains multiple commands, and then the command group can be referenced in the <code class="command">sudo</code> configuration.
+ <span class="emphasis"><em>What can be accessed</em></span>. This defines the entry which the actor is allowed to perform operations on. This is the <span class="emphasis"><em>target</em></span> of the access control rule.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>What type of operation can be performed</em></span>. The last part is determining what kinds of actions the user is allowed to perform. The most common operations are add, delete, write, read, and search. In FreeIPA, all users are implicitly granted read and search rights to all entries in the FreeIPA domain. The only rights which can be granted are add, delete, and write.
</div></li></ul></div><div class="para">
- Because <code class="command">sudo</code> does not support host groups and command groups, FreeIPA translates the FreeIPA <code class="command">sudo</code> configuration into native <code class="command">sudo</code> configuration when the <code class="command">sudo</code> rules are created.
- </div><div class="para">
- FreeIPA also defines a default <code class="command">sudo</code> user, <code class="systemitem">uid=sudo,cn=sysaccounts,cn=etc,$SUFFIX</code>, which can be set in the LDAP/<code class="command">sudo</code> configuration file, <code class="filename">/etc/nss_ldap.conf</code>.
+ When any operation is attempted, the first thing that the FreeIPA client does is send user credentials as part of the bind operation. The backend Directory Server checks those user credentials and then checks the user account to see if the user has permission to perform the requested operation.
</div><div class="para">
- Both <code class="command">sudo</code> and FreeIPA support user groups as part of the <code class="command">sudo</code> configuration. User groups can be either POSIX or Unix groups. Creating POSIX groups can create some access issues because any users in the group inherit POSIX rights from the group. Having the choice between POSIX and Unix groups allows administrators the choice in group formatting and to avoid problems with inherited permissions or GID information.
- </div></div><div class="section" id="defining-sudocmds"><div class="titlepage"><div><div><h2 class="title" id="defining-sudocmds">12.2. Setting up sudo Commands and Command Groups</h2></div></div></div><div class="para">
- Just as in regular <code class="command">sudo</code> configuration, any command which will be governed by <code class="command">sudo</code> access must be listed in the configuration. FreeIPA adds an extra control measure with <span class="emphasis"><em>sudo command groups</em></span>, which allow a group of commands to be defined and then applied to the <code class="command">sudo</code> configuration as one.
- </div><div class="para">
- Adding a command or a command group makes it available to FreeIPA to be defined in a <code class="command">sudo</code> rule; simply adding a command does not automatically include it in a <code class="command">sudo</code> rule.
+ To make access control rules simple and clear to implement, FreeIPA divides access control definitions into three categories:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Self-service rules</em></span>, which define what operations a user can perform on his own personal entry. The access control type only allows write permissions to attributes within the entry; it does not allow add or delete operations for the entry itself.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Delegation rules</em></span>, which allow a specific user group to perform write (edit) operations on specific attributes for users in another user group. Like self-service rules, this form of access control rule is limited to editing the values of specific attributes; it does not grant the ability to add or remove whole entries or control over unspecified attributes.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Role-based access control</em></span>, which creates special access control groups which are then granted much broader authority over all types of entities in the FreeIPA domain. Roles can be granted edit, add, and delete rights, meaning they can be granted complete control over entire entries, not just selected attributes. Special roles can be created to manage any type of entry, such as hosts, automount configuration, netgroups, DNS settings, and FreeIPA configuration.
+ </div></li></ul></div></div><div class="section" id="self-service"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="self-service">15.2. Defining Self-Service Settings</h2></div></div></div><div class="para">
+ Self-service access control rules define the operations that an entity can perform on itself. These rules are define only what attributes a user (or other FreeIPA entity) can edit on their personal entries. a
</div><div class="para">
- To add a single command, use the <code class="command">sudocmd-add</code> command. This requires the full, local path to the command executable and a description of the command:
- </div><pre class="programlisting">$ ipa sudocmd-add --desc "<em class="replaceable"><code>description</code></em>" <em class="replaceable"><code>/local/path/to/command</code></em></pre><div class="para">
- For example:
- </div><pre class="screen">$ ipa sudocmd-add --desc 'For reading log files' '/usr/bin/less'
-----------------------------------
-Added sudo command "/usr/bin/less"
-----------------------------------
- sudo Command: /usr/bin/less
- Description: For reading log files</pre><div class="para">
- Creating a command group requires creating two entries, one for the group and one for the command itself:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create the command group using the <code class="command">sudocmdgroup-add</code> command:
- </div><pre class="screen">$ ipa sudocmdgroup-add --desc 'File editing commands' files
------------------------------------
-Added sudo command group "files"
------------------------------------
- sudo Command Group: files
- Description: File editing commands</pre></li><li class="listitem"><div class="para">
- Create a command entry using the <code class="command">sudocmd-add</code> command:
- </div><pre class="screen">$ ipa sudocmd-add --desc 'For editing files' '/usr/bin/vim'
-----------------------------------
-Added sudo command "/usr/bin/vim"
-----------------------------------
- sudo Command: /usr/bin/vim
- Description: For edting files</pre></li><li class="listitem"><div class="para">
- Add the command, using its full directory location as its name, to the command group using the <code class="command">sudocmdgroup-add-member</code> command:
-<pre class="screen">$ ipa sudocmdgroup-add-member --sudocmds '/usr/bin/vim' files
- sudo Command Group: files
- Description: File editing commands
- Member sudo commands: /usr/bin/vim
--------------------------
-Number of members added 1
--------------------------</pre>
-
- </div></li></ol></div></div><div class="section" id="defining-sudorules"><div class="titlepage"><div><div><h2 class="title" id="defining-sudorules">12.3. Defining sudo Rules</h2></div></div></div><div class="para">
- <code class="command">sudo</code> rules are in a sense similar to access control rules: they define users who are granted access, the commands which are within the scope of the rule, and then the target hosts to which the rule applies. Each element is added to the rule command using a different command (listed in <a class="xref" href="#tab.sudo-rules-cmds">Table 12.1, “sudo Commands”</a>).
+ Two self-service rules exist by default:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A rule for editing some general attributes in the personal entry, including given name and surname, phone numbers, and addresses.
+ </div></li><li class="listitem"><div class="para">
+ A rule to edit user passwords, including two Samba passwords, the Kerberos password, and the general user password.
+ </div></li></ul></div><div class="section" id="self-service-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="self-service-ui">15.2.1. Creating Self-Service Rules from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Self Service Permissions</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of self-service ACIs.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/selfservice-list.png" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name of the rule in the pop-up window. Spaces are allowed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/selfservice-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the checkboxes by the attributes which this ACI will permit users to edit.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new self-service ACI.
+ </div></li></ol></div></div><div class="section" id="self-service-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="self-service-cli">15.2.2. Creating Self-Service Rules from the Command Line</h3></div></div></div><div class="para">
+ A new self-service rule can be added using the <code class="command">selfservice-add</code> command. There are two required options, <code class="option">--permissions</code> to set whether the ACI grants write, add, or delete permission and <code class="option">--attrs</code> to give the full list of attributes which this ACI grants permission to.
+ </div><pre class="screen">$ ipa selfservice-add "Users can manage their own name details" --permissions=write --attrs=givenname,displayname,title,initials
+-----------------------------------------------------------
+Added selfservice "Users can manage their own name details"
+-----------------------------------------------------------
+ Self-service name: Users can manage their own name details
+ Permissions: write
+ Attributes: givenname, displayname, title, initials</pre></div><div class="section" id="self-service-edit"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="self-service-edit">15.2.3. Editing Self-Service Rules</h3></div></div></div><div class="para">
+ In the self-service entry in the web UI, the only element that can be edited is the list of attributes that are included in the ACI. The checkboxes can be selected or deselected.
+ </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/selfservice-edit.png" width="444" alt="Self-Service Edit Page" /></div></div><h6>Figure 15.1. Self-Service Edit Page</h6></div><br class="figure-break" /><div class="para">
+ With the command line, self-service rules are edited using the <code class="command">ipa selfservice-mod</code> command. The <code class="option">--attrs</code> option overwrites whatever the previous list of supported attributes was, so always include the complete list of attributes along with any new attributes.
+ </div><pre class="screen">$ ipa selfservice-mod "Users can manage their own name details" --attrs=givenname,displayname,title,initials,surname
+--------------------------------------------------------------
+Modified selfservice "Users can manage their own name details"
+--------------------------------------------------------------
+Self-service name: Users can manage their own name details
+Permissions: write
+Attributes: givenname, displayname, title, initials</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Include all of the attributes when modifying a self-service rule, including existing ones.
+ </div></div></div></div></div><div class="section" id="delegating-users"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="delegating-users">15.3. Delegating Permissions over Users</h2></div></div></div><div class="para">
+ Delegation is very similar to roles in that one group of users is assigned permission to manage the entries for another group of users. However, the delegated authority is much more similar to self-service rules in that complete access is granted but only to specific user attributes, not to the entire entry. Also, the groups in delegated authority are existing FreeIPA user groups instead of roles specifically created for access controls.
+ </div><div class="section" id="delegating-attributes-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="delegating-attributes-ui">15.3.1. Delegating Access to User Groups in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Delegations</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of delegation ACIs.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/delegation-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Name the new delegation ACI.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>User group</strong></span> drop-down menu, select the group <span class="emphasis"><em>whose entries can be edited</em></span> by members of the delegation group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/delegation-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Member user group</strong></span> drop-down menu, select the group <span class="emphasis"><em>who is being granted permissions to</em></span> the entries of users in the user group.
+ </div></li><li class="listitem"><div class="para">
+ In the attributes box, select the checkboxes by the attributes to which the member user group is being granted permission.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new delegation ACI.
+ </div></li></ol></div></div><div class="section" id="delegating-attributes-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="delegating-attributes-cli">15.3.2. Delegating Access to User Groups in the Command Line</h3></div></div></div><div class="para">
+ A new delegation access control rule is added using the <code class="command">delegation-add</code> command. There are three required arguments:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <code class="option">--membergroup</code>, the group <span class="emphasis"><em>who is being granted permissions to</em></span> the entries of users in the user group.
+ </div></li><li class="listitem"><div class="para">
+ <code class="option">--group</code>, the group <span class="emphasis"><em>whose entries can be edited</em></span> by members of the delegation group.
+ </div></li><li class="listitem"><div class="para">
+ <code class="option">--attrs</code>, the attributes which users in the member group are allowed to edit.
+ </div></li></ul></div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa delegation-add "basic manager attrs" --attrs=manager,title,employeetype,employeenumber --membergroup=engineering_managers --group=engineering
+--------------------------------------
+Added delegation "basic manager attrs"
+--------------------------------------
+ Delegation name: basic manager attrs
+ Permissions: write
+ Attributes: manager, title, employeetype, employeenumber
+ Member user group: engineering_managers
+ User group: engineering</pre><div class="para">
+ Delegation rules are edited using the <code class="command">delegation-mod</code> command. The <code class="option">--attrs</code> option overwrites whatever the previous list of supported attributes was, so always include the complete list of attributes along with any new attributes.
+ </div><pre class="screen">$ ipa delegation-mod "basic manager attrs" --attrs=manager,title,employeetype,employeenumber,displayname
+-----------------------------------------
+Modified delegation "basic manager attrs"
+-----------------------------------------
+ Delegation name: basic manager attrs
+ Permissions: write
+ Attributes: manager, title, employeetype, employeenumber, displayname
+ Member user group: engineering_managers
+ User group: engineering</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Include all of the attributes when modifying a delegation rule, including existing ones.
+ </div></div></div></div></div><div class="section" id="defining-roles"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="defining-roles">15.4. Defining Role-Based Access Controls</h2></div></div></div><div class="para">
+ Role-based access control grants a very different kind of authority to users compared to self-service and delegation access controls. Role-based access controls are fundamentally administrative, with the potential to add, delete, and significantly modify entries.
</div><div class="para">
- The basic outline of a <code class="command">sudo</code> rule command is:
- </div><pre class="screen">$ ipa sudorule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="example" id="ex.-sudo-basic"><h6>Example 12.1. Creating Basic sudo Rules</h6><div class="example-contents"><div class="para">
- In the most basic case, the <code class="command">sudo</code> configuration is going to grant the right to one user for one command on one host.
- </div><div class="para">
- The first step is to add the initial rule entry.
- </div><pre class="screen">$ ipa sudorule-add files-commands
------------------------------------
-Added sudo rule "files-commands"
------------------------------------
- Rule name: files-commands
- Enabled: TRUE
-</pre><div class="para">
- Next, add the commands to <span class="emphasis"><em>grant</em></span> access to. This can be a single command, using <code class="option">--sudocmd</code>, or a group of commands, using <code class="option">--sudocmdgroups</code>.
-<pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/vim" files-commands
- Rule name: files-commands
- Enabled: TRUE
- sudo Commands: /usr/bin/vim
--------------------------
-Number of members added 1
--------------------------
-</pre>
-
- </div><div class="para">
- Add a host or a host group to the rule.
- </div><pre class="screen">$ ipa sudorule-add-host --host server.example.com files-commands
- Rule name: files-commands
- Enabled: TRUE
- Hosts: server.example.com
- sudo Commands: /usr/bin/vim
--------------------------
-Number of members added 1
--------------------------</pre><div class="para">
- Last, add the user or group to the rule. This is the user who is allowed to use <code class="command">sudo</code> as defined in the rule; if no "run-as" user is given, then this user will run the <code class="command">sudo</code> commands as root.
- </div><pre class="screen">$ ipa sudorule-add-user --user jsmith files-commands
- Rule name: readonly-commands
- Enabled: TRUE
- Users: jsmith
- Hosts: server.example.com
- sudo Commands: /usr/bin/vim"
--------------------------
-Number of members added 1
--------------------------
-</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-allowing-denying"><h6>Example 12.2. Allowing and Denying Commands</h6><div class="example-contents"><div class="para">
- The <code class="command">sudo</code> rule can grant access or deny access to commands. For example, this rule would allow read access to files but prevent editing:
- </div><pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/less" readfiles
-$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/tail" readfiles
-$ ipa sudorule-add-deny-command --sudocmd "/usr/bin/vim" readfiles</pre></div></div><br class="example-break" /><div class="example" id="Ex.sudo-options"><h6>Example 12.3. Using sudoers Options</h6><div class="example-contents"><div class="para">
- The <code class="command">sudoers</code> file has a lot of potential flags that can be set to control the behavior of <code class="command">sudo</code> users, like requiring (or not requiring) passwords to offer a user to authenticate to <code class="command">sudo</code> or using fully-qualified domain names in the <code class="command">sudoers</code> file. The complete list of options is in the <code class="command">sudoers</code> manpage and at <a href="http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options">http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options</a>.
- </div><div class="para">
- Any of these options can be set for the FreeIPA <code class="command">sudo</code> rule using the <code class="command">sudorule-add-option</code> command. When the command is run, it prompts for the option to add:
- </div><pre class="screen">$ ipa sudorule-add-option readfiles
-Sudo Option: !authenticate
------------------------------------------------------
-Added option "!authenticate" to Sudo rule "readfiles"
------------------------------------------------------</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-runas"><h6>Example 12.4. Running as Other Users</h6><div class="example-contents"><div class="para">
- The <code class="command">sudo</code> rule also has the option of specifying a non-root user or group to run the commands as. The initial rule has the user or group specified using the <code class="option">--sudorule-add-runasuser</code> or <code class="option">--sudorule-add-runasgroup</code> command, respectively.
- </div><pre class="screen">$ ipa sudorule-add-runasuser --users=jsmith readfiles
-$ ipa sudorule-add-runasgroup --groups=ITadmins readfiles</pre><div class="para">
- When creating a rule, the <code class="command">sudorule-add-runasuser</code> or <code class="command">sudorule-add-runasgroup</code> command can only set <span class="emphasis"><em>specific</em></span> users or groups. However, when editing a rule, it is possible to run <code class="command">sudo</code> as all users or all groups by using the <code class="option">--runasusercat</code> or <code class="option">--runasgroupcat</code> option. For example:
- </div><pre class="screen">$ ipa sudorule-mod --runasgroupcat=all <em class="replaceable"><code>ruleName</code></em></pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The <code class="option">--sudorule-add-runasuser</code> and <code class="option">--sudorule-add-runasgroup</code> commands do not support an <code class="command">all</code> option, only specific user or group names. Specifying all users or all groups can only be used with options with the <code class="command">sudorule-mod</code> command.
- </div></div></div><div class="table" id="tab.sudo-rules-cmds"><h6>Table 12.1. sudo Commands</h6><div class="table-contents"><table summary="sudo Commands" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- Command
+ There are three parts to role-based access controls:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The <span class="emphasis"><em>permission</em></span>. The permission defines a specific operation or set of operations (write, add, or delete) and the target entries within the FreeIPA LDAP directory to which those operations apply. Permissions are building blocks; they can be assigned to multiple privileges as needed.
+ </div></li><li class="listitem"><div class="para">
+ The <span class="emphasis"><em>privileges</em></span> available to a role. A privilege is essentially a group of permissions. Permissions are not applied directly to a role. Permissions are added to a privilege so that the privilege creates a coherent and complete picture of a set of access control rules. For example, a permission can be created to add, edit, and delete automount locations. Then that permission can be combined with another permission relating to managing FTP services, and they can be used to create a single privilege that relates to managing filesystems.
+ </div></li><li class="listitem"><div class="para">
+ The <span class="emphasis"><em>role</em></span>. This is the list of FreeIPA users who are able to perform the actions defined in the privileges.
+ </div></li></ul></div><div class="para">
+ It is possible to create entirely new permissions, as well as to create new privileges based on existing permissions or new permissions. A list of the default privileges and their associated permissions are in <a class="xref" href="#tab.default-perms">Table 15.1, “Privileges and Permissions in FreeIPA”</a>.
+ </div><div class="table" id="tab.default-perms"><h6>Table 15.1. Privileges and Permissions in FreeIPA</h6><div class="table-contents"><table summary="Privileges and Permissions in FreeIPA" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Privilege
</th><th>
- Description
+ Associated Permissions
</th></tr></thead><tbody><tr><td>
- sudorule-add
+ Automount Administrators
</td><td>
- Adds a sudo rule entry.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Automount_maps</td></tr><tr><td>Remove_Automount_maps</td></tr><tr><td>Add_Automount_keys</td></tr><tr><td>Remove_Automount_keys</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-user
+ Certificate Administrators
</td><td>
- Adds a user or a user group to the sudo rule. This user (or every member of the group) is then entitled to sudo any of the commands in the rule.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Retrieve_Certificates_from_the_CA</td></tr><tr><td>Request_Certificate</td></tr><tr><td>Request_Certificates_from_a_different_hos</td></tr><tr><td>Get_Certificates_status_from_the_CA</td></tr><tr><td>Revoke_Certificate</td></tr><tr><td>Certificate_Remove_Hold</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-host
+ Delegation Administrator
</td><td>
- Adds a target host for the rule. These are the hosts where the users are granted sudo permissions.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Roles</td></tr><tr><td>Remove_Roles</td></tr><tr><td>Modify_Roles</td></tr><tr><td>Modify_Role_membership</td></tr><tr><td>Modify_privilege_membership</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-runasgroup
+ DNS Administrators (for users)
</td><td>
- Sets a group to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>add_dns_entries</td></tr><tr><td>remove_dns_entries</td></tr><tr><td>update_dns_entries</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-runasuser
+ DNS Servers (for machines)
</td><td>
- Sets a user to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>add_dns_entries</td></tr><tr><td>remove_dns_entries</td></tr><tr><td>update_dns_entries</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-allow-command
+ Group Administrators
</td><td>
- Adds a command that users in the rule have sudo permission to run.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Groups</td></tr><tr><td>Remove_Groups</td></tr><tr><td>Modify_Groups</td></tr><tr><td>Modify_Group_membership</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-deny-command
+ HBAC Administrator
</td><td>
- Adds a command that users in the rule are explicitly <span class="emphasis"><em>denied</em></span> sudo permission to run.
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_HBAC_rule</td></tr><tr><td>Delete_HBAC_rule</td></tr><tr><td>Modify_HBAC_rule</td></tr><tr><td>Manage_HBAC_rule_membership</td></tr><tr><td>Add_HBAC_services</td></tr><tr><td>Delete_HBAC_services</td></tr><tr><td>Add_HBAC_service_groups</td></tr><tr><td>Delete_HBAC_service_groups</td></tr><tr><td>Manage_HBAC_service_group_membership</td></tr></table>
+
</td></tr><tr><td>
- sudorule-add-option
+ Host Administrators
</td><td>
- Adds a sudoers flag to the sudo rule.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="example-configuring-sudo"><div class="titlepage"><div><div><h2 class="title" id="example-configuring-sudo">12.4. An Example of Configuring sudo</h2></div></div></div><div class="para">
- Implementing <code class="command">sudo</code> requires setting up the command configuration on the FreeIPA server and then configuring the local <code class="command">sudo</code> client to look for the appropriate configuration.
- </div><div class="section" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules"><div class="titlepage"><div><div><h3 class="title" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">12.4.1. Server Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Set up a host group, as described in <a class="xref" href="#host-groups">Section 11.5, “Managing Host Groups”</a>.
- </div></li><li class="listitem"><div class="para">
- Create a user group and add the users, as described in <a class="xref" href="#Configuring_IPA_Groups-Creating_IPA_Groups">Section 5.6.1, “Creating User Groups”</a>.
- </div></li><li class="listitem"><div class="para">
- Set up a bind user by setting a password for the default FreeIPA <code class="command">sudo</code> bind user.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- A password operation must occur over a secure connection. To use TLS/SSL, first export the location of the certificate to use to establish the secure connection:
- </div><pre class="screen">$ export LDAPTLS_CACERT=/etc/ipa/ca.crt</pre></li><li class="listitem"><div class="para">
- Using the LDAP tools, set the password for the <code class="command">sudo</code> user, <code class="command">uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com</code>:
- </div><pre class="screen">$ ldappasswd -x -S -W -h ipaserver.ipadocs.org -ZZ -D "cn=Directory Manager" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com
- New password:
- Re-enter new password:
- Enter LDAP Password:</pre></li></ol></div></li><li class="listitem"><div class="para">
- Set up the sudo commands and command groups, as described in <a class="xref" href="#defining-sudocmds">Section 12.2, “Setting up sudo Commands and Command Groups”</a>.
- </div></li><li class="listitem"><div class="para">
- Set up the sudo rules, as described in <a class="xref" href="#defining-sudorules">Section 12.3, “Defining sudo Rules”</a>.
- </div></li></ol></div></div><div class="section" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules"><div class="titlepage"><div><div><h3 class="title" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">12.4.2. Client Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Configure <code class="command">sudo</code> to look to LDAP for the <code class="filename">sudoers</code> file.
-<pre class="programlisting">vim /etc/nsswitch.conf
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Hosts</td></tr><tr><td>Remove_Hosts</td></tr><tr><td>Modify_Hosts</td></tr><tr><td>Manage_host_keytab</td></tr><tr><td>Enroll_a_host</td></tr><tr><td>Add_krbPrincipalName_to_a_host</td></tr></table>
-sudoers: files ldap</pre>
+ </td></tr><tr><td>
+ Host Enrollment
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Manage_host_keytab</td></tr><tr><td>Enroll_a_host</td></tr><tr><td>Add_krbPrincipalName_to_a_host</td></tr></table>
- </div><div class="para">
- Leaving the <code class="option">files</code> option in place allows <code class="command">sudo</code> to check its local configuration before checking the LDAP-based FreeIPA configuration.
- </div></li><li class="listitem"><div class="para">
- Configure SSSD to look for NIS netgroups.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Add the following line immediately after the <em class="parameter"><code>ipa_server</code></em> entry in the <code class="filename">/etc/sssd/sssd.conf</code> file:
-<pre class="programlisting">ldap_netgroup_search_base = cn=ng,cn=compat,dc=example,dc=com</pre>
+ </td></tr><tr><td>
+ Host Group Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Hostgroups</td></tr><tr><td>Remove_Hostgroups</td></tr><tr><td>Modify_Hostgroups</td></tr><tr><td>Modify_Hostgroup_membership</td></tr></table>
- </div></li><li class="listitem"><div class="para">
- Restart the SSSD daemon:
-<pre class="screen"># service sssd restart</pre>
+ </td></tr><tr><td>
+ Modify Users and Reset Passwords
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Modify_Users</td></tr></table>
- </div></li></ol></div></li><li class="listitem"><div class="para">
- Edit the NSS configuration file and add the following <code class="command">sudo</code>-related lines to the <code class="filename">/etc/nss_ldap.conf</code> file:
-<pre class="programlisting">sudoers_base ou=SUDOers,dc=example,dc=com
-binddn uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com
-bindpw <em class="replaceable"><code>sudo_password</code></em>
-ssl start_tls
-tls_cacertfile /etc/ipa/ca.crt
-tls_checkpeer yes
-bind_timelimit 5
-timelimit 15
-uri ldap://ipaserver.ipadocs.org
-</pre>
+ </td></tr><tr><td>
+ Netgroups Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_netgroups</td></tr><tr><td>Remove_netgroups</td></tr><tr><td>Modify_netgroups</td></tr><tr><td>Modify_netgroup_membership</td></tr></table>
- </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Adding the <em class="parameter"><code>sudoers_debug</code></em> parameter helps with troubleshooting. Valid values for this parameter are 0, 1, and 2. The <code class="command">sudo</code> documentation at <a href="http://www.gratisoft.us/sudo/readme_ldap.html">http://www.gratisoft.us/sudo/readme_ldap.html</a> has more information on debugging the process.
- </div></div></div></li><li class="listitem"><div class="para">
- Create a symlink between the <code class="command">nss_ldap</code> module configuration file and the system LDAP configuration filke:
-<pre class="screen"># ln -s /etc/nss_ldap.conf /etc/ldap.conf</pre>
+ </td></tr><tr><td>
+ Password Policy Administrator
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Group_Password_Policy_costemplate</td></tr><tr><td>Delete_Group_Password_Policy_costemplate</td></tr><tr><td>Modify_Group_Password_Policy_costemplate</td></tr><tr><td>Add_Group_Password_Policy</td></tr><tr><td>Delete_Group_Password_Policy</td></tr><tr><td>Modify_Group_Password_Policy</td></tr></table>
- </div></li><li class="listitem"><div class="para">
- Set up the NIS domain. <code class="command">sudo</code> uses NIS netgroups, so the NIS domain name must be set in the system configuration for <code class="command">sudo</code> to be able to find the host groups used in the FreeIPA <code class="command">sudo</code> configuration:
-<pre class="screen"># nisdomainname example.com</pre>
+ </td></tr><tr><td>
+ Read Entitlements
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Read_Entitlements</td></tr></table>
- </div></li></ol></div></div></div></div><div xml:lang="en-US" class="chapter" id="server-config" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 13. Configuring the FreeIPA Server</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#default.conf">13.1. About default.conf</a></span></dt><dt><span class="section"><a href="#managing-access-to-ipa">13.2. Defining Access Controls within FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="#Server_side_Access_Control">13.2.1. Server-side Access Control</a></span></dt><dt><span class="section"><a href="#creating-roles">13.2.2. Creating Roles</a></span></dt><dt><span class="section"><a href="#self-service">13.2.3. Defining Self-Service Settings</a></span></dt></dl></dd><dt><span class="section"><a href="#disabling-anon-binds">13.3. Disabling Anonymous Binds</a></span></dt><dt><span class="section"><a href="#Managing-Unique_UID_and_GID_Attributes">13.4. Managing Un
ique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="#id-ranges-at-install">13.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="#Assigning_UIDs_and_GIDs-Adding_New_Ranges">13.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="#Configuring_Certificates_and_Certificate_Authorities">13.5. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="#Using_OCSP">13.6. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="#ocsp-interval">13.6.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="#ocsp-location">13.6.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-apache">13.7. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="#ipa-cluster">13.8. Using F
reeIPA in a Cluster</a></span></dt><dd><dl><dt><span class="section"><a href="#Implementing_IPA_in_a_Clustered_Environment-Configuring_Kerberos_Credentials_for_a_Clustered_Environment">13.8.1. Configuring Kerberos Credentials for a Clustered Environment</a></span></dt><dt><span class="section"><a href="#Implementing_IPA_in_a_Clustered_Environment-Using_the_Same_Service_Principal_for_Multiple_Services">13.8.2. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="#logging">13.9. Checking FreeIPA Server Logs</a></span></dt><dt><span class="section"><a href="#dns-multihomed">13.10. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="#promoting-replica">13.11. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dt><span class="section"><a href="#upgrading-server">13.12. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></div><div class="section" id="
default.conf"><div class="titlepage"><div><div><h2 class="title" id="default.conf">13.1. About default.conf</h2></div></div></div><div class="para">
- Certain global defaults — like the realm information, the LDAP configuration, and the CA settings — are stored in the <code class="filename">default.conf</code> file. This configuration file is used when the FreeIPA client and servers are running, to supply information as operations are performed.
- </div><div class="para">
- The parameters in the <code class="filename">default.conf</code> file are simple <span class="emphasis"><em>attribute=value</em></span> pairs. The attributes are case-insensitive and order-insensitive.
- </div><pre class="programlisting"><span class="perl_String">[global]</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_Float">basedn=</span><span class="perl_DataType">dc</span><span class="perl_String">=example,</span><span class="perl_DataType">dc</span><span class="perl_String">=com</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_Float">realm=</span><span class="perl_String">EXAMPLE.COM</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_Reserved">domain</span><span class="perl_String">=example.com</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">xmlrpc_</span><span class="perl_Float">uri=</span><span class="perl_String">https://server.example.com/ipa/xml</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">ldap_</span><span class="perl_Float">uri=</span><span class="perl_String">ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">enable_</span><span class="perl_Float">ra=</span><span class="perl_String">True</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">ra_</span><span class="perl_Float">plugin=</span><span class="perl_String">dogtag</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_Float">mode=</span><span class="perl_String">production</span></pre><div class="para">
- When adding more configuration attributes or overriding the global values, users can create an optional configuration file in <code class="filename">~/.ipa/default.conf</code>. This optional file is merged with <code class="filename">efault.conf</code> and used by the local FreeIPA services.
- </div></div><div class="section" id="managing-access-to-ipa"><div class="titlepage"><div><div><h2 class="title" id="managing-access-to-ipa">13.2. Defining Access Controls within FreeIPA</h2></div></div></div><div class="para">
- Access control is a mechanism which defines user access. That is, it defines the rights that users and other objects have been granted in order to perform operations on other users or objects. When the FreeIPA directory server receives a request, it uses the authentication information provided by the user in the bind operation together with <em class="firstterm">access control instructions (ACIs)</em> defined in the server to allow or deny access to directory information. The server can allow or deny permissions for actions, such as read, write, search, and compare, on directory server entries. The permission level granted to a user may depend on the authentication information provided.
- </div><div class="para">
- FreeIPA implements a number of different methods for controlling access to the various objects, commands and processes that exist within a FreeIPA domain. This includes a Kerberos Ticket Policy, a Password Policy, Host-based Access Control and SUDO Command Policies for controlling client access to services and commands; that is, outside of the FreeIPA server, and a separate Access Control Model for controlling server-side objects; that is, LDAP entries within the FreeIPA server.
- </div><div class="para">
- FreeIPA relies on three separate types of access control rules:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Role-based rules: specify what operations an entity can perform based on its FreeIPA Role.
- </div></li><li class="listitem"><div class="para">
- Self-service rules: specify what an entity can change within its own entry.
- </div></li><li class="listitem"><div class="para">
- Delegation rules: specify which groups can modify members of another group.
- </div></li></ul></div><div class="para">
- These three types of access control complement each other, and allow FreeIPA administrators to create a very flexible set of access control permissions and restrictions.
- </div><div class="para">
- Role-based access control (RBAC) is a hierarchical way of organizing access to the data managed by FreeIPA. Users, groups, hosts, and host groups can be added to different FreeIPA Roles. These roles provide the necessary permissions for access. You can create as many roles as you need to suit the requirements of your deployment.
- </div><div class="para">
- There are several aspects to working with roles. Because it is a hierarchical system, to create a fully operational role you need to create the role itself, add privileges to this role to establish what tasks it can and cannot perform, and finally add members to the role, such as users, groups, etc. The reverse is also true; if you remove a role, then any users or groups who relied on this role to perform certain tasks will no longer be able to do so.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- You cannot create nested roles. That is, a role cannot contain another role.
- </div></div></div><div class="section" id="Server_side_Access_Control"><div class="titlepage"><div><div><h3 class="title" id="Server_side_Access_Control">13.2.1. Server-side Access Control</h3></div></div></div><div class="para">
- The FreeIPA Access Control Model is based on the underlying 389 Directory Server access control model, which uses access control instructions (ACIs) to define user access within the system. An ACI is a construct that can express a complex set of access control information.
- </div><div class="para">
- As explained in the directory server documentation, the three main parts of an ACI statement are:
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Target
- </div></li><li class="listitem"><div class="para">
- Permission
- </div></li><li class="listitem"><div class="para">
- Bind Rule
- </div></li></ul></div>
+ </td></tr><tr><td>
+ Register and Write Entitlements
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Register_Entitlements</td></tr><tr><td>Write_Entitlements</td></tr></table>
- </div><div class="para">
- The ACI structure itself is very flexible, but can also be confusing. FreeIPA attempts to structure these ACIs in order to provide a formalized input and output that can be expressed on the command line and in the WebUI, while at the same time maintaining sufficient flexibility to create complex access control rules. In order to achieve this, FreeIPA implements three types of access control. These are discussed in the following sections.
- </div><div class="section" id="Server_side_Access_Control-Types_of_Access_Control"><div class="titlepage"><div><div><h4 class="title" id="Server_side_Access_Control-Types_of_Access_Control">13.2.1.1. Types of Access Control</h4></div></div></div><div class="para">
- FreeIPA relies on three separate types of access control rules:
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Role-based
- </div></li><li class="listitem"><div class="para">
- Self-service
- </div></li><li class="listitem"><div class="para">
- Delegation
- </div></li></ul></div>
- These three types of access control complement each other, allowing FreeIPA administrators to create a very flexible set of access control permissions and restrictions.
- </div><div class="formalpara" id="Types_of_Access_Control-Role_based_Access_Control"><h5 class="formalpara">Role-based Access Control</h5>
- Role-based access control (RBAC) is a hierarchical way of organizing access to the data managed by FreeIPA. Different users who perform the same tasks within an organization are typically combined into a group, and this group is made a member of a FreeIPA <em class="firstterm">Role</em>. This Role provides the member groups and users the necessary permissions to perform their assigned tasks.
- </div><div class="formalpara" id="Types_of_Access_Control-Self_service_Access_Control"><h5 class="formalpara">Self-service Access Control</h5>
- Self-service access control defines what operations an entity can perform on itself. This method of control is attribute based; that is, it defines what attributes can be modified for any particular entity. The ability of a user to update their own password is an example of self-service access control. Self-service access control applies to any authenticated entity performing an operation, not only to users. This method of access control should also be used with caution, to avoid the possibility that it lead to the elevation of an entity's privileges.
- </div><div class="formalpara" id="Types_of_Access_Control-Delegation_Access_Control"><h5 class="formalpara">Delegation Access Control</h5>
- Delegation access control defines what operations one group of users or entries can perform on another group of users or entries. In each case, the group of users or entries may be identified by a provided filter. The core difference between delegation access control rules and other rules is that the target—the object of the access control rule—is not a class of entries but rather a set of specific entries that are members of a group or retrieved by a specific filter. The delegation rules allow targeted management of specific user entries.
- </div><div class="para">
- In each case, the access control rule resolves the constituents of the FreeIPA access control expression: "<em class="firstterm">Who</em> can do <em class="firstterm">What</em> to <em class="firstterm">Whom</em>". The following section explains these constituents in more detail.
- </div><div class="section" id="Types_of_Access_Control-The_IPA_Access_Control_Expression"><div class="titlepage"><div><div><h5 class="title" id="Types_of_Access_Control-The_IPA_Access_Control_Expression">13.2.1.1.1. The FreeIPA Access Control Expression</h5></div></div></div><div class="formalpara" id="The_IPA_Access_Control_Expression-The_Who_of_Access_Control"><h5 class="formalpara">The "Who" of Access Control</h5>
- In simple grammatical terms, the "who" of a FreeIPA <em class="firstterm">access control instruction (ACI)</em>, or expression, is the subject. It specifies the entity that interacts with the system and tries to perform an administrative task. This task could be an administrator adding a user, a user changing his home address, or a host requesting a certificate for a service running on the host.
- </div><div class="para">
- It is important to understand that the "who" is not necessarily a person; it can be any entity that has successfully authenticated against FreeIPA. In order to authenticate against the FreeIPA server, this entity, the "who", needs to have a Kerberos principal. After the entity has authenticated, it can connect to the FreeIPA server and try to issue administrative commands. The system will either allow or deny the requested operation based on this entity's permissions.
- </div><div class="formalpara" id="The_IPA_Access_Control_Expression-The_What_of_Access_Control"><h5 class="formalpara">The "What" of Access Control</h5>
- To continue the analogy with grammatical terms, the "what" of a FreeIPA ACI is the verb. This specifies the actual administrative operation that the subject, the "who", is trying to perform. Such operations can target actual entries, such as adding or deleting users, or they can target specific attributes of entries, such as changing phone numbers for a user entry, or changing the member attributes of a group entry.
- </div><div class="para">
- Most entry attributes are optional, and the operations against attributes can be any of the following:
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Add — allows the creation of a new attribute, or new values for multi-valued attributes.
- </div></li><li class="listitem"><div class="para">
- Delete — allows the removal of an attribute.
- </div></li><li class="listitem"><div class="para">
- Read — makes attributes accessible.
- </div></li><li class="listitem"><div class="para">
- Write — allows modification of existing attributes.
- </div></li></ul></div>
+ </td></tr><tr><td>
+ Replication Administrators<sup>[<a id="id883284" href="#ftn.id883284" class="footnote">a</a>]</sup>
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Replication_Agreements</td></tr><tr><td>Remove_Replication_Agreements</td></tr><tr><td>Modify_Replication_Agreements</td></tr></table>
- </div><div class="formalpara" id="The_IPA_Access_Control_Expression-The_Whom_of_Access_Control"><h5 class="formalpara">The "Whom" of Access Control</h5>
- The "whom" of a FreeIPA ACI is the object, or <em class="firstterm">target</em>, upon which the ACI acts. Targets can be expressed in different ways:
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- As a class of entries, for example: <code class="classname">user</code>; <code class="classname">group</code>; <code class="classname">host</code>.
- </div></li><li class="listitem"><div class="para">
- As a location in a specific part of the directory tree, for example: everything under <em class="parameter"><code>cn=accounts</code></em>.
- </div></li><li class="listitem"><div class="para">
- As a specific attribute potentially used in many types of entries, for example: the <em class="parameter"><code>cn</code></em> attribute.
- </div></li><li class="listitem"><div class="para">
- As a specific entry, for example: <em class="parameter"><code>fqdn=mycomp.mywork.com</code></em>.
- </div></li><li class="listitem"><div class="para">
- As a set of entries selected by filter, for example: <em class="parameter"><code>cn="filter"</code></em>.
- </div></li></ul></div>
+ </td></tr><tr><td>
+ Service Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Services</td></tr><tr><td>Remove_Services</td></tr><tr><td>Modify_Services</td></tr><tr><td>Manage_service_keytab</td></tr></table>
+
+ </td></tr><tr><td>
+ Sudo Administrator
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Sudo_rule</td></tr><tr><td>Delete_Sudo_rule</td></tr><tr><td>Modify_Sudo_rule</td></tr><tr><td>Add_Sudo_command</td></tr><tr><td>Delete_Sudo_command</td></tr><tr><td>Modify_Sudo_command</td></tr><tr><td>Add_Sudo_command_group</td></tr><tr><td>Delete_Sudo_command_group</td></tr><tr><td>Manage_Sudo_command_group_membership</td></tr></table>
- </div></div><div class="section" id="Types_of_Access_Control-Directory_Server_ACIs_and_IPA_Access_Control_Types"><div class="titlepage"><div><div><h5 class="title" id="Types_of_Access_Control-Directory_Server_ACIs_and_IPA_Access_Control_Types">13.2.1.1.2. 389 Directory Server ACIs and FreeIPA Access Control Types</h5></div></div></div><div class="para">
- The following table summarizes the relationship between the different 389 Directory Server ACI components and the FreeIPA access control types.
- </div><div class="table" id="tab.aci-mapping"><h6>Table 13.1. Mapping 389 Directory Server and FreeIPA Access Control Types</h6><div class="table-contents"><table summary="Mapping 389 Directory Server and FreeIPA Access Control Types" border="1"><colgroup><col align="left" width="25%" /><col align="left" width="25%" /><col align="left" width="25%" /><col align="left" width="25%" /></colgroup><thead><tr><th align="left">
- Type of Access Control
- </th><th align="left">
- Target
- </th><th align="left">
- Permission
- </th><th align="left">
- Bind Rule
- </th></tr></thead><tbody><tr><td align="left">
- Role-based
- </td><td align="left">
- An entry as a whole (for add and delete), or a set of attributes of an entry.
- </td><td align="left">
- Write, Add, or Delete. Read is implied.
- </td><td align="left">
- <div class="para">
- Taskgroup.
- </div>
- <div class="para">
- (A taskgroup is a special internal entry developed as part of FreeIPA to construct the access control hierarchy. A taskgroup is a "container" that is granted permission to perform specific tasks.)
- </div>
-
- </td></tr><tr><td align="left">
- Self-service
- </td><td align="left">
- Attributes within the entity's own entry.
- </td><td align="left">
- Write permission for specific attributes. All attributes are readable unless globally hidden.
- </td><td align="left">
- The entity who authenticated.
- </td></tr><tr><td align="left">
- Delegation
- </td><td align="left">
- A group of users or a set of entries selected by a filter.
- </td><td align="left">
- Write, Add, or Delete. Read is implied.
- </td><td align="left">
- A group of users, usually a group of administrative users.
- </td></tr></tbody></table></div></div><br class="table-break" /></div></div></div><div class="section" id="creating-roles"><div class="titlepage"><div><div><h3 class="title" id="creating-roles">13.2.2. Creating Roles</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Add the new role:
- </div><pre class="screen"># ipa role-add --desc="User Administrator" useradmin
+ </td></tr><tr><td>
+ User Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Change_a_user_password</td></tr><tr><td>Add_user_to_default_group</td></tr><tr><td>Unlock_user_accounts</td></tr><tr><td>Remove_Users</td></tr><tr><td>Modify_Users</td></tr></table>
+
+ </td></tr><tr><td>
+ Write IPA
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Write_IPA_Configuration</td></tr></table>
+
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><div class="para"><sup>[<a id="ftn.id883284" href="#id883284" class="para">a</a>] </sup>
+ This permission can only be granted to servers, not to users.
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="creating-roles"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-roles">15.4.1. Creating Roles</h3></div></div></div><div class="section" id="creating-roles-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-roles-ui">15.4.1.1. Creating Roles in the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Role Based Access Control</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of role-based ACIs.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the role name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to save the new role and go to the configuration page.
+ </div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Privileges</strong></span> tab in the role configuration page.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the list of privileges to add a new privilege.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-privlist.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the role name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-add.png" width="444" /></div></div></li></ol></div></div><div class="section" id="creating-roles-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-roles-cli">15.4.1.2. Creating Roles in the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add the new role:
+ </div><pre class="screen"># ipa role-add --desc="User Administrator" useradmin
------------------------
Added role "useradmin"
------------------------
Role name: useradmin
Description: User Administrator</pre></li><li class="listitem"><div class="para">
- Add the required privileges to the role:
- </div><pre class="screen"># ipa role-add-privilege --privileges="User Administrators" useradmin
+ Add the required privileges to the role:
+ </div><pre class="screen"># ipa role-add-privilege --privileges="User Administrators" useradmin
Role name: useradmin
Description: User Administrator
Privileges: user administrators
@@ -5047,8 +6289,8 @@ uri ldap://ipaserver.ipadocs.org
Number of privileges added 1
----------------------------
</pre></li><li class="listitem"><div class="para">
- Add the required groups to the role. In this case, we are adding only a single group, <code class="systemitem">useradmin</code>, which already exists.
- </div><pre class="screen"># ipa role-add-member --groups=useradmins useradmin
+ Add the required groups to the role. In this case, we are adding only a single group, <code class="systemitem">useradmin</code>, which already exists.
+ </div><pre class="screen"># ipa role-add-member --groups=useradmins useradmin
Role name: useradmin
Description: User Administrator
Member groups: useradmins
@@ -5056,97 +6298,494 @@ uri ldap://ipaserver.ipadocs.org
-------------------------
Number of members added 1
-------------------------
-</pre></li></ol></div><div class="para">
- The result of this procedure is that any user in the <code class="systemitem">useradmins</code> group can add, modify, and remove users, change user passwords, add users to the default group, and unlock user accounts. You can use the <code class="command">ipa privilege-show</code> command to determine exactly which command set the user or group can access:
-<pre class="screen"># ipa privilege-show 'user administrators'
- Privilege name: User Administrators
- Description: User Administrators
- Permissions: add users, change a user password, add user to default group, unlock user accounts,
- remove users, modify users
- Granting privilege to roles: useradmin</pre>
+</pre></li></ol></div></div></div><div class="section" id="creating-perms"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-perms">15.4.2. Creating New Permissions</h3></div></div></div><div class="section" id="creating-perms-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-perms-ui">15.4.2.1. Creating New Permissions from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Role Based Access Control</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Permissions</strong></span> task link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of permissions.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-permission-list.png" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name of the new permission.
+ </div></li><li class="listitem"><div class="para">
+ Select the checkboxes next to the allowed operations for this permission.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-permission-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the method to use to identify the target entries from the <span class="guilabel"><strong>Target</strong></span> drop-down menu. There are four different methods:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Type</em></span> looks for an entry type like user, host, or service and then provides a list of all possible attributes for that entry type. The attributes which will be accessible through this ACI are selected from the list.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Filter</em></span> uses an LDAP filter to identify which entries the permission applies to. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Subtree</em></span> targets every entry beneath the specified subtree entry. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Target group</em></span> specifies a user group, and all the user entries within that group are available through the ACI. All attributes within the matching entries can be modified.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Fill in the required information to identify the target entries, depending on the selected type.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the permission.
+ </div></li></ol></div></div><div class="section" id="creating-perms-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-perms-cli">15.4.2.2. Creating New Permissions from the Command Line</h4></div></div></div><div class="para">
+ A new permission is added using the <code class="command">permission-add</code> command. All permissions require a list of allowed actions (<code class="option">--permissions</code>), but the way that the target entries for the ACI are selected can be different. There are four options:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--type</em></span> looks for an entry type like user, host, or service and then provides a list of all possible attributes for that entry type. The attributes which will be accessible through this ACI are selected from the list.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--filter</em></span> uses an LDAP filter to identify which entries the permission applies to. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--subtree</em></span> targets every entry beneath the specified subtree entry. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--targetgroup</em></span> specifies a user group, and all the user entries within that group are available through the ACI. All attributes within the matching entries can be modified.
+ </div></li></ul></div><div class="example" id="ex.perm-filter"><h6>Example 15.1. Adding a Permission with a Filter</h6><div class="example-contents"><div class="para">
+ A filter can be any valid LDAP filter.
+ </div><pre class="screen">$ ipa permission-add "manage Windows groups" --filter="posixGroup=true"</pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="command">permission-add</code> command does not validate the given LDAP filter. Verify that the filter returns the expected results before configuring the permission.
+ </div></div></div><div class="example" id="ex.perm-subtree"><h6>Example 15.2. Adding a Permission for a Subtree</h6><div class="example-contents"><div class="para">
+ All a subtree filter requires is a DN within the directory. Since FreeIPA uses a simplified, flat directory tree structure, this can be used to target some types of entries, like automount locations, which are containers or parent entries for other configuration.
+ </div><pre class="screen">$ ipa permission-add "manage automount locations" --subtree="ldap://ldap.example.com:389/cn=automount,dc=example,dc=com"</pre></div></div><br class="example-break" /><div class="example" id="ex.perm-type"><h6>Example 15.3. Adding a Permission Based on Object Type</h6><div class="example-contents"><div class="para">
+ There seven object types that can be used to form a permission:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ user
+ </div></li><li class="listitem"><div class="para">
+ group
+ </div></li><li class="listitem"><div class="para">
+ host
+ </div></li><li class="listitem"><div class="para">
+ service
+ </div></li><li class="listitem"><div class="para">
+ hostgroup
+ </div></li><li class="listitem"><div class="para">
+ netgroup
+ </div></li><li class="listitem"><div class="para">
+ dns
+ </div></li></ul></div><div class="para">
+ Each type has its own set of allowed attributes, and the attributes which are managed by this permission are set with the <code class="option">--attrs</code> option, in a comma-separated list.
+ </div><pre class="screen">$ ipa permission-add "manage service" --permissions=all --type=service --attrs=krbprincipalkey,krbprincipalname,managedby</pre><div class="para">
+ The attributes (<code class="option">--attrs</code>) must exist and be allowed attributes for the given object type, or the permission operation fails with schema syntax errors.
+ </div></div></div><br class="example-break" /></div></div><div class="section" id="creating-priv"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-priv">15.4.3. Creating New Privileges</h3></div></div></div><div class="section" id="creating-priv-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-priv-ui">15.4.3.1. Creating New Privileges from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Role Based Access Control</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Privileges</strong></span> task link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of privileges.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name and a description of the privilege.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go to the privilege configuration page to add permissions.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Permissions</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the list of permissions to add permission to the privilege.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-addperm.png" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the permissions to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the permissions to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-addperm2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="creating-priv-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-priv-cli">15.4.3.2. Creating New Privileges from the Command Line</h4></div></div></div><div class="para">
+ Privilege entries are created using the <code class="command">privilege-add</code> command, and then permissions are added to the privilege group using the <code class="command">privilege-add-permission</code> command.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the privilege entry.
+ </div><pre class="screen">$ ipa privilege-add "managing filesystems" --desc="for filesystems"</pre></li><li class="listitem"><div class="para">
+ Assign the desired permissions.
+ </div><pre class="screen">$ ipa privilege-add-permission "managing filesystems" --permissions="managing automount","managing ftp services"</pre></li></ol></div></div></div></div></div><div xml:lang="en-US" class="chapter" id="server-config" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 16. Configuring the FreeIPA Server</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#ipa-files">16.1. FreeIPA Files and Logs</a></span></dt><dd><dl><dt><span class="section"><a href="#file-ref">16.1.1. A Reference of FreeIPA Server Configuration Files and Directories</a></span></dt><dt><span class="section"><a href="#default.conf">16.1.2. About default.conf and Context Configuration Files</a></span></dt><dt><span class="section"><a href="#logging">16.1.3. Checking FreeIPA Server Logs</a></span></dt></dl></dd><dt><span class="section"><a href="#disabling-anon-binds">16.2. Disabling Anonymous Binds</a></span></dt><dt><span class="sec
tion"><a href="#Configuring_Certificates_and_Certificate_Authorities">16.3. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="#Using_OCSP">16.4. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="#ocsp-interval">16.4.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="#ocsp-location">16.4.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-apache">16.5. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="#dns-multihomed">16.6. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="#promoting-replica">16.7. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="#promoting-pki">16.7.1. Promoting a Replica with a Dogtag Certificate System CA</a></span></dt><dt><span class="s
ection"><a href="#promoting-selfsigned">16.7.2. Promoting a Replica with a Self-Signed CA</a></span></dt></dl></dd><dt><span class="section"><a href="#upgrading-server">16.8. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></div><div class="para">
+ Most configuration in FreeIPA is done by adding and editing resources and users within the domain. The FreeIPA servers and backend services are configured with default settings that are scalable and applicable in most environments.
+ </div><div class="para">
+ There are some configuration areas where the FreeIPA server configuration can be tweaked to improve security or performance in certain situations.
+ </div><div class="para">
+ This chapter covers information about the FreeIPA configuration, including files and logs used by the FreeIPA server, and procedures for updating the FreeIPA server configuration itself.
+ </div><div class="section" id="ipa-files"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-files">16.1. FreeIPA Files and Logs</h2></div></div></div><div class="para">
+ FreeIPA is a unifying framework that combines a lot of disparate Linux services into a single management context. However, the underlying technologies — like Kerberos, DNS, 389 Directory Server, and Dogtag Certificate System — retain their own configuration files and log files.
+ </div><div class="para">
+ This section covers the directories, files, and logs used specifically by FreeIPA. For more information about the configuration files or logs for a specific server used within FreeIPA, see the product documentation.
+ </div><div class="section" id="file-ref"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="file-ref">16.1.1. A Reference of FreeIPA Server Configuration Files and Directories</h3></div></div></div><div class="table" id="tab.file-ref"><h6>Table 16.1. FreeIPA Server Configuration Files and Directories</h6><div class="table-contents"><table summary="FreeIPA Server Configuration Files and Directories" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th>
+ Directory or File
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td colspan="2">
+ <span class="bold bold"><strong>Server Configuration</strong></span>
+ </td></tr><tr><td>
+ /etc/ipa
+ </td><td>
+ The main FreeIPA server configuration directory.
+ </td></tr><tr><td>
+ /etc/ipa/default.conf
+ </td><td>
+ The primary configuration file for the FreeIPA server.
+ </td></tr><tr><td>
+ /etc/ipa/ca.crt
+ </td><td>
+ The CA certificate issued by the FreeIPA server's CA.
+ </td></tr><tr><td>
+ ~/.ipa/
+ </td><td>
+ A user-specific FreeIPA directory that is created on the local system in the system user's home directory the first time the user runs a FreeIPA command.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>FreeIPA Logs</strong></span>
+ </td></tr><tr><td>
+ ~/.ipa/log/cli.log
+ </td><td>
+ The log file for all XML-RPC calls and responses by the FreeIPA command-line tools. This is created in the home directory for the <span class="emphasis"><em>system user</em></span> who runs the tools, who may have a different name than the FreeIPA user.
+ </td></tr><tr><td>
+ /var/log/ipaclient-install.log
+ </td><td>
+ The installation log for the client service.
+ </td></tr><tr><td>
+ /var/log/ipaserver-install.log
+ </td><td>
+ The installation log for the FreeIPA server.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>System Services</strong></span>
+ </td></tr><tr><td>
+ /etc/rc.d/init.d/ipa
+ </td><td>
+ The FreeIPA server init script.
+ </td></tr><tr><td>
+ /etc/rc.d/init.d/ipa_kpasswd
+ </td><td>
+ The init script for the FreeIPA control daemon for Kerberos passwords.
+ </td></tr><tr><td>
+ /var/run/ipa_kpasswd.pid
+ </td><td>
+ The PID file for the Kerberos password daemon used by the FreeIPA service.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Web UI</strong></span>
+ </td></tr><tr><td>
+ /etc/ipa/html
+ </td><td>
+ A symlink directory in the main configuration directory for the HTML files used by the FreeIPA web UI.
+ </td></tr><tr><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/etc/httpd/conf.d/ipa.conf</td></tr><tr><td>/etc/httpd/conf.d/ipa-rewrite.conf</td></tr></table>
+ </td><td>
+ The configuration files used by the Apache host for the web UI application.
+ </td></tr><tr><td>
+ /etc/httpd/conf/ipa.keytab
+ </td><td>
+ The keytab file used by the web UI service.
+ </td></tr><tr><td>
+ /usr/share/ipa
+ </td><td>
+ The main directory for all of the HTML files, scripts, and stylesheets used by the web UI.
+ </td></tr><tr><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/usr/share/ipa/ipa-rewrite.conf</td></tr><tr><td>/usr/share/ipa/ipa.conf</td></tr></table>
+
+ </td><td>
+ The configuration files used by the Apache host for the web UI application.
+ </td></tr><tr><td>
+ /usr/share/ipa/html
+ </td><td>
+ Contains the HTML files, JavaScript files, and stylesheets used by the web UI.
+ </td></tr><tr><td>
+ /usr/share/ipa/ipaclient
+ </td><td>
+ Contains the JavaScript files used to access Firefox's autoconfiguration feature and set up the Firefox browser to work in the FreeIPA Kerberos realm.
+ </td></tr><tr><td>
+ /usr/share/ipa/migration
+ </td><td>
+ Contains HTML pages, stylesheets, and Python scripts used for running the FreeIPA server in NIS migration mode.
+ </td></tr><tr><td>
+ /usr/share/ipa/ui
+ </td><td>
+ Contains all of the scripts used by the UI to perform FreeIPA operations.
+ </td></tr><tr><td>
+ /var/log/httpd
+ </td><td>
+ The log files for the Apache web server.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Kerberos</strong></span>
+ </td></tr><tr><td>
+ /etc/krb5.conf
+ </td><td>
+ The Kerberos service configuration file.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>SSSD</strong></span>
+ </td></tr><tr><td>
+ /etc/sssd/sssd.api.d/sssd-ipa.conf
+ </td><td>
+ The configuration file used to identify the FreeIPA server, FreeIPA Directory Server, and other FreeIPA services used by SSSD.
+ </td></tr><tr><td>
+ /var/log/sssd
+ </td><td>
+ The log files for SSSD.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>389 Directory Server</strong></span>
+ </td></tr><tr><td>
+ /var/lib/dirsrv/slapd-<span class="emphasis"><em>REALM_NAME</em></span>
+ </td><td>
+ All of the schema, configuration, and database files associated with the Directory Server instance used by the FreeIPA server.
+ </td></tr><tr><td>
+ /var/log/dirsrv/slapd-<span class="emphasis"><em>REALM_NAME</em></span>
+ </td><td>
+ Log files associated with the Directory Server instance used by the FreeIPA server.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Dogtag Certificate System</strong></span>
+ </td></tr><tr><td>
+ /etc/pki-ca
+ </td><td>
+ The main directory for the FreeIPA CA instance.
+ </td></tr><tr><td>
+ /etc/pki-ca/conf/CS.cfg
+ </td><td>
+ The main configuration file for the the FreeIPA CA instance.
+ </td></tr><tr><td>
+ /var/lib/dirsrv/slapd-PKI-IPA/
+ </td><td>
+ All of the schema, configuration, and database files associated with the Directory Server instance used by the FreeIPA CA.
+ </td></tr><tr><td>
+ /var/log/dirsrv/slapd-PKI-IPA/
+ </td><td>
+ Log files associated with the Directory Server instance used by the FreeIPA CA.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Cache Files</strong></span>
+ </td></tr><tr><td>
+ /var/cache/ipa
+ </td><td>
+ Cache files for the FreeIPA server and the FreeIPA Kerberos password daemon.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>System Backups</strong></span>
+ </td></tr><tr><td>
+ /var/lib/ipa/sysrestore
+ </td><td>
+ Contains backups of all of the system files and scripts that were reconfigured when the FreeIPA server was installed. These include the original <code class="filename">.conf</code> files for NSS, Kerberos (both <code class="filename">krb5.conf</code> and <code class="filename">kdc.conf</code>), and NTP.
+ </td></tr><tr><td>
+ /var/lib/ipa-client/sysrestore
+ </td><td>
+ Contains backups of all of the system files and scripts that were reconfigured when the FreeIPA client was installed. Commonly, this is the <code class="filename">sssd.conf</code> file for SSSD authentication services.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="default.conf"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="default.conf">16.1.2. About default.conf and Context Configuration Files</h3></div></div></div><div class="para">
+ Certain global defaults — like the realm information, the LDAP configuration, and the CA settings — are stored in the <code class="filename">default.conf</code> file. This configuration file is referenced when the FreeIPA client and servers start and every time the <code class="command">ipa</code> command is run to supply information as operations are performed.
</div><div class="para">
- As the needs of your enterprise change, you may need to modify the roles that you have established. For example, you may need to change the members of the role, or change the privileges associated with the role. You can use the <code class="command">ipa role-*</code> commands to perform these functions. For example, to remove an existing privilege from a role, use the <code class="command">ipa role-remove-privilege</code> command. To remove members from a role, use the <code class="command">ipa role-remove-member</code> command. Refer to the <code class="command">ipa role help</code> pages for more information.
- </div><div class="para">
- You can use the <code class="command">ipa role-del</code> command to delete FreeIPA roles from your configuration. Bear in mind, however, that any entities that rely on this role for access to FreeIPA objects or to perform certain tasks will no longer have that ability.
- </div></div><div class="section" id="self-service"><div class="titlepage"><div><div><h3 class="title" id="self-service">13.2.3. Defining Self-Service Settings</h3></div></div></div><div class="para">
- Self-service access control rules define the operations that an entity can perform on itself. These rules are attribute based; that is, they define what attributes can be modified for any particular entity. You can create self-service rules so that users can manage their own addresses, keep their contact details current, change their passwords, etc.
+ The parameters in the <code class="filename">default.conf</code> file are simple <span class="emphasis"><em>attribute=value</em></span> pairs. The attributes are case-insensitive and order-insensitive.
+ </div><pre class="programlisting"><span class="perl_String">[global]</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_Float">basedn=</span><span class="perl_DataType">dc</span><span class="perl_String">=example,</span><span class="perl_DataType">dc</span><span class="perl_String">=com</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_Float">realm=</span><span class="perl_String">EXAMPLE.COM</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_Reserved">domain</span><span class="perl_String">=example.com</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">xmlrpc_</span><span class="perl_Float">uri=</span><span class="perl_String">https://server.example.com/ipa/xml</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">ldap_</span><span class="perl_Float">uri=</span><span class="perl_String">ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">enable_</span><span class="perl_Float">ra=</span><span class="perl_String">True</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_String">ra_</span><span class="perl_Float">plugin=</span><span class="perl_String">dogtag</span><span class="perl_String"></span>
+<span class="perl_String"></span><span class="perl_Float">mode=</span><span class="perl_String">production</span></pre><div class="para">
+ When adding more configuration attributes or overriding the global values, users can create additional <span class="emphasis"><em>context</em></span> configuration files. A <code class="filename">server.conf</code> and <code class="filename">cli.conf</code> file can be created to create different options when the FreeIPA server is started or when the <code class="command">ipa</code> command is run, respectively. The FreeIPA server checks the <code class="filename">server.conf</code> and <code class="filename">cli.conf</code> files first, and then checks the <code class="filename">default.conf</code> file.
</div><div class="para">
- Self-service rules are defined and managed by a number of sub-commands. Use the <code class="command">ipa help selfservice</code> command to display the list of available commands.
+ Any configuration files in the <code class="filename">/etc/ipa</code> directory apply to all users for the system. Users can set individual overrides by creating <code class="filename">default.conf</code>, <code class="filename">server.conf</code>, or <code class="filename">cli.conf</code> files in their local FreeIPA directory, <code class="filename">~/.ipa/</code>. This optional file is merged with <code class="filename">default.conf</code> and used by the local FreeIPA services.
+ </div></div><div class="section" id="logging"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="logging">16.1.3. Checking FreeIPA Server Logs</h3></div></div></div><div class="para">
+ FreeIPA unifies several different Linux services, so it relies on those services' native logs for tracking and debugging those services.
</div><div class="para">
- The following example demonstrates how to add a new self-service rule that allows users to maintain their own name details. Note that access control rules whose names contain spaces or other special characters need to be quoted.
-<pre class="screen">$ ipa selfservice-add "Users can manage their own name details" --permissions=write --attrs=givenname,displayname,title,initials
------------------------------------------------------------
-Added selfservice "Users can manage their own name details"
------------------------------------------------------------
- Self-service name: Users can manage their own name details
- Permissions: write
- Attributes: givenname, displayname, title, initials</pre>
+ The other services (Apache, 389 Directory Server, and Dogtag Certificate System) all have detailed logs and log levels. See the specific server documentation for more information on return codes, log formats, and log levels.
+ </div><div class="table" id="tab.ipa-logs"><h6>Table 16.2. FreeIPA Log Files</h6><div class="table-contents"><table summary="FreeIPA Log Files" border="1"><colgroup><col width="25%" /><col width="25%" /><col width="25%" /><col width="25%" /></colgroup><thead><tr><th>
+ Service
+ </th><th>
+ Log File
+ </th><th>
+ Description
+ </th><th>
+ Additional Information
+ </th></tr></thead><tbody><tr><td>
+ FreeIPA server
+ </td><td>
+ /var/log/ipaserver-install.log
+ </td><td>
+ Server installation log
+ </td><td>
- </div><div class="para">
- You can use the <code class="command">ipa selfservice-show</code> command to display the newly-created rule.
- </div><div class="para">
- You can use the <code class="command">ipa selfservice-mod</code> command to manage your self-service rules. For example, you can add or remove various attributes from any of the defined rules, or change the permissions. For example, you can add telephone contact details to the rule we created in the previous example:
-<pre class="screen">$ ipa selfservice-mod "Users can manage their own name details" --attrs=givenname,displayname,title,initials,homephone,mobile,telephonenumber
---------------------------------------------------------------
-Modified selfservice "Users can manage their own name details"
---------------------------------------------------------------
-Self-service name: Users can manage their own name details
-Permissions: write
-Attributes: givenname, displayname, title, initials, homephone, mobile, telephonenumber</pre>
+ </td></tr><tr><td>
+ FreeIPA server
+ </td><td>
+ ~/.ipa/log/cli.log
+ </td><td>
+ Command-line tool log
+ </td><td>
+
+ </td></tr><tr><td>
+ FreeIPA client
+ </td><td>
+ /var/log/ipaclient-install.log
+ </td><td>
+ Client installation log
+ </td><td>
+
+ </td></tr><tr><td>
+ Apache server
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/httpd/access</td></tr><tr><td>/var/log/httpd/error</td></tr></table>
+
+ </td><td>
+ These are standard access and error logs for Apache servers. These logs relate to the performance of the web UI.
+ </td><td>
+ <a href="http://httpd.apache.org/docs/current/logs.html">Apache log chapter</a>
+ </td></tr><tr><td>
+ Dogtag Certificate System
+ </td><td>
+ /var/log/pki-ca-install.log
+ </td><td>
+ The installation log for the FreeIPA CA.
+ </td><td>
+
+ </td></tr><tr><td>
+ Dogtag Certificate System
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/pki-ca/debug</td></tr><tr><td>/var/log/pki-ca/system</td></tr><tr><td>/var/log/pki-ca/transactions</td></tr><tr><td>/var/log/pki-ca/signedAudit</td></tr></table>
+
+ </td><td>
+ These logs mainly relate to certificate operations. In FreeIPA, this is used for service principals, hosts, and other entities which use certificates.
+ </td><td>
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/Logs.html">Logging chapter</a>
+ </td></tr><tr><td>
+ 389 Directory Server
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/access</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/audit</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/errors</td></tr></table>
+
+ </td><td>
+ The access and error logs both contain detailed information about attempted access and operations for the domain Directory Server instance. The error log setting can be changed to provide very detailed output.
+ </td><td>
+ The access log is buffered, so the server only writes to the log every 30 seconds, by default.
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Monitoring_Server_and_Database_Activity.html">Monitoring servers and databases</a>
+ </div></li><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Configuration_and_Command-Line_Tool_Reference/logs-reference.html">Log entries explained</a>
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ 389 Directory Server
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/access</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/audit</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/errors</td></tr></table>
+
+ </td><td>
+ This directory server instance is used by the FreeIPA CA to store certificate information. Most operational data here will be related to server-replica interactions.
+ </td><td>
+ The access log is buffered, so the server only writes to the log every 30 seconds, by default.
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Monitoring_Server_and_Database_Activity.html">Monitoring servers and databases</a>
+ </div></li><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Configuration_and_Command-Line_Tool_Reference/logs-reference.html">Log entries explained</a>
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ Kerberos
+ </td><td>
+ /var/log/krb5libs.log
+ </td><td>
+ This is the primary log file for Kerberos connections.
+ </td><td>
+ This location is configured in the <code class="filename">krb5.conf</code> file, so it could be different on some systems.
+ </td></tr><tr><td>
+ Kerberos
+ </td><td>
+ /var/log/krb5kdc.log
+ </td><td>
+ This is the primary log file for the Kerberos KDC server.
+ </td><td>
+ This location is configured in the <code class="filename">krb5.conf</code> file, so it could be different on some systems.
+ </td></tr><tr><td>
+ Kerberos
+ </td><td>
+ /var/log/kadmind.log
+ </td><td>
+ This is the primary log file for the Kerberos administration server.
+ </td><td>
+ This location is configured in the <code class="filename">krb5.conf</code> file, so it could be different on some systems.
+ </td></tr><tr><td>
+ DNS
+ </td><td>
+ /var/log/messages
+ </td><td>
+ DNS error messages are included with other system messages.
+ </td><td>
+ DNS logging is <span class="emphasis"><em>not</em></span> enabled by default. DNS logging is enabled by running the <code class="command">querylog</code> command:
+<pre class="screen">/usr/sbin/rndc querylog</pre>
+ This begins writing log messages to the system's <code class="filename">/var/log/messages</code> file. To turn off logging, run the <code class="command">querylog</code> command again.
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="server-debug"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="server-debug">16.1.3.1. Enabling Server Debug Logging</h4></div></div></div><div class="para">
+ Debug logging for the FreeIPA server is set in the <code class="filename">server.conf</code> file.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Edit or create the <code class="filename">server.conf</code> file.
+ </div><pre class="screen">vim server.conf</pre></li><li class="listitem"><div class="para">
+ Add the <code class="command">debug</code> line and set its value to true.
+ </div><pre class="programlisting">[global]
+debug=True</pre></li><li class="listitem"><div class="para">
+ Restart the Apache daemon to load the changes.
+ </div><pre class="screen">service httpd restart</pre></li></ol></div></div><div class="section" id="Server-Increasing_Client_Debugging_Output"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Server-Increasing_Client_Debugging_Output">16.1.3.2. Debugging Command-Line Operations</h4></div></div></div><div class="para">
+ Any command-line operation with the <code class="command">ipa</code> command can return debug information by using the <code class="option">-v</code> option. For example:
+ </div><pre class="screen">$ ipa <strong class="userinput"><code>-v</code></strong> user-show admin
+ipa: INFO: trying https://ipaserver.example.com/ipa/xml
+First name: John
+Last name: Smythe
+User login [jsmythe]:
+ipa: INFO: Forwarding 'user_add' to server u'https://ipaserver.example.com/ipa/xml'
+--------------------
+Added user "jsmythe"
+--------------------
+ User login: jsmythe
+ First name: John
+ Last name: Smythe
+ Full name: John Smythe
+ Display name: John Smythe
+ Initials: JS
+ Home directory: /home/jsmythe
+ GECOS field: John Smythe
+ Login shell: /bin/sh
+ Kerberos principal: jsmythe at EXAMPLE.COM
+ UID: 1966800003
+ GID: 1966800003
+ Keytab: False
+ Password: False
- </div><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
- You need to include all of the required attributes when you modify a self-service rule, including existing ones.
- </div></div></div></div></div><div class="section" id="disabling-anon-binds"><div class="titlepage"><div><div><h2 class="title" id="disabling-anon-binds">13.3. Disabling Anonymous Binds</h2></div></div></div><div class="para">
- Even though the XML-RPC and WebUI always require authentication, the default FreeIPA configuration allows anonymous binds to the LDAP port by anyone in the same domain as the FreeIPA server, and consequent retrieval of a range of data, including user, group, netgroup, host, host group, and service records. This is generally considered insecure, and some RFC standards require that it be disabled to achieve compliance. With anonymous binds disabled, all connections to the directory server need to provide a valid identity.
+</pre><div class="para">
+ Using the option twice, <code class="option">-vv</code>, displays the XML-RPC exchange:
+<pre class="screen">$ ipa -vv user-add
+
+ipa: INFO: trying https://ipaserver.example.com/ipa/xml
+First name: Jane
+Last name: Russell
+User login [jrussell]:
+ipa: INFO: Forwarding 'user_add' to server u'https://ipaserver.example.com/ipa/xml'
+send: u'POST /ipa/xml HTTP/1.0\r\nHost: ipaserver.example.com\r\nAccept-Language: en-us\r\nAuthorization: negotiate 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
DsAEx0Zs696Rg0fWZy079A\r\nUser-Agent: xmlrpclib.py/1.0.1 (by www.pythonware.com)\r\nContent-Type: text/xml\r\nContent-Length: 1240\r\n\r\n'
+send: "<?xml version='1.0' encoding='UTF-8'?>\n<methodCall>\n<methodName>user_add</methodName>\n<params>\n<param>\n<value><array><data>\n<value><string>jrussell</string></value>\n</data></array></value>\n</param>\n<param>\n<value><struct>\n<member>\n<name>all</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>displayname</name>\n<value><string>Jane Russell</string></value>\n</member>\n<member>\n<name>cn</name>\n<value><string>Jane Russell</string></value>\n</member>\n<member>\n<name>noprivate</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>uidnumber</name>\n<value><int>999</int></value&
gt;\n</member>\n<member>\n<name>raw</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>version</name>\n<value><string>2.11</string></value>\n</member>\n<member>\n<name>gecos</name>\n<value><string>Jane Russell</string></value>\n</member>\n<member>\n<name>sn</name>\n<value><string>Russell</string></value>\n</member>\n<member>\n<name>krbprincipalname</name>\n<value><string>jrussell at EXAMPLE.COM</string></value>\n</member>\n<member>\n<name>givenname</name>\n<value><string>Jane</string></value>\n</member>\n<member>\n<name>initials</name>\n<value><string>JR</string></value>\n</member>\n</struct></value>\n</par
am>\n</params>\n</methodCall>\n"
+reply: 'HTTP/1.1 200 OK\r\n'
+header: Date: Thu, 15 Sep 2011 00:50:39 GMT
+header: Server: Apache/2.2.15 (Red Hat)
+header: WWW-Authenticate: Negotiate YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvVl5x6Zt9PbWNzvPEWkdu+3PTCq/ZVKjGHM+1zDBz81GL/f+/Pr75zTuveLYn9de0C3k27vz96fn2HQsy9qVH7sfqn0RWGQWzl+kDkuD6bJ/Dp/mpJvicW5gSkCSH6/UCNuE4I0xqwabLIz8MM/5o
+header: Connection: close
+header: Content-Type: text/xml; charset=utf-8
+body: "<?xml version='1.0' encoding='UTF-8'?>\n<methodResponse>\n<params>\n<param>\n<value><struct>\n<member>\n<name>result</name>\n<value><struct>\n<member>\n<name>dn</name>\n<value><string>uid=jrussell,cn=users,cn=accounts,dc=example,dc=com</string></value>\n</member>\n<member>\n<name>has_keytab</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>displayname</name>\n<value><array><data>\n<value><string>Jane Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>uid</name>\n<value><array><data>\n<value><string>jrussell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>objectcl
ass</name>\n<value><array><data>\n<value><string>top</string></value>\n<value><string>person</string></value>\n<value><string>organizationalperson</string></value>\n<value><string>inetorgperson</string></value>\n<value><string>inetuser</string></value>\n<value><string>posixaccount</string></value>\n<value><string>krbprincipalaux</string></value>\n<value><string>krbticketpolicyaux</string></value>\n<"
+body: 'value><string>ipaobject</string></value>\n</data></array></value>\n</member>\n<member>\n<name>loginshell</name>\n<value><array><data>\n<value><string>/bin/sh</string></value>\n</data></array></value>\n</member>\n<member>\n<name>uidnumber</name>\n<value><array><data>\n<value><string>1966800004</string></value>\n</data></array></value>\n</member>\n<member>\n<name>initials</name>\n<value><array><data>\n<value><string>JR</string></value>\n</data></array></value>\n</member>\n<member>\n<name>gidnumber</name>\n<value><array><data>\n<value><string>1966800004</string></value>\n</data></array></value>\n</me
mber>\n<member>\n<name>gecos</name>\n<value><array><data>\n<value><string>Jane Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>sn</name>\n<value><array><data>\n<value><string>Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>homedirectory</name>\n<value><array><data>\n<value><string>/home/jrussell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>has_password</name>\n<value><boolean>0</'
+body: 'boolean></value>\n</member>\n<member>\n<name>krbprincipalname</name>\n<value><array><data>\n<value><string>jrussell at EXAMPLE.COM</string></value>\n</data></array></value>\n</member>\n<member>\n<name>givenname</name>\n<value><array><data>\n<value><string>Jane</string></value>\n</data></array></value>\n</member>\n<member>\n<name>cn</name>\n<value><array><data>\n<value><string>Jane Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>ipauniqueid</name>\n<value><array><data>\n<value><string>bba27e6e-df34-11e0-a5f4-001143d2c060</string></value>\n</data></array></value>\n</member>\n</struct></valu
e>\n</member>\n<member>\n<name>value</name>\n<value><string>jrussell</string></value>\n</member>\n<member>\n<name>summary</name>\n<value><string>Added user "jrussell"</string></value>\n</member>\n</struct></value>\n</param>\n</params>\n</methodResponse>\n'
+---------------------
+Added user "jrussell"
+---------------------
+ User login: jrussell
+ First name: Jane
+ Last name: Russell
+ Full name: Jane Russell
+ Display name: Jane Russell
+ Initials: JR
+ Home directory: /home/jrussell
+ GECOS field: Jane Russell
+ Login shell: /bin/sh
+ Kerberos principal: jrussell at EXAMPLE.COM
+ UID: 1966800004
+ GID: 1966800004
+ Keytab: False
+ Password: False</pre>
+
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ The <code class="option">-v</code> and <code class="option">-vv</code> options are <span class="emphasis"><em>global</em></span> options and must be used before the subcommand when running <code class="command">ipa</code>.
+ </div></div></div></div></div></div><div class="section" id="disabling-anon-binds"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="disabling-anon-binds">16.2. Disabling Anonymous Binds</h2></div></div></div><div class="para">
+ Accessing domain resources and running client tools always require Kerberos authentication. However, the backend LDAP directory used by the FreeIPA server allows anonymous binds by default. This potentially opens up all of the domain configuration to unauthorized users, including information about users, machines, groups, services, netgroups, and DNS configuration.
</div><div class="para">
- To disable anonymous binds, perform this LDAP modification:
-<pre class="screen"># ldapmodify -x -D "cn=Directory Manager" -W
+ It is possible to disable anonymous binds on the 389 Directory Server instance by using LDAP tools to reset the <em class="parameter"><code>nsslapd-allow-anonymous-access</code></em> attribute.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Change the <em class="parameter"><code>nsslapd-allow-anonymous-access</code></em> attribute to off.
+ </div><pre class="screen">ldapmodify -x -D "cn=Directory Manager" -w secret -h server.example.com -p 389
+
Enter LDAP Password:
dn: cn=config
changetype: modify
replace: nsslapd-allow-anonymous-access
nsslapd-allow-anonymous-access: off
-
-# service dirsrv restart</pre>
-
- </div></div><div class="section" id="Managing-Unique_UID_and_GID_Attributes"><div class="titlepage"><div><div><h2 class="title" id="Managing-Unique_UID_and_GID_Attributes">13.4. Managing Unique UID and GID Number Assignments</h2></div></div></div><div class="para">
- A FreeIPA server must generate random UID and GID values and simultaneously ensure that replicas never generate the same UID or GID value. The need for unique UID and GID numbers might even cross FreeIPA domains, if a single organization has multiple disparate domains.
- </div><div class="para">
- The UID and GID numbers are divided into <span class="emphasis"><em>ranges</em></span>. By keeping separate numeric ranges for individual servers and replicas, the chances are minimal that any numbers issued by one server or replica will duplicate those from another. Ranges are updated and shared intelligently between servers and replicas through the Dynamic Numeric Assignment (DNA) Plug-in, as part of the backend 389 Directory Server instance for the domain. The same range is used for user IDs (<em class="parameter"><code>uidNumber</code></em>) and group IDs (<em class="parameter"><code>gidNumber</code></em>). A user and a group may have the same ID, but since the ID is set in different attributes, there is no conflict. Using the same ID number for both a user and a group also allows an administrator to configure user private groups, where a unique system group is created for each user and the ID number is the same for both the user and the group.
- </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created interactively or without specifying a UID or GID number, then the user account is created with an ID number that is next available in the server or replica range. This means that a user always has a unique number for its UID number and, if configured, for its private group.
- </div><div class="para">
- If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for Posix entries. The same is true for group entries: a duplicate <em class="parameter"><code>gidNumber</code></em> can be manually assigned to the entry.
- </div><div class="para">
- If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
- </div></div></div><div class="section" id="id-ranges-at-install"><div class="titlepage"><div><div><h3 class="title" id="id-ranges-at-install">13.4.1. About ID Range Assignments During Installation</h3></div></div></div><div class="para">
- The FreeIPA administrator can initially define a range during server installation, using the <code class="option">--idstart</code> and <code class="option">--idmax</code> options with <code class="command">ipa-server-install</code>. These options are not required, so the setup script can assign random ranges during installation.
- </div><div class="para">
- If no range is set manually when the first FreeIPA server is installed, a range of 200,000 IDs is randomly selected. There are 10,000 possible ranges. Selecting a random range from that number provides a high probability of non-conflicting IDs if two separate FreeIPA domains are ever merged in the future.
- </div><div class="para">
- With a single FreeIPA server, IDs are assigned to entries in order through the range. With replicas, the initial server ID range is split and distributed.
- </div><div class="para">
- When a replica is installed, it is configured with an invalid range. It also has a directory entry (that is shared among replicas) that instructs the replica where it can request a valid range. When the replica starts, or as its current range is depleted so that less than 100 IDs are available, it can contact one of the available servers for a new range allotment. A special extended operation splits the range in two, so that the original server and the replica each have half of the available range.
- </div></div><div class="section" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges"><div class="titlepage"><div><div><h3 class="title" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges">13.4.2. Adding New Ranges</h3></div></div></div><div class="para">
- If the range for the entire domain is close to depletion, a new range can be manually selected and assigned to one of the master servers. All replicas then request ID ranges from the master as necessary.
- </div><div class="para">
- The changes to the range are done by editing the 389 Directory Server configuration to change the DNA Plug-in instance. The range is defined in the <em class="parameter"><code>dnaNextRange</code></em> parameter. For example:
- </div><pre class="screen">ldapmodify -x -D "cn=Directory Manager" -W -h server.example.com -p 389
-Enter LDAP Password: *******
-dn: cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
-changetype: modify
-add: dnaNextRange
-dnaNextRange: 123400000-123500000</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- This command only adds the specified range of values; it does not check that the values in that range are actually available. This check is performed when an attempt is made to allocate those values. If a range is added that contains mostly values that were already allocated, the system will cycle through the entire range searching for unallocated values, and then the operation ultimately fails if none are available.
- </div></div></div></div></div><div class="section" id="Configuring_Certificates_and_Certificate_Authorities"><div class="titlepage"><div><div><h2 class="title" id="Configuring_Certificates_and_Certificate_Authorities">13.5. Configuring Alternate Certificate Authorities</h2></div></div></div><div class="para">
- FreeIPA creates a Dogtag Certificate System certificate authority (CA) during the server installation process. To use an external CA, it is possible to create the required server certificates and then import them into the 389 Directory Server and the HTTP server.
+</pre></li><li class="listitem"><div class="para">
+ Restart the 389 Directory Server instance to load the new setting.
+ </div><pre class="screen">service dirsrv restart</pre></li></ol></div></div><div class="section" id="Configuring_Certificates_and_Certificate_Authorities"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_Certificates_and_Certificate_Authorities">16.3. Configuring Alternate Certificate Authorities</h2></div></div></div><div class="para">
+ FreeIPA creates a Dogtag Certificate System certificate authority (CA) during the server installation process. To use an external CA, it is possible to create the required server certificates and then import them into the 389 Directory Server and the HTTP server, which require FreeIPA server certificates.
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
Save an ASCII copy of the CA certificate as <code class="filename">/usr/share/ipa/html/ca.crt</code>. This allows users to download the correct certificate when they configure their browsers.
</div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Use the <code class="command">ipa-server-certinstall</code> command to install your own certificate. You can install the certificate for use by 389 Directory Server, <code class="systemitem">HTTP</code> Server, or both.
+ Use the <code class="command">ipa-server-certinstall</code> command to install the certificate.
</div><pre class="screen"># /usr/sbin/ipa-server-certinstall -d /path/to/pkcs12.p12</pre></li><li class="listitem"><div class="para">
- To continue using Firefox's auto-configuration, regenerate the <code class="filename">/usr/share/ipa/html/configure.jar</code> file.
+ To keep using browser autoconfiguration in Firefox, regenerate the <code class="filename">/usr/share/ipa/html/configure.jar</code> file.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create a directory, and then create the new security databases in that directory.
<pre class="screen"># mkdir /tmp/signdb
@@ -5158,23 +6797,25 @@ dnaNextRange: 123400000-123500000</pre><div class="note"><div class="admonition_
<pre class="screen"># pk12util -i <em class="replaceable"><code>/path/to/</code></em>pkcs12.p12 -d /tmp/signdb</pre>
</div></li><li class="listitem"><div class="para">
- Make a temporary signing directory, and copy the FreeIPA javascript file to that directory.
+ Make a temporary signing directory, and copy the FreeIPA JavaScript file to that directory.
<pre class="screen"># mkdir /tmp/sign
# cp /usr/share/ipa/html/preferences.html /tmp/sign</pre>
</div></li><li class="listitem"><div class="para">
- Use the object signing certificate to sign the javascript file and to regenerate the <code class="filename">configure.jar</code> file.
+ Use the object signing certificate to sign the JavaScript file and to regenerate the <code class="filename">configure.jar</code> file.
<pre class="screen"># signtool -d /tmp/signdb -k Signing_cert_nickname -Z /usr/share/ipa/html/configure.jar -e .html</pre>
- </div></li></ol></div></li></ol></div></div><div class="section" id="Using_OCSP"><div class="titlepage"><div><div><h2 class="title" id="Using_OCSP">13.6. Configuring OCSP Responders</h2></div></div></div><div class="para">
- A certificate is only valid if it is before its expiration date and if it has not been revoked. The expiration date is contained in the certificate itself, so a client can easily check that. However, a certificate can be revoked before its validity period is up. To inform clients of when a certificate has been revoked, a CA publishes a <span class="emphasis"><em>certificate revocation list</em></span> (CRL). A CRL contains a complete list of every certificate that was issued by that CA and subsequently revoked.
+ </div></li></ol></div></li></ol></div></div><div class="section" id="Using_OCSP"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Using_OCSP">16.4. Configuring OCSP Responders</h2></div></div></div><div class="para">
+ A certificate is created with a validity period, meaning it has a point where it expires and is no longer valid. The expiration date is contained in the certificate itself, so a client always checks the validity period in the certificate to see if the certificate is still valid.
</div><div class="para">
- A client checks a CRL to verify a certificate using the online certificate status protocol (OCSP), which sends a request to an <span class="emphasis"><em>OCSP responder</em></span>. Each CA integrated with the FreeIPA server uses an internal OCSP responder. Any client which runs a validity check can check the FreeIPA CA.
+ However, a certificate can also be revoked before its validity period is up, but this information is not contained in the certificate. A CA publishes a <span class="emphasis"><em>certificate revocation list</em></span> (CRL), which contains a complete list of every certificate that was issued by that CA and subsequently revoked. A client can check the CRL to see if a certificate within its validity period has been revoked and is, therefore, invalid.
+ </div><div class="para">
+ Validity checks are performed using the online certificate status protocol (OCSP), which sends a request to an <span class="emphasis"><em>OCSP responder</em></span>. Each CA integrated with the FreeIPA server uses an internal OCSP responder, and any client which runs a validity check can check the FreeIPA CA's internal OCSP responder.
</div><div class="para">
Every certificate issued by the FreeIPA CA puts its OCSP responder service URL in the certificate. For example:
</div><pre class="screen">http://ipa.example.com:9180/ca/ocsp</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
For the FreeIPA OCSP responder to be available, port 9180 needs to be open in the firewall.
- </div></div></div><div class="section" id="ocsp-interval"><div class="titlepage"><div><div><h3 class="title" id="ocsp-interval">13.6.1. Changing the CRL Update Interval</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="ocsp-interval"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ocsp-interval">16.4.1. Changing the CRL Update Interval</h3></div></div></div><div class="para">
The CRL file is automatically generated by the Dogtag Certificate System CA every four hours. This interval can be changed by editing the Dogtag Certificate System configuration.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Stop the CA server.
@@ -5186,7 +6827,7 @@ dnaNextRange: 123400000-123500000</pre><div class="note"><div class="admonition_
Restart the CA server.
<pre class="screen">service pki-ca start</pre>
- </div></li></ol></div></div><div class="section" id="ocsp-location"><div class="titlepage"><div><div><h3 class="title" id="ocsp-location">13.6.2. Changing the OCSP Responder Location</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="ocsp-location"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ocsp-location">16.4.2. Changing the OCSP Responder Location</h3></div></div></div><div class="para">
Each FreeIPA server generates its own CRL. Likewise, each FreeIPA server uses its own OCSP responder, with its own OCSP responder URL in the certificates it issues.
</div><div class="para">
A DNS CNAME can be used by FreeIPA clients, and then from there be redirected to the appropriate FreeIPA server OCSP responder.
@@ -5200,26 +6841,23 @@ dnaNextRange: 123400000-123500000</pre><div class="note"><div class="admonition_
</div></li></ol></div><div class="para">
That change must be made on every FreeIPA server, with the <em class="parameter"><code>crlDistPointsPointName_0</code></em> parameter set to the same hostname.
- </div></div></div><div class="section" id="ipa-apache"><div class="titlepage"><div><div><h2 class="title" id="ipa-apache">13.7. Setting a FreeIPA Server as an Apache Virtual Host</h2></div></div></div><div class="para">
- If you have a standard Apache instance running on port 80, you can configure FreeIPA to run on a secondary port, for example, on port 8089. You should be aware, however, that in this configuration, FreeIPA does not use <code class="systemitem">SSL</code>; all requests will use standard <code class="systemitem">HTTP</code>.
- </div><div class="para">
- The following procedure assumes that FreeIPA is configured to run on port 80, and that you want to move it to port 8089.
- </div><div class="orderedlist"><h6>To configure FreeIPA to run on port 8089:</h6><ol><li class="listitem"><div class="para">
+ </div></div></div><div class="section" id="ipa-apache"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-apache">16.5. Setting a FreeIPA Server as an Apache Virtual Host</h2></div></div></div><div class="para">
+ If a standard Apache instance is already running on port 80, then the FreeIPA server can be configured to run on a secondary port, such as port 8089.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ In this configuration, FreeIPA uses standard HTTP, not a secure connection using SSL.
+ </div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Do not use port 8080. This port is used by the FreeIPA web UI.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as the <code class="systemitem">root</code> user.
</div></li><li class="listitem"><div class="para">
- Edit the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file. Add the following three lines to the beginning of the file:
+ Edit the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file so that it is formatted as an Apache virtual host. Add three lines to the beginning of the file to set the new port number for the FreeIPA web service and to create the root <code class="command"><VirtualHost></code> element.
</div><pre class="programlisting">Listen 8089
NameVirtualHost *:8089
<VirtualHost *:8089>
</pre></li><li class="listitem"><div class="para">
- Add the following line to the end of the file:
- </div><pre class="programlisting"></VirtualHost>
-</pre><div class="para">
- This wraps the entire FreeIPA configuration in a virtual host, and ensures that Apache is listening to that port.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- You cannot use port 8080. This port is used by the <code class="systemitem">ipa_webgui</code> service.
- </div></div></div></li><li class="listitem"><div class="para">
- Comment out the following rewrite rules from the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file:
+ Close the <code class="command"><VirtualHost></code> element by adding this line to the end of the file:
+ </div><pre class="programlisting"></VirtualHost></pre></li><li class="listitem"><div class="para">
+ Comment out the rewrite rules from the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file:
</div><pre class="programlisting">----------------------------------------------------------------------
# Redirect to the fully-qualified hostname. Not redirecting to secure
# port so configuration files can be retrieved without requiring SSL.
@@ -5233,90 +6871,60 @@ RewriteCond %{REQUEST_URI} !^/(errors|config|favicon.ico)
RewriteRule ^/(.*) https://host.foo.com/$1 [L,R=301,NC]
---------------------------------------------------------------------
</pre></li><li class="listitem"><div class="para">
- Reload the <code class="systemitem">httpd</code> service.
+ Restart the <code class="systemitem">httpd</code> service.
</div><div class="para">
<pre class="screen"># service httpd reload</pre>
- </div></li></ol></div><div class="para">
- This configures FreeIPA to run on port 8089, leaving port 80 free for your normal web site.
- </div></div><div class="section" id="ipa-cluster"><div class="titlepage"><div><div><h2 class="title" id="ipa-cluster">13.8. Using FreeIPA in a Cluster</h2></div></div></div><div class="para">
- The FreeIPA server currently does not specifically handle the case of a service running in a cluster. That is, the FreeIPA server is not <em class="firstterm">cluster aware</em>. It is possible to configure a clustered service to be part of FreeIPA, although a certain amount of manual configuration is required. This involves sharing and synchronizing Kerberos keys across all of the participating hosts, and also configuring services running on the hosts to respond to whatever names the clients want to use.
- </div><div class="section" id="Implementing_IPA_in_a_Clustered_Environment-Configuring_Kerberos_Credentials_for_a_Clustered_Environment"><div class="titlepage"><div><div><h3 class="title" id="Implementing_IPA_in_a_Clustered_Environment-Configuring_Kerberos_Credentials_for_a_Clustered_Environment">13.8.1. Configuring Kerberos Credentials for a Clustered Environment</h3></div></div></div><div class="para">
- Use the following procedure to set up the Kerberos credentials for an environment where your managed host is a cluster of nodes.
- </div><div class="orderedlist"><h6>Configuring Kerberos Credentials for a Clustered Environment</h6><ol><li class="listitem"><div class="para">
- Enroll all of the hosts in the FreeIPA domain, and collect any keytabs that have been set up. At a minimum, this is <code class="filename">/etc/krb5.keytab</code>, although additional services may have their keys in other files.
- </div></li><li class="listitem"><div class="para">
- Use the <code class="command">ktutil</code> command to produce a single keytab file that contains the contents of all of the keytab files.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- For each file, use the <code class="command">rkt</code> command to read the keys from that file.
- </div></li><li class="listitem"><div class="para">
- Use the <code class="command">wkt</code> command to write all of the keys which have been read to a new keytab file.
- </div></li></ol></div></li><li class="listitem"><div class="para">
- Replace the keytab files on each host with the newly-created keytab file.
- </div></li></ol></div><div class="para">
- Each host in this cluster should now be able to impersonate any other host.
- </div><div class="section" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment-Service_specific_Configuration"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment-Service_specific_Configuration">13.8.1.1. Service-specific Configuration</h4></div></div></div><div class="para">
- Additional service-specific configuration may be required if cluster members do not reset their hostnames when they take over for a failed service.
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- For <code class="systemitem">sshd</code>, set <em class="parameter"><code>GSSAPIStrictAcceptorCheck no</code></em> in <code class="filename">/etc/ssh/sshd_config</code>
- </div></li><li class="listitem"><div class="para">
- For <code class="systemitem">mod_auth_kerb</code>, set <em class="parameter"><code>KrbServiceName Any</code></em> in <code class="filename">/etc/httpd/conf.d/auth_kerb.conf</code>
- </div></li></ul></div>
-
- </div></div><div class="section" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment-SSL_Server_Configuration"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment-SSL_Server_Configuration">13.8.1.2. SSL Server Configuration</h4></div></div></div><div class="para">
- For SSL servers, it is important that the subject name or a <em class="parameter"><code>subjectAlternativeName</code></em> value for the server's certificate look correct when a client connects to the clustered item. The simplest way to do this is to keep the private key and certificate synchronized across all of the hosts, but it is better to share the private key if possible. Ensuring that certificates issued to each cluster member contain <em class="parameter"><code>subjectAlternativeName</code></em> values naming all of the cluster members should satisfy any client connection requirements.
- </div></div></div><div class="section" id="Implementing_IPA_in_a_Clustered_Environment-Using_the_Same_Service_Principal_for_Multiple_Services"><div class="titlepage"><div><div><h3 class="title" id="Implementing_IPA_in_a_Clustered_Environment-Using_the_Same_Service_Principal_for_Multiple_Services">13.8.2. Using the Same Service Principal for Multiple Services</h3></div></div></div><div class="para">
- One aspect of applying FreeIPA in a cluster use case is using the same service principal for multiple services, spread across different machines. This is a simple procedure and could be implemented as follows:
- <div class="orderedlist"><ol><li class="listitem"><div class="para">
- Retrieve a service principal in the normal way, using the <code class="command">ipa-getkeytab</code> command, or use the keytab that is set up when the host joins the realm. That is, by using <code class="command">ipa-join</code>, which creates or updates the <code class="filename">/etc/krb5.keytab</code> file with a host/principal.
- </div></li><li class="listitem"><div class="para">
- When you have the principal in a keytab on the system, you can direct multiple servers or services to use the same file, or you can copy the file to discrete locations as required.
- </div></li></ol></div>
-
- </div></div></div><div class="section" id="logging"><div class="titlepage"><div><div><h2 class="title" id="logging">13.9. Checking FreeIPA Server Logs</h2></div></div></div><div class="para">
- You should first check the <code class="filename">/var/log/httpd/error_log</code> file. This may contain more information on the error and/or a python stacktrace.
- </div><div class="para">
- To see the LDAP queries that are being made by the framework you can inspect the <code class="filename">/var/log/dirsrv/slapd-INSTANCE/access</code> file. Note that this file is buffered and so it only writes to disk about every 30 seconds.
- </div><div class="formalpara" id="Server-Increasing_Server_Debugging_Output"><h5 class="formalpara">Increasing Server Debugging Output</h5>
- To increase the server debugging output you can create the <code class="filename">/etc/ipa/server.conf</code> file and include the following entry:
-<pre class="programlisting">[global]
-debug=True</pre>
- You need to restart the <code class="systemitem">httpd</code> daemon for this change to take effect.
- </div><div class="formalpara" id="Server-Increasing_Client_Debugging_Output"><h5 class="formalpara">Increasing Client Debugging Output</h5>
- You can increase debugging output on the client with the <code class="option">-v</code> global option:
-<pre class="screen">$ ipa -v user-show admin</pre>
- You can use the <code class="option">-v</code> option twice to display the XML-RPC exchange:
-<pre class="screen">$ ipa -vv user-show admin</pre>
-
- </div></div><div class="section" id="dns-multihomed"><div class="titlepage"><div><div><h2 class="title" id="dns-multihomed">13.10. Setting DNS Entries for Multi-Homed Servers</h2></div></div></div><div class="para">
- Some server machines may support multiple network interface cards (NICs). Muti-homed machines typically have multiple IPs, all assigned to the same hostname. This works fine in FreeIPA most of the time because it listens on all available interfaces, except localhost. For a server to be available through any NIC, edit the DNS zone file and add entries for each IP address. For example:
+ </div></li></ol></div></div><div class="section" id="dns-multihomed"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="dns-multihomed">16.6. Setting DNS Entries for Multi-Homed Servers</h2></div></div></div><div class="para">
+ Some server machines may support multiple network interface cards (NICs). Multi-homed machines typically have multiple IPs, all assigned to the same hostname. This works fine in FreeIPA most of the time because it listens on all available interfaces, except localhost. For a server to be available through any NIC, edit the DNS zone file and add entries for each IP address. For example:
</div><pre class="screen">
ipaserver IN A 192.168.1.100
ipaserver IN A 192.168.1.101
ipaserver IN A 192.168.1.102
-</pre></div><div class="section" id="promoting-replica"><div class="titlepage"><div><div><h2 class="title" id="promoting-replica">13.11. Promoting a Read-Only Replica to a FreeIPA Server</h2></div></div></div><div class="para">
- The only difference between a replica and the master server is that the master owns the self-signed CA. If you copy the appropriate files from the master to the replica, import the CA into the replica directory server, and delete the existing replication agreements, that replica will then appear as a master server.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- If you install with the <code class="option">--selfsign</code> option, follow this procedure if you want to promote a replica to a master. This is because the private key for the self-signed CA is stored in the Apache database (<code class="filename">/etc/httpd/alias</code>). The private key for a Dogtag Certificate System CA is stored in its own security database.
- </div></div></div><div class="orderedlist"><h6>To promote a replica to a master server:</h6><ol><li class="listitem"><div class="para">
- Copy the <code class="filename">/var/lib/ipa/ca_serialno</code> file from the master to the replica.
- </div></li><li class="listitem"><div class="para">
- Import the CA into the replica 389 Directory Server NSS database, as follows:
+</pre></div><div class="section" id="promoting-replica"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="promoting-replica">16.7. Promoting a Read-Only Replica to a FreeIPA Server</h2></div></div></div><div class="para">
+ The only difference between a replica and the master server is that the master owns the master CA in the certificate system hierarchy. This means that it is possible to change a replica server to a master server by changing its CA configuration.
+ </div><div class="section" id="promoting-pki"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="promoting-pki">16.7.1. Promoting a Replica with a Dogtag Certificate System CA</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ On the replica server, stop the CA server.
+ </div><pre class="screen">service pki-ca stop</pre></li><li class="listitem"><div class="para">
+ Open the CA's configuration directory.
+ </div><pre class="screen">cd /var/lib/pki-ca/conf</pre></li><li class="listitem"><div class="para">
+ Edit the <code class="filename">CS.cfg</code> file to configure the replica's CA as a master.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Delete each line which begins with the <code class="filename">ca.crl.</code> prefix.
+ </div></li><li class="listitem"><div class="para">
+ Copy each line beginning with the <code class="filename">ca.crl.</code> prefix from the CA <code class="filename">CS.cfg</code> file on the master server into the replica server's CA <code class="filename">CS.cfg</code> file.
+ </div></li><li class="listitem"><div class="para">
+ Enable control of the database maintenance thread; the default value for a master CA is <code class="command">600</code>.
+ </div><pre class="screen">ca.certStatusUpdateInterval=600</pre></li><li class="listitem"><div class="para">
+ Enable monitoring database replication:
+ </div><pre class="screen">ca.listenToCloneModifications=true</pre></li><li class="listitem"><div class="para">
+ Enable maintenance of the CRL cache:
+ </div><pre class="screen">ca.crl.<em class="replaceable"><code>IssuingPointId</code></em>.enableCRLCache=true</pre></li><li class="listitem"><div class="para">
+ Enable CRL generation:
+ </div><pre class="screen">ca.crl.<em class="replaceable"><code>IssuingPointId</code></em>.enableCRLUpdates=true</pre></li><li class="listitem"><div class="para">
+ Disable the redirect settings for CRL generation requests:
+ </div><pre class="screen">master.ca.agent.host=<em class="replaceable"><code>hostname</code></em>
+master.ca.agent.port=<em class="replaceable"><code>port number</code></em></pre></li></ol></div></li><li class="listitem"><div class="para">
+ Start the CA server.
+ </div><pre class="screen">service pki-ca start</pre></li></ol></div></div><div class="section" id="promoting-selfsigned"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="promoting-selfsigned">16.7.2. Promoting a Replica with a Self-Signed CA</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Copy the <code class="filename">/var/lib/ipa/ca_serialno</code> file from the master server to the replica.
+ </div></li><li class="listitem"><div class="para">
+ Import the CA certificate into the replica 389 Directory Server NSS database:
<pre class="screen"># cd /etc/dirsrv/slapd-REALM
# pk12util -i /path/to/cacert.p12 -d .
</pre>
- </div><div class="para">
- The password on the <code class="filename">PKCS#12</code> file is stored as <code class="filename">/etc/dirsrv/slapd-REALM/pwdfile.txt</code> on the original server.
- </div></li><li class="listitem"><div class="para">
- Delete the existing replication agreements, as follows:
+ </div><div class="para">
+ The password on the <code class="filename">PKCS#12</code> file is stored as <code class="filename">/etc/dirsrv/slapd-REALM/pwdfile.txt</code> on the original server.
+ </div></li><li class="listitem"><div class="para">
+ Delete the existing replication agreements between the replica and master server:
<pre class="screen"># ipa-replica-manage del master.example.com
</pre>
- </div></li></ol></div><div class="para">
- You now have two identical FreeIPA servers, neither of which know about the other. You can shut down the old master and bring up the new machine (if you are introducing a new replica into your network). Create a replica file on the new master and install it on the new machine.
- </div></div><div class="section" id="upgrading-server"><div class="titlepage"><div><div><h2 class="title" id="upgrading-server">13.12. Testing Before Upgrading the FreeIPA Server</h2></div></div></div><div class="para">
+ </div></li></ol></div><div class="para">
+ This results in two identical FreeIPA servers which are unaware of one another. The old master server can be shut down and replaced with the other server without affecting the domain.
+ </div></div></div><div class="section" id="upgrading-server"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="upgrading-server">16.8. Testing Before Upgrading the FreeIPA Server</h2></div></div></div><div class="para">
It can be beneficial, and safer, to test newer versions of FreeIPA before upgrading production systems. There is a relatively simple way to do this, by creating a sacrificial replica (which is a read-write server) and testing on that system.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Set up a replica based on one of the production servers, with the same version of FreeIPA as is running in production, as described in <a class="xref" href="#Setting_up_IPA_Replicas">Section 2.4, “Setting up FreeIPA Replicas”</a>. For this example, this is called Test Replica. Make sure that Test Replica can successfully connect to the <span class="emphasis"><em>production</em></span> server and domain.
@@ -5327,461 +6935,240 @@ ipaserver IN A 192.168.1.102
</div></li><li class="listitem"><div class="para">
Reconnect Test Replica to the network.
</div></li><li class="listitem"><div class="para">
- Upgrade the packages on Test Replica using <code class="command">yum</code>. For example:
+ Upgrade the packages on Test Replica using <code class="command">yum</code> or whatever package update tool is appropriate for your system. For example:
</div><pre class="programlisting"><span class="perl_Comment"># yum update freeipa*</span></pre></li><li class="listitem"><div class="para">
Test common things on Test Replica, like getting Kerberos credentials, opening the server UI, and running commands.
</div></li></ol></div><div class="para">
If the update affects the <span class="package">ds-replication</span> package or features which are used for replication between servers and replicas, then create two test replicas which communicate with each other (such as, make a test replica off a production server and then a replica off the test replica). Make sure that the two replicas can communicate with each other before and after updating the FreeIPA packages.
- </div></div></div><div xml:lang="en-US" class="chapter" id="managing-clients" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 14. Managing Client Machines in the FreeIPA Domain</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#about-machine-auth">14.1. About Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="#enrolling-machines">14.2. Enrolling Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a href="#Enrollment_with_Separation_of_Duties">14.2.1. Performing a Split Enrollment</a></span></dt><dt><span class="section"><a href="#bulk-enrollment">14.2.2. Performing a Bulk or Kickstart Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="#renaming-machines">14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration</a></span></dt><dt><span class="section"><a href="#manually-unconfig-machines">14.4. Manually Unconfiguring Client Machines</a></
span></dt><dt><span class="section"><a href="#Client_Problems">14.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="#certmongerX">14.6. Working with certmonger</a></span></dt><dd><dl><dt><span class="section"><a href="#certmonger-req">14.6.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="#Working_with_certmonger-Using_certmonger_with_NSS">14.6.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="#certmonger-tracking-certs">14.6.3. Tracking Certificates with certmonger</a></span></dt></dl></dd></dl></div><div class="para">
- Both DNS and Kerberos are configured as part of the initial client configuration. This is required because these are the two services that bring the machine within the FreeIPA domain and allow it to identify the FreeIPA server it will connect with. After the initial configuration, FreeIPA has tools to manage both of these services in response to changes in the domain services, changes to the IT environment, or changes on the machines themselves which affect Kerberos, certificate, and DNS services, like changing the client hostname.
+ </div></div></div><div xml:lang="en-US" class="chapter" id="Migrating_from_a_Directory_Server_to_IPA" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 17. Migrating from a 389 Directory Server to FreeIPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#Overview-Assumptions">17.1. Understanding 389 Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="#migration-considerations">17.2. Migration Considerations</a></span></dt><dt><span class="section"><a href="#Overview-Recommended_Sequence_of_Steps">17.3. Migration Sequence</a></span></dt><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">17.4. Scenario 1: Migrating Directly to FreeIPA</a></span></dt><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">17.5. Scenario 2: Using SSSD as Part of Migration</a></span></dt>
</dl></div><div class="para">
+ When an infrastructure has previously deployed a 389 Directory Server instance for authentication and identity lookups, it is possible to migrate the user data, including passwords, to a new FreeIPA instance, without losing user or password data.
</div><div class="para">
- This chapter describes how to manage identity services that relate directly to the client machine:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- DNS entries and settings
- </div></li><li class="listitem"><div class="para">
- Machine authentication
- </div></li><li class="listitem"><div class="para">
- Hostname changes (which affect domain services)
- </div></li></ul></div><div class="section" id="about-machine-auth"><div class="titlepage"><div><div><h2 class="title" id="about-machine-auth">14.1. About Machine Identity and Authentication</h2></div></div></div><div class="para">
- A FreeIPA domain establishes a commonality between machines, with common identity information, common policies, and shared services. Any machine which belongs to a domain functions as a client of the domain, which means it uses the services that the domain provides. A FreeIPA domain provides three main services specifically for machines:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- DNS
- </div></li><li class="listitem"><div class="para">
- Kerberos
- </div></li><li class="listitem"><div class="para">
- Certificate management
- </div></li></ul></div><div class="para">
- Machines are treated as another identity that is managed by FreeIPA. Clients use DNS to identify FreeIPA servers, services, and domain members — which, like user identities are stored in the 389 Directory Server instance for the FreeIPA server. Like users, machines can authenticated to the domain using Kerberos or certificates to verify the machine's identity.
+ FreeIPA has migration tools to help move directory data and only requires minimal updates to clients. However, the migration process assumes a very simple deployment scenario (one Directory Server system to one FreeIPA realm).
+ </div><div class="section" id="Overview-Assumptions"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Overview-Assumptions">17.1. Understanding 389 Directory Server to FreeIPA Migration</h2></div></div></div><div class="para">
+ A directory service provides a simple and clear method for network clients to look up required information. For authentication and authorization, this means specifically a means of looking up user data and associated passwords and access controls. Directory services like 389 Directory Server offer a number of different directory hierarchies; still, at its most basic level, an LDAP client simply needs to connect to the LDAP server to retrieve information.
+ </div><div class="figure" id="basic-ldap-client-config"><div class="figure-contents"><div class="mediaobject"><img src="images/IPA_Migration_Initial_State.png" alt="Basic Directory Server and Client Configuration" /></div></div><h6>Figure 17.1. Basic Directory Server and Client Configuration</h6></div><br class="figure-break" /><div class="para">
+ On Fedora-based clients, the clients use PAM_LDAP and NSS_LDAP libraries to connect to the LDAP services. These libraries retrieve allow clients to retrieve user information from the Directory Server <span class="emphasis"><em>as if</em></span> the data were stored in <code class="filename">/etc/passwd</code> or <code class="filename">/etc/shadow</code>. In real life, the infrastructure may be more complex if the Directory Server or the client is using Kerberos for authentication, but the basic scenario is illustrated in <a class="xref" href="#basic-ldap-client-config">Figure 17.1, “Basic Directory Server and Client Configuration”</a>.
</div><div class="para">
- From the machine perspective, there are several tasks that can be performed that access these domain services:
+ There are significant structural differences between a Directory Server and a FreeIPA server, particularly in the default schema, support for custom schema, and the structure of the directory tree. For more background on those differences, see <a class="xref" href="#ipa-v-ldap">Section 1.1, “FreeIPA v. LDAP: A More Focused Type of Service”</a>. While those differences may impact client configuration (especially with the directory tree, which affects entry names), there should be little impact on the migration process.
+ </div><div class="para">
+ The FreeIPA-client structure is different than the basic LDAP-client structure. There are two important deployment options that govern how clients connect to FreeIPA:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Joining the DNS domain (<span class="emphasis"><em>machine enrollment</em></span>)
- </div></li><li class="listitem"><div class="para">
- Managing DNS entries and zones
+ Whether the system uses SSSD.
</div></li><li class="listitem"><div class="para">
- Managing machine authentication
+ Whether clients use Kerberos with FreeIPA.
</div></li></ul></div><div class="para">
- Authentication in FreeIPA includes machines as well as users. Machine authentication is required for the FreeIPA server to trust the machine and to accept FreeIPA connections from the client software installed on that machine. After authenticating the client, the FreeIPA server can respond to its requests. FreeIPA supports two different approaches to machine authentication:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Key tables (or <em class="firstterm">keytabs</em>, a symmetric key resembling to some extent a user password) and machine certificates. Kerberos tickets are generated as part of the Kerberos services and policies defined by the server. Initially granting a Kerberos ticket, renewing the Kerberos credentials, and even destroying the Kerberos session are all handled by the FreeIPA services. Managing Kerberos is covered in <a class="xref" href="#kerberos">Chapter 6, <i>Identity: Managing the Kerberos Domain</i></a>.
- </div></li><li class="listitem"><div class="para">
- Machine certificates. In this case, the machine uses an SSL certificate that is issued by the FreeIPA server's certificate authority and then stored in FreeIPA's Directory Server. The certificate is then sent to the machine to present when it authenticates to the server. On the client, certificates are managed by a service called <span class="emphasis"><em>certmonger</em></span>, which is described in <a class="xref" href="#certmongerX">Section 14.6, “Working with certmonger”</a>.
- </div></li></ul></div></div><div class="section" id="enrolling-machines"><div class="titlepage"><div><div><h2 class="title" id="enrolling-machines">14.2. Enrolling Clients Manually</h2></div></div></div><div class="para">
- Enrolling machines as clients in the FreeIPA domain is a two-part process. A host entry is created for the client (and stored in the 389 Directory Server isntance), and then a keytab is created to provision the client.
- </div><div class="para">
- Both parts are performed automatically by the <code class="command">ipa-client-install</code> command. It also also possible to perform those steps separately; this allows for administrators to prepare machines and FreeIPA in advance of actually configuring the clients. This allows more flexible setup scenarios, including bulk deployments.
- </div><div class="para">
- When performing a manual enrollment, the host entry is created separately, and then enrollment is completed when the client script is run, which creates the requisite keytab.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- There are two ways to set the password. You can either supply your own or have FreeIPA generate a random one.
- </div></div></div><div class="section" id="Enrollment_with_Separation_of_Duties"><div class="titlepage"><div><div><h3 class="title" id="Enrollment_with_Separation_of_Duties">14.2.1. Performing a Split Enrollment</h3></div></div></div><div class="para">
- There may be a situation where an administrator in one group is prohibited from <span class="emphasis"><em>creating</em></span> a host entry and, therefore, from simply running the <code class="command">ipa-client-install</code> command and allowing it to create the host. However, that administrator may have the right to run the command <span class="emphasis"><em>after</em></span> a host entry exists. In that case, one administrator can create the host entry manually, then the second administrator can complete the enrollment by running the <code class="command">ipa-client-install</code> command.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- An administrator creates the host entry, as described in <a class="xref" href="#adding-host-entry">Section 11.2, “Adding Host Entries”</a>.
- </div></li><li class="listitem"><div class="para">
- The second administrator installs the FreeIPA client packages on the machine, as in <a class="xref" href="#Installing_the_IPA_Client_on_Linux">Section 3.2, “Configuring a Fedora System as a FreeIPA Client”</a>.
- </div></li><li class="listitem"><div class="para">
- When the second administrator runs the setup script, he must pass his Kerberos password and username (principal) with the <code class="command">ipa-client-install</code> command. For example:
- </div><pre class="screen">$ ipa-client-install -w secret -p admin2</pre></li><li class="listitem"><div class="para">
- The keytab is generated on the server and provisioned to the client machine, so that the client machine is not able to connect to the FreeIPA domain. The keytab is saved with <code class="systemitem">root:root</code> ownership and 0600 permissions.
- </div></li></ol></div></div><div class="section" id="bulk-enrollment"><div class="titlepage"><div><div><h3 class="title" id="bulk-enrollment">14.2.2. Performing a Bulk or Kickstart Enrollment</h3></div></div></div><div class="para">
- Two variations of a split enrollment are a bulk enrollment and a kickstart enrollment. Combined, that allows automatic provisioning of multiple hosts or virtual machines. This requires pre-creating the hosts on the FreeIPA server, with a predefined password that can be used to authenticate to complete the enrollment operation.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- An administrator creates the host entry, as described in <a class="xref" href="#adding-host-entry">Section 11.2, “Adding Host Entries”</a>. Set a password to use for the bulk or automatic enrollment. For example:
- </div><pre class="screen">$ ipa host-add bulkserver.example.com --password=secret</pre><div class="para">
- The password is set to expire after the first authentication attempt. After enrollment completes, the password expires and the host is authenticated using its keytab.
- </div></li><li class="listitem"><div class="para">
- Run the kickstart script, using the given bulk password. The kickstart script performs all of the tasks performed manually by the second administrator in <a class="xref" href="#Enrollment_with_Separation_of_Duties">Section 14.2.1, “Performing a Split Enrollment”</a>:
- </div><div class="para">
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Kickstart installs the FreeIPA packages.
- </div></li><li class="listitem"><div class="para">
- Kickstart runs the enrollment script, passing in the password.
- </div></li><li class="listitem"><div class="para">
- The enrollment script connects to the FreeIPA server using the provided password and a bind DN derived from the machine name. It then authenticates using a simple bind over SSL.
- </div></li></ul></div>
-
- </div></li></ol></div></div></div><div class="section" id="renaming-machines"><div class="titlepage"><div><div><h2 class="title" id="renaming-machines">14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration</h2></div></div></div><div class="para">
- The hostname of a system is critical for the correct operation of Kerberos and SSL. Both of these security mechanisms rely on the hostname to ensure that communication is occurring between the specified hosts. Infrastructures which use virtual machines or clusterd servers will commonly have hosts which are renamed because systems are copied, moved, or renamed.
- </div><div class="para">
- Fedora does not provide a simple rename command to facilitate the renaming of a FreeIPA host. Renaming a host in a FreeIPA domain involves deleting the entry in FreeIPA, uninstalling the client software, changing the hostname, and re-enrolling using the new name. Additionally, part of renaming hosts requires regenerating service principals.
- </div><div class="para">
- To reconfigure the client:
+ With SSSD, the client connects to SSSD to check the credentials cache. SSSD works with the PAM_SSS and NSS_SSS modules for authentication. One configuration option is for SSSD to use an LDAP backend to store the usernames and passwords; the client connects to SSSD and SSSD connects to that LDAP store. The identity lookups are performed against SSSD's LDAP backend, and FreeIPA works as a normal directory service.
+ </div><div class="figure" id="migration-with-sssd"><div class="figure-contents"><div class="mediaobject"><img src="images/migr-sssd.png" width="444" alt="Clients and SSSD with an LDAP Backend" /></div></div><h6>Figure 17.2. Clients and SSSD with an LDAP Backend</h6></div><br class="figure-break" /><div class="para">
+ SSSD can also use FreeIPA to store the usernames and passwords. The client still connects to SSSD, and then the identity lookups are performed against SSSD's FreeIPA backend. In this case, SSSD can use other features of FreeIPA, like host-based access control, as part of its authentication process. Once the client is authenticated, FreeIPA works as a normal directory service.
+ </div><div class="figure" id="migration-with-sssd2"><div class="figure-contents"><div class="mediaobject"><img src="images/migr-sssd2.png" width="444" alt="Clients and SSSD with a FreeIPA Backend" /></div></div><h6>Figure 17.3. Clients and SSSD with a FreeIPA Backend</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Kerberos authentication can be configured instead of LDAP authentication with SSSD. Either LDAP or FreeIPA is used for identity lookups and then FreeIPA serves as a normal KDC for Kerberos authentication.
+ </div></div></div><div class="para">
+ Alternatively, clients can connect directly to the FreeIPA server for authentication. This can be done using LDAP authentication and authenticating against the FreeIPA server's LDAP backend or using Kerberos authentication and using FreeIPA as a Kerberos KDC. For LDAP authentication, the system uses the PAM_LDAP module. For Kerberos authentication, it uses the PAM_KRB5 module. Because LDAP is used as the authentication store in either scenario, the system uses the NSS_LDAP module to connect to the FreeIPA directory service.
+ </div><div class="figure" id="migration-with-krb"><div class="figure-contents"><div class="mediaobject"><img src="images/migr-ldap.png" alt="Clients and FreeIPA with LDAP/LDAP or LDAP/Kerberos Authentication" /></div></div><h6>Figure 17.4. Clients and FreeIPA with LDAP/LDAP or LDAP/Kerberos Authentication</h6></div><br class="figure-break" /></div><div class="section" id="migration-considerations"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="migration-considerations">17.2. Migration Considerations</h2></div></div></div><div class="para">
+ The primary issue that may affect Directory Server-FreeIPA migration is how user passwords are stored. FreeIPA uses Kerberos for authentication, and each user requires that Kerberos keys be stored in the FreeIPA Directory Server in addition to the standard user passwords. To generate these keys, the user password needs to be available in cleartext for FreeIPA to be able to read it. This cleartext password is available to FreeIPA when the user is created in FreeIPA. However, when the user is migrated a Directory Server instance, the associated user password is already hashed. The existing password hashes can be reloaded, but the Kerberos hashes cannot be generated. This means that user password migration requires some additional work.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Users cannot authentication to the FreeIPA domain or access FreeIPA resources until they have Kerberos keys.
+ </div></div></div><div class="para">
+ If a user does not have a Kerberos key, that user cannot log into the FreeIPA domain even if he has a user account. SSSD can work with FreeIPA and Kerberos to mitigate the user impact on migrating by generating the required user keys.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Identify which services are running on the machine. These need to be re-created when the machine is re-enrolled.
-<pre class="screen"># ipa service-find server.example.com</pre>
-
- </div><div class="para">
- Each host has a default service which does not appear in the list of services. This service can be referred to as the "host service". The service principal for the host service is <code class="systemitem">host/<hostname></code>, such as <code class="systemitem">host/server.example.com</code>. This principal can also be referred to as the <span class="emphasis"><em>host principal</em></span>.
- </div></li><li class="listitem"><div class="para">
- Identify all host groups to which the machine belongs.
-<pre class="screen"># ipa hostgroup-find server.example.com</pre>
-
- </div><div class="para">
- Identify which of the services have certificates associated with them.
- </div><div class="para">
- The <code class="systemitem">host</code> service always has an associated certificate.
- </div></li><li class="listitem"><div class="para">
- For any service principals (in addition to the host principal), determine the location of the corresponding keytabs on <code class="systemitem">server.example.com</code>. The keytab location is different for each service, and FreeIPA does not store this information.
- </div><div class="para">
- Each service on the client system has a Kerberos principal in the form <span class="emphasis"><em>service name/hostname at REALM</em></span>, such as <code class="systemitem">ldap/server.example.com at EXAMPLE.COM</code>.
- </div></li><li class="listitem"><div class="para">
- Unenroll the client machine from the FreeIPA domain:
-<pre class="screen"># ipa-client-install --uninstall</pre>
-
- </div></li><li class="listitem"><div class="para">
- For each identified keytab other than <code class="filename">/etc/krb5.keytab</code>, remove the old principals:
-<pre class="screen"># ipa-rmkeytab -k <em class="replaceable"><code>/path/to/keytab</code></em> -r EXAMPLE.COM</pre>
-
- </div></li><li class="listitem"><div class="para">
- On another FreeIPA machine, as a FreeIPA administrator, remove the host entry. This removes all services and revokes all certificates issued for that host:
-<pre class="screen"># ipa host-del server.example.com</pre>
-
- </div><div class="para">
- At this point, the host is completely removed from FreeIPA.
- </div></li><li class="listitem"><div class="para">
- Rename the machine.
+ A user tries to log into the machine.
</div></li><li class="listitem"><div class="para">
- Re-enroll the system with FreeIPA:
-<pre class="screen"># ipa-client-install</pre>
-
- </div><div class="para">
- This generates a host principal for with the new hostname in <code class="filename">/etc/krb5.keytab</code>.
+ The FreeIPA identity provider backend attempts Kerberos authentication.
</div></li><li class="listitem"><div class="para">
- For every service that needs a new keytab, run the following command:
-<pre class="screen"># ipa service-add <em class="replaceable"><code>serviceName/new-hostname</code></em></pre>
-
+ Even though the user exists in the system, the authentication will fail with the error <span class="emphasis"><em>key type is not supported</em></span> because the Kerberos keys do not exist.
</div></li><li class="listitem"><div class="para">
- To generate certificates for services, use either <code class="command">certmonger</code> or the FreeIPA administration tools.
+ SSSD uses the FreeIPA identity provider backend to attempt an LDAP bind.
</div></li><li class="listitem"><div class="para">
- Re-add the host to any applicable host groups.
- </div></li></ol></div></div><div class="section" id="manually-unconfig-machines"><div class="titlepage"><div><div><h2 class="title" id="manually-unconfig-machines">14.4. Manually Unconfiguring Client Machines</h2></div></div></div><div class="para">
- A machine may need to be removed from one FreeIPA domain and moved to another domain or a virtual machine may be copied. There are a number of different situations where a FreeIPA client needs to be reconfigured. The easiest solution is to uninstall the client and then configure it afresh.
- </div><pre class="screen">ipa-client-install --uninstall</pre><div class="para">
- If it is not possible to uninstall the client directly, then the FreeIPA configuration can be manually removed from the virtual machine.
- </div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
- When a machine is unenrolled, the procedure cannot be undone. The machine can only be enrolled again.
- </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Remove the old hostname from the main keytab. This can be done by removing every principal in the realm or by removing specific principals. For example, to remove all principals:
-<pre class="programlisting">$ ipa-rmkeytab -k /etc/krb5.keytab -r EXAMPLE.COM</pre>
-
+ FreeIPA intercepts this bind request. If the user has a Kerberos principal but no Kerberos keys, then the FreeIPA generates the keys and stores them in the user entry.
</div><div class="para">
- To remove specific principals:
-<pre class="programlisting">$ ipa-rmkeytab -k /etc/krb5.keytab -p host/server.example.com at EXAMPLE.COM</pre>
-
+ If the bind operation fails for any reason, the FreeIPA identity provider backend fails authentication.
</div></li><li class="listitem"><div class="para">
- Disable tracking in <code class="systemitem">certmonger</code> for every certificate. Each certificate must be removed from tracking individually.
-<pre class="programlisting">$ ipa-getcert stop-tracking -n Server-Cert -d /etc/pki/nssdb
-
-$ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
-</pre>
-
+ The FreeIPA identity provider backend unbinds and tries Kerberos authentication again. This time succeeds because the keys exists in the entry.
+ </div></li></ol></div><div class="para">
+ Alternatively, it is possible to "migrate" users simply by re-creating the Directory Server accounts in FreeIPA, which automatically creates accounts with the appropriate keys. The new users are assigned a temporary password which they change at the first login. No passwords are migrated.
+ </div><div class="para">
+ Migrating users from an existing system provides a smoother transition but also requires parallel management of Directory Server and FreeIPA during the migration and transition process. If you do not preserve passwords, the migration can be performed more quickly but it requires more manual work by administrators and users.
+ </div></div><div class="section" id="Overview-Recommended_Sequence_of_Steps"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Overview-Recommended_Sequence_of_Steps">17.3. Migration Sequence</h2></div></div></div><div class="para">
+ There are a lot of different possible configuration scenarios for both 389 Directory Server and FreeIPA, and any of those scenarios may affect the migration process. For this migration procedure, these are the assumptions about the scenarios:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A single Directory Server domain is being migrated to one FreeIPA realm. No consolidation is involved.
</div></li><li class="listitem"><div class="para">
- Remove the old host from the FreeIPA DNS domain. While this is optional, it cleans up the old FreeIPA entries associated with the system and allows it to be re-enrolled cleanly at a later time.
-<pre class="programlisting">$ ipa host-del server.example.com</pre>
-
+ User passwords are stored as a hash in the Directory Server that the FreeIPA Directory Server can support.
</div></li><li class="listitem"><div class="para">
- If the system should be re-added to a new FreeIPA domain — such as a virtual machine which was moved from one location to another — then the system can be rejoined to FreeIPA using the <code class="command">ipa-join</code> command.
- </div><pre class="programlisting">$ ipa-join</pre></li></ol></div></div><div class="section" id="Client_Problems"><div class="titlepage"><div><div><h2 class="title" id="Client_Problems">14.5. Debugging Client Connection Problems</h2></div></div></div><div class="para">
- Client connection problems are apparent immediately. This can mean that users cannot log into a machine or attempts to access user and group information fails (for example, <code class="command">getent passwd admin</code>).
- </div><div class="para">
- Authentication in FreeIPA is managed with the SSSD daemon, which is described in the <em class="citetitle">Red Hat Enterprise Linux Deployment Guide</em>. If there are problems with client authentication, then check the SSSD information.
- </div><div class="para">
- First, check the SSSD logs in <code class="filename">/var/log/sssd/</code>. There is a specific log file for the DNS domain, such as <code class="filename">sssd_example.com.log</code>. If there is not enough information in the logs at the default logging level, then increase the log level.
- </div><div class="para">
- To increase the log level:
+ The Directory Server instance is both the identity store and the authentication method.
+ </div></li></ul></div><div class="para">
+ There are three major steps when migrating to FreeIPA:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open the <code class="filename">sssd.conf</code> file.
- </div><pre class="screen">vim /etc/sssd/sssd.conf</pre></li><li class="listitem"><div class="para">
- In the <code class="command">[domain/</code><span class="emphasis"><em>example.com</em></span><code class="command">]</code> section, set <code class="varname">debug_level</code>.
- </div><pre class="screen">debug_level = 9</pre></li><li class="listitem"><div class="para">
- Restart the <code class="systemitem">sssd</code> daemon.
- </div><pre class="screen">service sssd restart</pre></li><li class="listitem"><div class="para">
- Check the <code class="filename">/var/log/sssd/sssd_example.com.log</code> file for the debug messages.
- </div></li></ol></div></div><div class="section" id="certmongerX"><div class="titlepage"><div><div><h2 class="title" id="certmongerX">14.6. Working with certmonger</h2></div></div></div><div class="para">
- Part of managing machine authentication is managing machine certificates. The FreeIPA server can handle this through an internal certificate authority. On clients, FreeIPA manages the certificate lifecycle with the <span class="emphasis"><em>certmonger</em></span> service.
- </div><div class="para">
- The <code class="systemitem">certmonger</code> daemon, and its command-line clients, simplifies the process of generating public/private key pairs, creating certificate reqests, and submitting requests to a CA for signing. As part of managing certificates, the <code class="systemitem">certmonger</code> daemon monitors certificates for expiration and can renew certificates that are about to expire. The certificates that <code class="systemitem">certmonger</code> monitors is tracked in files stored in a configurable directory. The default location is <code class="filename">/var/lib/certmonger/requests</code>.
- </div><div class="para">
- <code class="command">certmonger</code> uses the <code class="command">getcert</code> command to manage all certificates, but there are essentially container commands that perform the certificate management tasks depending on the certificate authority type — the FreeIPA CA or self-signed. The command line tool used has different prefixes to identify the different CA types:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- ipa-getcert
+ Install FreeIPA.
</div></li><li class="listitem"><div class="para">
- selfsign-getcert
- </div></li></ul></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Because of general security issues, self-signed certificates are not typically used in production, but can be used for development and testing.
- </div></div></div><div class="section" id="certmonger-req"><div class="titlepage"><div><div><h3 class="title" id="certmonger-req">14.6.1. Requesting a Certificate with certmonger</h3></div></div></div><div class="para">
- With the FreeIPA CA, <code class="command">certmonger</code> uses the <code class="command">ipa-getcert</code> command.
- </div><div class="para">
- A simple request specifies the security (usually NSS) database that will store the certificate and the certificate nickname.
-<pre class="screen"># ipa-getcert request -d /etc/pki/nssdb -n Server-Cert</pre>
-
- </div><div class="para">
- The <code class="filename">/etc/pki/nssdb</code> file is the global NSS database, and <code class="literal">Server-Cert</code> is the nickname of this certificate. The certificate nickname must be unique within this database.
- </div><div class="para">
- When requesting a certificate to be used with a FreeIPA service, the <code class="option">-K</code> option is required to specify the service principal. Otherwise, <code class="command">certmonger</code> assumes the certificate is for a host. The <code class="option">-N</code> option must specify the certificate subject DN, and the subject base DN must match the base DN for the FreeIPA server, or the request is rejected.
- </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre><div class="example" id="ex.Using_certmonger_with_IPA"><h6>Example 14.1. Using certmonger for a Service</h6><div class="example-contents"><pre class="screen">$ ipa-getcert request -r -f /etc/httpd/conf/ssl.crt/server.crt -k /etc/httpd/conf/ssl.key/server.key -N CN=`hostname --fqdn` -D `hostname` -U id-kp-serverAuth</pre></div></div><br class="example-break" /><div class="para">
- The options vary depending on whether you are using a self-signed certificate (<code class="command">selfsign-getcert</code>), the desired configuration for the final certificate, and other settings. In <a class="xref" href="#ex.Using_certmonger_with_IPA">Example 14.1, “Using certmonger for a Service”</a>, these are common options to use:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The <code class="option">-r</code> option will automatically renew the certificate if the keypair already exists. This is used by default.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-f</code> option stores the certificate in the given file.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-k</code> option either stores the key in the given file or, if the key file already exists, uses the key in the file.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-N</code> option gives the subject name.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-D</code> option gives the DNS domain name.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-U</code> option sets the extended key usage flag.
- </div></li></ul></div></div><div class="section" id="Working_with_certmonger-Using_certmonger_with_NSS"><div class="titlepage"><div><div><h3 class="title" id="Working_with_certmonger-Using_certmonger_with_NSS">14.6.2. Storing Certificates in NSS Databases</h3></div></div></div><div class="para">
- By default, <code class="command">certmonger</code> uses plaintext files to store the key and the certificate, but these keys and certificates can also be stored in NSS databases. This is done using the <code class="option">-d</code> option to set the security database location and <code class="option">-n</code> to give the certificate nickname which is used for the certificate in the database. These options are used instead of the PEM files given in the <code class="option">-f</code> and <code class="option">-k</code> options.
- </div><div class="para">
- For example:
-<pre class="screen"># ipa-getcert request <strong class="userinput"><code>-d /export/alias -n ServerCert</code></strong> ...</pre>
-
- </div></div><div class="section" id="certmonger-tracking-certs"><div class="titlepage"><div><div><h3 class="title" id="certmonger-tracking-certs">14.6.3. Tracking Certificates with certmonger</h3></div></div></div><div class="para">
- <code class="command">certmonger</code> can manage the entire certificate lifecycle. Along with generating requests, <code class="command">certmonger</code> can track a certificate and automatically renew it when it expires, at the end of its validity period.
- </div><div class="para">
- This is done using the <code class="command">start-tracking</code> command with the <code class="command">getcert</code> command. The <code class="option">-I</code> option creates the tracking entry, and then there are pointers to the key and certificate files, either in NSS databases (<code class="option">-d</code> and <code class="option">-n</code>) or in the PEM files (<code class="option">-f</code> and <code class="option">-k</code>). The <code class="option">-r</code> option tells <code class="command">certmonger</code> to renew the certificate.
- </div><pre class="screen"># ipa-getcert start-tracking -I cert1-tracker -d /export/alias -n ServerCert -r</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- The <code class="option">-r</code> option can be passed with the <code class="command">request</code> command, in <a class="xref" href="#ex.Using_certmonger_with_IPA">Example 14.1, “Using certmonger for a Service”</a>. In that case, the requested certificate is automatically tracked and renewed by <code class="command">certmonger</code>. Then, it is not necessary to configure tracking manually.
- </div></div></div><div class="para">
- A certificate can be <span class="emphasis"><em>un</em></span>tracked by <code class="command">certmonger</code> by using the <code class="command">stop-tracking</code> command.
- </div></div></div></div><div xml:lang="en-US" class="chapter" id="Migrating_from_a_Directory_Server_to_IPA" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 15. Migrating from a Directory Server to IPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#Overview-Assumptions">15.1. Understanding Red Hat Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="#Overview-Recommended_Sequence_of_Steps">15.2. Recommended Sequence of Steps</a></span></dt><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">15.3. Performing a Server-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">15.3.1. Step 1: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_2_Updating_the_Clie
nt_Configuration">15.3.2. Step 2: Updating the Client Configuration</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">15.3.3. Step 3: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_4_Migrating_Users">15.3.4. Step 4: Migrating Users</a></span></dt><dt><span class="section"><a href="#Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS">15.3.5. Step 5: Decommission the DS</a></span></dt></dl></dd><dt><span class="section"><a href="#Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">15.4. Performing a Client-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD">15.4.1. Step 1: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migrati
on-Phase_2_Migrating_Existing_Data_to_IPA">15.4.2. Step 2: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA">15.4.3. Step 3: Migrate SSSD Clients from LDAP to IPA</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients">15.4.4. Step 4: Reconfigure non-SSSD Clients</a></span></dt><dt><span class="section"><a href="#Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server">15.4.5. Step 5: Decommission the Directory Server</a></span></dt></dl></dd></dl></div><div class="para">
- This chapter addresses the situation where a customer has previously deployed an internal Directory Server (DS) and is planning to use IPA instead. The customer needs to transfer all user data from the DS to IPA so that IPA can function fully and correctly. The goal is to perform this migration without requiring that users change their passwords or perform some other specific action.
- </div><div class="section" id="Overview-Assumptions"><div class="titlepage"><div><div><h2 class="title" id="Overview-Assumptions">15.1. Understanding Red Hat Directory Server to FreeIPA Migration</h2></div></div></div><div class="para">
- It is not practical to identify and address each of the scenarios in which a DS and IPA might be deployed, and where migration might be required. Consequently, the following assumptions are made:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- This is a one-to-one transition from one DS realm to one IPA realm. No consolidation is involved.
+ Migrate the user data using the FreeIPA <code class="command">ipa-migrate-ds</code> script. This exports the data from Directory Server, formats for the FreeIPA schema, and then imports it into FreeIPA.
</div></li><li class="listitem"><div class="para">
- User passwords are stored as a hash in the source DS in a form that the IPA DS can understand
+ <span class="emphasis"><em>Optional.</em></span> Deploy SSSD.
</div></li><li class="listitem"><div class="para">
- You are using LDAP as the central authentication service, and the client machines are configured to use <code class="systemitem">pam_ldap</code> and <code class="systemitem">nss_ldap</code>
+ Reconfigure clients to connect to FreeIPA. This is required because the FreeIPA directory tree — and therefore user entry DNs — is different from the Directory Server tree. Clients do not need to be reconfigured immediately, so there can be a reasonable testing and transition phase after the data are migrated.
+ </div></li></ol></div></div><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">17.4. Scenario 1: Migrating Directly to FreeIPA</h2></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install FreeIPA, including any custom Directory Server schema, on a different machine from the existing Directory Server.
</div></li><li class="listitem"><div class="para">
- Some machines might be present that are managed by <code class="systemitem">NIS</code> or are not part of the DS deployment, but are planned to be part of the IPA domain
+ Enable the FreeIPA server to allow migration:
+ </div><pre class="screen"># ipa config-mod --enable-migration=TRUE</pre></li><li class="listitem"><div class="para">
+ Run the FreeIPA migration script, <code class="command">ipa migrate-ds</code>. At its most basic, this requires only the LDAP URL of the Directory Server instance to migrate:
+ </div><pre class="screen"># ipa migrate-ds ldap://ldap.example.com:389</pre><div class="para">
+ The <code class="command">ipa migrate-ds</code> command connects to the Directory Server and binds as the Directory Manager and extracts all entries with the <code class="command">person</code> object class from the <code class="command">ou=People</code> subtree, by default. A different subtree can be specified using the <code class="option">--user-container</code> option.
</div><div class="para">
- Machines that cannot be moved from the <code class="systemitem">NIS</code> domain to LDAP or IPA because they are old and do not support <code class="systemitem">nss_ldap</code> are assumed to remain in and be served by the <code class="systemitem">NIS</code> domain. The migration of such machines to the IPA domain, while possible, is a challenging task and is out of the scope of the current use case.
- </div></li></ul></div><div class="para">
- The following have been identified as typical migration scenarios:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Migrate an existing environment to IPA but do not use its Kerberos features for now
+ This script also exports all entries from the <code class="command">ou=Groups</code> subtree to maintain group memberships. The group can be changed using the <code class="option">--group-container</code> option.
+ </div><div class="para">
+ Once the information is exported, the script adds all required FreeIPA object classes and attributes and coverts DNs in attributes to match the FreeIPA directory tree.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen"># ipa migrate-ds --user-container=ou=employees,dc=example,dc=com --group-container="ou=employee groups,dc=example,dc=com" ldap://ldap.example.com:389</pre></li><li class="listitem"><div class="para">
+ Update the client configuration to use PAM_LDAP and NSS_LDAP to connect to FreeIPA instead of connecting to Directory Server, NIS, or local files.
+ </div><div class="para">
+ <span class="emphasis"><em>For SSSD.</em></span> If the Kerberos keys will be automatically generated when a user authenticates, the configuration must use Start TLS and simple bind authentication. Additionally, copy the FreeIPA server certificate is to the client.
</div></li><li class="listitem"><div class="para">
- Migrate an existing environment to IPA and use its Kerberos features using only IPA v1 functionality. That is, do not use SSSD.
+ <span class="emphasis"><em>Optional.</em></span> Set up SSSD. Using SSSD allows the required Kerberos keys and server certificates to be delivered to the clients.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install SSSD on every client machine:
+ </div><pre class="screen"># yum install sssd</pre></li><li class="listitem"><div class="para">
+ Configure SSSD to use FreeIPA as an LDAP backend and enable Kerberos, using FreeIPA as the KDC server.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Instruct users to log in to FreeIPA using either an SSSD client or a client that supports PAM_LDAP with Statr TLS and simple bind.
</div></li><li class="listitem"><div class="para">
- Migrate an existing environment to IPA and use its Kerberos features on some machines, while some machines will use SSSD and some will not; this is the primary use case.
- </div></li></ul></div><div class="para">
- In the initial state, there is a single data source (the Directory Server) and a single client machine configuration. This client configuration uses <code class="systemitem">LDAP</code> to connect to the Directory Server and retrieve information about users and groups. This configuration uses <code class="systemitem">PAM_LDAP</code> and <code class="systemitem">NSS_LDAP</code> for authentication and identity lookups. These modules enable the client systems to use data retrieved from the DS just as if it were stored in <code class="filename">/etc/passwd</code> or <code class="filename">/etc/shadow</code>. The following diagram illustrates this type of implementation, where <code class="systemitem">LDAP</code> is used to connect to the DS for both authentication and authorization. The case where <code class="systemitem">Kerberos</code> is used for authentication and <code class="systemitem">LDAP</code> for identity, and where these two data stores are synchronized, is not d
escribed here. Consequently, the initial state may not be as simple or as straightforward as displayed here, however the approach and the final state will be similar.
- </div><div class="figure" id="Initial_State-Initial_state_of_deployment_before_migrating_to_IPA."><div class="figure-contents"><div class="mediaobject"><img src="./images/IPA_Migration_Initial_State.png" alt="Initial state of deployment before migrating to IPA." /></div></div><h6>Figure 15.1. Initial state of deployment before migrating to IPA.</h6></div><br class="figure-break" /><div class="para">
- In the final state, even though only a single data source exists, multiple possible machine configurations are now possible. This is illustrated in <a class="xref" href="#Final_State-Final_state_of_deployment_after_migrating_to_IPA">Figure 15.2, “Final state of deployment after migrating to IPA”</a>
- </div><div class="figure" id="Final_State-Final_state_of_deployment_after_migrating_to_IPA"><div class="figure-contents"><div class="mediaobject"><img src="./images/IPA_Migration_Final_State.png" alt="Final state of deployment after migrating to IPA" /></div></div><h6>Figure 15.2. Final state of deployment after migrating to IPA</h6></div><br class="figure-break" /><div class="formalpara" id="Configuration_Options-Connected_to_IPA_via_SSSD_Using_SSSDs_LDAP_Back_End"><h5 class="formalpara">Connected to IPA via SSSD Using SSSD's LDAP Back End</h5>
- Clients connect to IPA via SSSD. SSSD is integrated into the PAM and NSS stacks by means of PAM_SSS and NSS_SSS, respectively. SSSD's LDAP back end is configured for both authentication and for identity lookups. In this use case, IPA functions like a normal DS.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- Kerberos authentication can be configured instead of LDAP authentication. In this case, IPA acts as a normal DS for identity lookups and a normal KDC for Kerberos authentication.
- </div></div></div><div class="formalpara" id="Configuration_Options-Connected_to_IPA_via_SSSD_Using_IPAs_Back_End"><h5 class="formalpara">Connected to IPA via SSSD Using IPA's Back End</h5>
- This configuration is similar to that described above, except that SSSD has a special back end that is more IPA-aware. If this back end is configured, then SSSD can take advantage of specific IPA features, such as silent password migration and host-based access control.
- </div><div class="formalpara" id="Configuration_Options-LDAP_connected_Machines"><h5 class="formalpara">LDAP-connected Machines</h5>
- Clients connect directly to IPA and use PAM_LDAP and NSS_LDAP. In this use case, too, IPA functions like a normal Directory Server.
- </div><div class="formalpara" id="Configuration_Options-KRB5LDAP_connected_Machines"><h5 class="formalpara">KRB5/LDAP-connected Machines</h5>
- Clients connect directly to IPA and use PAM_KRB5 and NSS_LDAP. This is the same configuration as that provided for IPA v1.x
- </div><div class="para">
- In the initial state, clients use LDAP to communicate with the Directory Server to retrieve information about users and groups. <code class="systemitem">PAM_LDAP</code> and <code class="systemitem">NSS_LDAP</code> are modules that enable the client systems to use data retrieved from the Directory Server as if it were stored in <code class="filename">/etc/passwd</code> or <code class="filename">/etc/shadow</code>. In the final state, IPA provides all of the same functionality and many more features besides.
- </div><div class="para">
- A number of issues exist that need to be considered when planning the migration:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- A generic DS uses a different schema and <em class="firstterm">Directory Information Tree (DIT)</em> when compared to IPA. No known DS uses the same flat DIT structure that IPA uses. IPA is optimized for performance, and attempts to avoid any architectural design flaws that have occurred in the past.
+ Once users have been migrated over, configure non-SSSD clients to use the FreeIPA domain, as required.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Use PAM_LDAP modules until all of the users have been migrated; then it is possible to use PAM_KRB5.
+ </div></div></div></li><li class="listitem"><div class="para">
+ When the migration of all clients and users is complete, decommission the Directory Server.
+ </div></li></ol></div></div><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">17.5. Scenario 2: Using SSSD as Part of Migration</h2></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Set up SSSD. Using SSSD allows the required Kerberos keys and server certificates to be delivered to the clients.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install SSSD on every client machine:
+ </div><pre class="screen"># yum install sssd</pre></li><li class="listitem"><div class="para">
+ Configure SSSD to use the existing 389 Directory Server as its LDAP backend.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Install FreeIPA, including any custom Directory Server schema, on a different machine from the existing Directory Server.
</div></li><li class="listitem"><div class="para">
- IPA uses Kerberos for authentication, and so each user requires that Kerberos keys be stored in the IPA DS, in addition to the standard LDAP hashes used by the DS
+ Enable the FreeIPA server to allow migration:
+ </div><pre class="screen"># ipa config-mod --enable-migration=TRUE</pre></li><li class="listitem"><div class="para">
+ Run the FreeIPA migration script, <code class="command">ipa migrate-ds</code>. At its most basic, this requires only the LDAP URL of the Directory Server instance to migrate:
+ </div><pre class="screen"># ipa migrate-ds ldap://ldap.example.com:389</pre><div class="para">
+ The <code class="command">ipa migrate-ds</code> command connects to the Directory Server and binds as the Directory Manager and extracts all entries with the <code class="command">person</code> object class from the <code class="command">ou=People</code> subtree, by default. A different subtree can be specified using the <code class="option">--user-container</code> option.
</div><div class="para">
- In order to generate these keys, the password needs to be available in clear text to IPA's DS password plug-in. It is available when the user is created in IPA using IPA tools or LDAP, but this is not the case when the user is migrated from other external storage such as another DS. Consequently, the existing password hashes can be reloaded, but the Kerberos hashes cannot be generated. IPA provides a number of solutions to overcome this issue; these are described later in this chapter.
- </div></li></ul></div></div><div class="section" id="Overview-Recommended_Sequence_of_Steps"><div class="titlepage"><div><div><h2 class="title" id="Overview-Recommended_Sequence_of_Steps">15.2. Recommended Sequence of Steps</h2></div></div></div><div class="para">
- The migration from DS to IPA requires:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Installing IPA on a suitable machine
+ This script also exports all entries from the <code class="command">ou=Groups</code> subtree to maintain group memberships. The group can be changed using the <code class="option">--group-container</code> option.
+ </div><div class="para">
+ Once the information is exported, the script adds all required FreeIPA object classes and attributes and coverts DNs in attributes to match the FreeIPA directory tree.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen"># ipa migrate-ds --user-container=ou=employees --group-container="ou=employee groups" ldap://ldap.example.com:389</pre></li><li class="listitem"><div class="para">
+ Move clients that have SSSD installed from the LDAP backend to the FreeIPA backend and enroll them as client with FreeIPA. This downloads the required keys and certificates.
</div></li><li class="listitem"><div class="para">
- Migrating the user data. This step is performed by an IPA command which:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Dumps the data from DS
- </div></li><li class="listitem"><div class="para">
- Converts the data into a format suitable for IPA
- </div></li><li class="listitem"><div class="para">
- Loads the converted data into IPA
- </div></li></ol></div></li><li class="listitem"><div class="para">
- Reconfiguring clients to connect to IPA. This is required because the IPA Directory Information Tree (DIT) is different from the DS DIT.
- </div></li></ol></div><div class="para">
- To achieve a successful migration, changes are required both on the client and on the server machines. Reconfiguration of the clients is not required immediately after changes are made to the server. This allows for a transition period, without which it would not be possible to deploy the solution.
- </div><div class="para">
- At present the only option is to run IPA and DS concurrently until all the clients are reconfigured to point to IPA. Two main migration strategies currently exist:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Migrate the server first
+ Have users to log into a machine with SSSD and FreeIPA backend. This generates the required Kerberos keys for the user.
+ </div><div class="para">
+ To monitor the user migration process, query the existing Directory Server to see which user accounts have a password but do not yet have a Kerberos principal key.
+ </div><pre class="screen">$ ldapsearch -LL -x -D 'cn=Directory Manager' -w secret -b 'ou=people,dc=example,dc=com' '(&(!(krbprincipalkey=*))(userpassword=*))' uid</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Include the quotes around the filter so that it is not interpreted by the shell.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Once users have been migrated over, configure non-SSSD clients to use the FreeIPA domain, as required.
</div></li><li class="listitem"><div class="para">
- Deploy SSSD first
- </div></li></ul></div><div class="para">
- Each approach is valid and accomplishes the same goal, but using a different sequence of operations.
- </div><div class="para">
- Each approach has a different impact on the IT team and the users. You need to select the approach that best suits your deployment. These scenarios can be modified to meet the needs of your enterprise. Provided you understand the implications and reasoning behind each step, there is no requirement to follow the steps in the given order. It is important to understand that until the Kerberos keys are generated in IPA, users will not be able to authenticate with Kerberos credentials using <code class="systemitem">PAM_KRB5</code> or <code class="command">kinit</code>.
+ When the migration of all clients and users is complete, decommission the Directory Server.
+ </div></li></ol></div></div></div><div xml:lang="en-US" class="chapter" id="certmongerX" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 18. Working with certmonger</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#certmonger-req">18.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="#Working_with_certmonger-Using_certmonger_with_NSS">18.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="#certmonger-tracking-certs">18.3. Tracking Certificates with certmonger</a></span></dt></dl></div><div class="para">
+ Part of managing machine authentication is managing machine certificates. The FreeIPA server can handle this through an internal certificate authority. On clients, FreeIPA manages the certificate lifecycle with the <span class="emphasis"><em>certmonger</em></span> service.
+ </div><div class="para">
+ The <code class="systemitem">certmonger</code> daemon, and its command-line clients, simplifies the process of generating public/private key pairs, creating certificate requests, and submitting requests to a CA for signing. As part of managing certificates, the <code class="systemitem">certmonger</code> daemon monitors certificates for expiration and can renew certificates that are about to expire. The certificates that <code class="systemitem">certmonger</code> monitors is tracked in files stored in a configurable directory. The default location is <code class="filename">/var/lib/certmonger/requests</code>.
+ </div><div class="para">
+ <code class="command">certmonger</code> uses the <code class="command">getcert</code> command to manage all certificates, but there are essentially container commands that perform the certificate management tasks depending on the certificate authority type — the FreeIPA CA or self-signed. The command line tool used has different prefixes to identify the different CA types:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ ipa-getcert
+ </div></li><li class="listitem"><div class="para">
+ selfsign-getcert
+ </div></li></ul></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Because of general security issues, self-signed certificates are not typically used in production, but can be used for development and testing.
+ </div></div></div><div class="section" id="certmonger-req"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="certmonger-req">18.1. Requesting a Certificate with certmonger</h2></div></div></div><div class="para">
+ With the FreeIPA CA, <code class="command">certmonger</code> uses the <code class="command">ipa-getcert</code> command.
</div><div class="para">
- You should also consider an alternative migration scenario, where passwords are not migrated. In this scenario, users are not migrated into IPA but rather added as new users with new passwords. Users would then change their password the first time they authenticate. The initial password would be defined by IT and sent to users by email or communicated in some other way.
+ A simple request specifies the security (usually NSS) database that will store the certificate and the certificate nickname.
+<pre class="screen"># ipa-getcert request -d /etc/pki/nssdb -n Server-Cert</pre>
+
</div><div class="para">
- Migrating users from an existing system provides a smoother transition but also requires parallel management of DS and IPA during the migration. If you do not preserve passwords, the migration can be performed more quickly and you can avoid the period of double management of IPA and DS.
+ The <code class="filename">/etc/pki/nssdb</code> file is the global NSS database, and <code class="literal">Server-Cert</code> is the nickname of this certificate. The certificate nickname must be unique within this database.
</div><div class="para">
- The following sequence of operations occurs when users are migrated using SSSD:
+ When requesting a certificate to be used with a FreeIPA service, the <code class="option">-K</code> option is required to specify the service principal. Otherwise, <code class="command">certmonger</code> assumes the certificate is for a host. The <code class="option">-N</code> option must specify the certificate subject DN, and the subject base DN must match the base DN for the FreeIPA server, or the request is rejected.
+ </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre><div class="example" id="ex.Using_certmonger_with_IPA"><h6>Example 18.1. Using certmonger for a Service</h6><div class="example-contents"><pre class="screen">$ ipa-getcert request -r -f /etc/httpd/conf/ssl.crt/server.crt -k /etc/httpd/conf/ssl.key/server.key -N CN=`hostname --fqdn` -D `hostname` -U id-kp-serverAuth</pre></div></div><br class="example-break" /><div class="para">
+ The options vary depending on whether you are using a self-signed certificate (<code class="command">selfsign-getcert</code>), the desired configuration for the final certificate, and other settings. In <a class="xref" href="#ex.Using_certmonger_with_IPA">Example 18.1, “Using certmonger for a Service”</a>, these are common options to use:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- A user tries to log in to the machine.
- </div></li><li class="listitem"><div class="para">
- SSSD passes authentication to the IPA identity provider back end.
- </div></li><li class="listitem"><div class="para">
- The IPA identity provider back end attempts Kerberos authentication.
- </div></li><li class="listitem"><div class="para">
- Even though the user exists in the system, the authentication will fail with the error "key type is not supported", because the Kerberos keys do not yet exist.
+ The <code class="option">-r</code> option will automatically renew the certificate if the key pair already exists. This is used by default.
</div></li><li class="listitem"><div class="para">
- If SSSD is configured to migrate users, it will continue to the next step. Otherwise, it will fail authentication.
+ The <code class="option">-f</code> option stores the certificate in the given file.
</div></li><li class="listitem"><div class="para">
- The IPA identity provider back end then attempts to perform an LDAP bind.
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Because it is going to perform a simple bind and send the password in the clear, this LDAP bind operation must use startTLS.
- </div></li><li class="listitem"><div class="para">
- Perform a simple bind.
- </div></li></ul></div>
-
+ The <code class="option">-k</code> option either stores the key in the given file or, if the key file already exists, uses the key in the file.
</div></li><li class="listitem"><div class="para">
- The server-side plug-in will intercept this bind request and if the user has a Kerberos principal but no Kerberos keys, then the plug-in will generate the keys and store them in the user entry.
+ The <code class="option">-N</code> option gives the subject name.
</div></li><li class="listitem"><div class="para">
- If the bind operation fails for any reason, the IPA identity provider back end will fail authentication, otherwise it will continue.
+ The <code class="option">-D</code> option gives the DNS domain name.
</div></li><li class="listitem"><div class="para">
- The IPA identity provider back end will unbind and try Kerberos authentication again. This time it is expected to succeed because the keys already exist in the entry.
- </div></li></ul></div></div><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration"><div class="titlepage"><div><div><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">15.3. Performing a Server-based Migration</h2></div></div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">15.3.1. Step 1: Migrating Existing Data to IPA</h3></div></div></div><div class="para">
- The first phase of the migration consists of setting up IPA and migrating data from the existing DS to that used by IPA. This involves the use of the <code class="command">ipa migrate-ds</code> command, which dumps the user data from the original DS, converts it into a format suitable for use by IPA, and then loads the converted data into IPA.
- </div><div class="para">
- The <code class="command">ipa migrate-ds</code> command connects to the DS and binds as the <code class="systemitem">Directory Manager</code>, and then extracts all objectClass=person objects from ou=People. This can be changed using the <code class="option">--user-container</code> option. It also extracts all objects from ou=Groups. This can be changed using the <code class="option">--group-container</code> option. It adds all object classes and attributes required by IPA (if they are missing) and coverts DNs in attributes to match the IPA Directory Information Tree (DIT). The command returns an error if migration is not enabled.
- </div><div class="para">
- Refer to the <code class="command">ipa migrate-ds</code> help page for more details about this command (<code class="command">ipa help migrate-ds</code>).
- </div><div class="procedure" id="Phase_1_Migrating_Existing_Data_to_IPA-To_migrate_existing_data_to_IPA"><h6>Procedure 15.1. To migrate existing data to IPA:</h6><ol class="1"><li class="step"><div class="para">
- Install IPA, including any custom DS schema, on a different machine from the existing DS.
- </div></li><li class="step"><div class="para">
- Use the following command to enable IPA migration mode:
- </div><div class="para">
- <code class="command"># ipa config-mod --enable-migration=TRUE</code>
- </div></li><li class="step"><div class="para">
- To migrate users and groups from an existing Directory Server using a default configuration, reachable at <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em></code>, use the following command:
- </div><div class="para">
- <code class="command"># ipa migrate-ds <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em>:389</code></code>
- </div><div class="para">
- To migrate users and groups from an existing IPAv1 installation using a default configuration, whose DS is reachable at <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em></code>, use the following command:
- </div><div class="para">
- <code class="command"># ipa migrate-ds --user-container=cn=users,cn=accounts \</code> <code class="command">--group-container=cn=groups,cn=accounts <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em>:389</code></code>
- </div><div class="para">
- In this example, <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em>:389</code> is the LDAP-URI and port number of the existing directory server from which you want to migrate your data. Update this URI to suit your own environment.
- </div><div class="para">
- Enter the <code class="systemitem">Directory Manager</code> password for the DS when prompted.
- </div></li><li class="step"><div class="para">
- Check the log file for errors and instructions on how to address them.
- <div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- The migration log file is currently not implemented. Instead, any error messages are printed to standard output.
- </div></div></div>
-
- </div></li></ol></div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Configuration"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Configuration">15.3.2. Step 2: Updating the Client Configuration</h3></div></div></div><div class="procedure" id="Phase_2_Updating_the_Client_Configuration-To_update_the_client_configuration"><h6>Procedure 15.2. To update the client configuration:</h6><ul><li class="step"><div class="para">
- Update the client configuration to use PAM_LDAP and NSS_LDAP to connect to IPA instead of connecting to DS, NIS, or using local files.
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- If the intention is to automatically generate the Kerberos keys when a user authenticates, the configuration should use startTLS and simple bind authentication. For this to occur, the IT department needs to ensure the IPA server certificate is copied to the client.
- </div></li><li class="listitem"><div class="para">
- If the intention is to install SSSD on a client at a later date, the startTLS and certificate requirements do not apply.
- </div></li></ul></div>
-
- </div></li></ul></div><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
- You should not update your client configuration to use PAM_KRB5 and NSS_LDAP (that is, the equivalent of IPA v1) at this stage unless absolutely necessary. This is because the Kerberos keys will not yet exist in the IPA user entries, and consequently users will not be able to log in. If such a configuration is required, users can be directed to a specific web page on the IPA server after the data has been loaded into the IPA server. This page will prompt the user for their password and perform an LDAP bind. The DS password plug-in will capture these passwords and generate the Kerberos keys.
- </div></div></div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">15.3.3. Step 3: Installing and Configuring SSSD</h3></div></div></div><div class="formalpara" id="Phase_3_Installing_and_Configuring_SSSD-To_install_and_configure_SSSD"><h5 class="formalpara">To install and configure SSSD:</h5>
- <div class="orderedlist"><ol><li class="listitem"><div class="para">
- Install SSSD on the machines that can support it:
- </div><div class="para">
- <code class="command"># yum install sssd</code>
- </div></li><li class="listitem"><div class="para">
- Configure SSSD to use IPA as a back end (Kerberos and LDAP). Installing SSSD and enrolling the client with IPA will ensure delivery of the machine Kerberos key and server certificate to the client.
- </div></li></ol></div>
-
- </div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_4_Migrating_Users"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_4_Migrating_Users">15.3.4. Step 4: Migrating Users</h3></div></div></div><div class="formalpara" id="Phase_4_Migrating_Users-To_migrate_the_users_from_DS_to_IPA"><h5 class="formalpara">To migrate the users from DS to IPA:</h5>
- <div class="orderedlist"><ol><li class="listitem"><div class="para">
- Instruct users to log in to IPA using either an SSSD client or a client that supports PAM_LDAP with startTLS and simple bind. An SSSD client configured as described in <a class="xref" href="#Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">Section 15.3.3, “Step 3: Installing and Configuring SSSD”</a> will perform a silent migration. Clients configured with startTLS and simple bind will also trigger key generation. A Kerberos key is created the first time a user logs in, and this key is stored in the IPA back end.
- </div></li><li class="listitem"><div class="para">
- As the migration of the user population progresses (that is, as the Kerberos keys are generated on the IPA server), you can begin to configure other, non-SSSD clients to suit your requirements.
- </div></li></ol></div>
+ The <code class="option">-U</code> option sets the extended key usage flag.
+ </div></li></ul></div></div><div class="section" id="Working_with_certmonger-Using_certmonger_with_NSS"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Working_with_certmonger-Using_certmonger_with_NSS">18.2. Storing Certificates in NSS Databases</h2></div></div></div><div class="para">
+ By default, <code class="command">certmonger</code> uses plaintext files to store the key and the certificate, but these keys and certificates can also be stored in NSS databases. This is done using the <code class="option">-d</code> option to set the security database location and <code class="option">-n</code> to give the certificate nickname which is used for the certificate in the database. These options are used instead of the PEM files given in the <code class="option">-f</code> and <code class="option">-k</code> options.
+ </div><div class="para">
+ For example:
+<pre class="screen"># ipa-getcert request <strong class="userinput"><code>-d /export/alias -n ServerCert</code></strong> ...</pre>
- </div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS">15.3.5. Step 5: Decommission the DS</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- When the migration of all clients and users is complete, decommission the DS.
- </div></li></ul></div></div></div><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration"><div class="titlepage"><div><div><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">15.4. Performing a Client-based Migration</h2></div></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD">15.4.1. Step 1: Installing and Configuring SSSD</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Install SSSD first on the machines that can support it:
- </div><div class="para">
- <code class="command"># yum install sssd</code>
- </div></li><li class="listitem"><div class="para">
- Configure SSSD with the LDAP back end and point it to the existing DS deployment.
- </div></li></ul></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_2_Migrating_Existing_Data_to_IPA"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_2_Migrating_Existing_Data_to_IPA">15.4.2. Step 2: Migrating Existing Data to IPA</h3></div></div></div><div class="para">
- Install IPA and migrate the existing DS data as described in <a class="xref" href="#Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">Section 15.3.1, “Step 1: Migrating Existing Data to IPA”</a>
- </div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA">15.4.3. Step 3: Migrate SSSD Clients from LDAP to IPA</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Start moving clients that have SSSD installed from the LDAP back end to the IPA back end, and enroll them with IPA. This will download the required keys and certificates.
- </div></li><li class="listitem"><div class="para">
- Instruct users to use (that is, to log in at least once) the machines with SSSD and IPA back end, or go to the web page and authenticate.
- </div></li><li class="listitem"><div class="para">
- Monitor the user migration process using the following LDAP query. This query detects the state of the migration by determining which users do not have a Kerberos principal key but do have a password.
- </div><div class="para">
- This query will prompt for the Directory Manager password.
-<pre class="screen"><code class="command">$ ldapsearch -LL -x -D 'cn=Directory Manager' -W -b 'cn=users,cn=accounts,dc=example,dc=com' \</code>
-<code class="command">'(&(!(krbprincipalkey=*))(userpassword=*))' uid</code></pre>
-
- </div><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
- It is important to include the quotes around the filter so that it is not interpreted by the shell.
- </div></div></div></li></ul></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients">15.4.4. Step 4: Reconfigure non-SSSD Clients</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- As the user population is migrated (the Kerberos keys are generated), you can start reconfiguring other (non‐SSSD) clients as required. The clients can be set up in any state shown on the diagram above.
- </div></li></ul></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server">15.4.5. Step 5: Decommission the Directory Server</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- When the migration of the clients is complete, decommission the DS.
- </div></li></ul></div></div></div></div><div xml:lang="en-US" class="appendix" id="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Frequently Asked Questions</h1></div></div></div><div class="qandaset"><dl><dt>Q: <a href="#id4286009">
+ </div></div><div class="section" id="certmonger-tracking-certs"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="certmonger-tracking-certs">18.3. Tracking Certificates with certmonger</h2></div></div></div><div class="para">
+ <code class="command">certmonger</code> can manage the entire certificate lifecycle. Along with generating requests, <code class="command">certmonger</code> can track a certificate and automatically renew it when it expires, at the end of its validity period.
+ </div><div class="para">
+ This is done using the <code class="command">start-tracking</code> command with the <code class="command">getcert</code> command. The <code class="option">-I</code> option creates the tracking entry, and then there are pointers to the key and certificate files, either in NSS databases (<code class="option">-d</code> and <code class="option">-n</code>) or in the PEM files (<code class="option">-f</code> and <code class="option">-k</code>). The <code class="option">-r</code> option tells <code class="command">certmonger</code> to renew the certificate.
+ </div><pre class="screen"># ipa-getcert start-tracking -I cert1-tracker -d /export/alias -n ServerCert -r</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ The <code class="option">-r</code> option can be passed with the <code class="command">request</code> command, in <a class="xref" href="#ex.Using_certmonger_with_IPA">Example 18.1, “Using certmonger for a Service”</a>. In that case, the requested certificate is automatically tracked and renewed by <code class="command">certmonger</code>. Then, it is not necessary to configure tracking manually.
+ </div></div></div><div class="para">
+ A certificate can be <span class="emphasis"><em>un</em></span>tracked by <code class="command">certmonger</code> by using the <code class="command">stop-tracking</code> command.
+ </div></div></div><div xml:lang="en-US" class="appendix" id="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Frequently Asked Questions</h1></div></div></div><div class="qandaset"><dl><dt>Q: <a href="#id651737">
Is it possible to change the IP address of the master server?
- </a></dt><dt>Q: <a href="#id3094723">
+ </a></dt><dt>Q: <a href="#id572145">
Why are there restrictions on the length of user and group names? How can I change this?
- </a></dt><dt>Q: <a href="#id3065597">
+ </a></dt><dt>Q: <a href="#id883394">
What is the difference between a replica and a master server?
- </a></dt><dt>Q: <a href="#id3697180">
+ </a></dt><dt>Q: <a href="#id597785">
Can I promote a replica to function as the master?
- </a></dt><dt>Q: <a href="#id3351646">
+ </a></dt><dt>Q: <a href="#id876954">
Why does the ipa-client-install script fail to find the IPA server on a network that uses Active Directory DNS?
- </a></dt><dt>Q: <a href="#id3221452">
+ </a></dt><dt>Q: <a href="#id1185150">
Can an administrator who is connected to "Server B" revoke a certificate issued by "Server A"?
- </a></dt></dl><div class="qandaset"><div id="id4286009" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </a></dt></dl><div class="qandaset"><div id="id651737" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Is it possible to change the IP address of the master server?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
Yes. If you are only changing the IP address, it is sufficient to update the <code class="filename">/etc/hosts</code> file, the system configuration, and the DNS entry.
- </div></div></div></div><div id="id3094723" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div></div></div></div><div id="id572145" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Why are there restrictions on the length of user and group names? How can I change this?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
User and group name lengths are specified in the policy. The default maximum username length is 32 characters. The maximum configurable length for user or group names is 255 characters. This complements some supported client operating systems which limit the length of usernames.
</div><div class="para">
The default settings can be changed in the FreeIPA UI or using the <code class="command">ipa config-mod</code> command. For example:
- </div><pre class="screen">4 ipa config-mod --maxusername=50</pre></div></div></div><div id="id3065597" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div><pre class="screen">4 ipa config-mod --maxusername=50</pre></div></div></div><div id="id883394" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
What is the difference between a replica and a master server?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
A master server maintains a certificate authority. A replica server has its certificate issued by the master CA.
- </div></div></div></div><div id="id3697180" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div></div></div></div><div id="id597785" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Can I promote a replica to function as the master?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
- Yes. This is described in <a class="xref" href="#promoting-replica">Section 13.11, “Promoting a Read-Only Replica to a FreeIPA Server”</a>.
- </div></div></div></div><div id="id3351646" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ Yes. This is described in <a class="xref" href="#promoting-replica">Section 16.7, “Promoting a Read-Only Replica to a FreeIPA Server”</a>.
+ </div></div></div></div><div id="id876954" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Why does the <code class="command">ipa-client-install</code> script fail to find the IPA server on a network that uses Active Directory DNS?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
Active Directory has its own SRV records for Kerberos and LDAP. The <code class="command">ipa-client-install</code> script can retrieve those records instead of any that have been added for the FreeIPA domain.
</div><div class="para">
When running <code class="command">ipa-client-install</code>, manually enter the server information to ensure that the script uses the FreeIPA SRV records instead of Active Directory records. The <code class="command">ipa-client-install</code> options are listed in <a class="xref" href="#ipa-client-install">Section B.6.1, “ipa-client-install”</a>.
- </div></div></div></div><div id="id3221452" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div></div></div></div><div id="id1185150" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Can an administrator who is connected to "Server B" revoke a certificate issued by "Server A"?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
Yes, assuming that Servers A and B contain non-cloned CAs which have their database information replicated to share revocation information only.
- </div></div></div></div></div></div></div><div xml:lang="en-US" class="appendix" id="tools-reference" lang="en-US"><div class="titlepage"><div><div><h1 class="title">FreeIPA Tools Reference</h1></div></div></div><div class="toc"><dl><dt><span class="section"><a href="#special-chars">B.1. Using Special Characters</a></span></dt><dt><span class="section"><a href="#ipa">B.2. ipa</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-location">B.2.1. Location</a></span></dt><dt><span class="section"><a href="#ipa-syntax">B.2.2. Syntax</a></span></dt><dt><span class="section"><a href="#ipa-topics">B.2.3. Help Topics</a></span></dt><dt><span class="section"><a href="#ipa-global-options">B.2.4. Global Options</a></span></dt><dt><span class="section"><a href="#ipa-return-codes">B.2.5. Return Codes</a></span></dt><dt><span class="section"><a href="#ipa-commands">B.2.6. Commands</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-dns">B.3. ipa DNS Commands</a>
</span></dt><dd><dl><dt><span class="section"><a href="#ipa-command-dnszone-add">B.3.1. ipa dnszone-add</a></span></dt></dl></dd><dt><span class="section"><a href="#ipa-command-host">B.4. ipa Host Commands</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-host-add">B.4.1. ipa host-add</a></span></dt></dl></dd><dt><span class="section"><a href="#server-tools">B.5. Server Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-replica-install">B.5.1. ipa-replica-install</a></span></dt><dt><span class="section"><a href="#ipa-replica-prepare">B.5.2. ipa-replica-prepare</a></span></dt><dt><span class="section"><a href="#ipa-server-install">B.5.3. ipa-server-install</a></span></dt></dl></dd><dt><span class="section"><a href="#client-tools">B.6. Client Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="#ipa-client-install">B.6.1. ipa-client-install</a></span></dt></dl></dd></dl></div><div class="para">
+ </div></div></div></div></div></div></div><div xml:lang="en-US" class="appendix" id="tools-reference" lang="en-US"><div class="titlepage"><div><div><h1 class="title">FreeIPA Tools Reference</h1></div></div></div><div class="para">
FreeIPA provides a variety of command-line tools that can be used to manage FreeIPA servers and clients, allowing an extensive range of functionality that can be managed remotely, scheduled, or scripted.
- </div><div class="section" id="special-chars"><div class="titlepage"><div><div><h2 class="title" id="special-chars">B.1. Using Special Characters</h2></div></div></div><div class="para">
+ </div><div class="section" id="special-chars"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="special-chars">B.1. Using Special Characters</h2></div></div></div><div class="para">
The FreeIPA command-line tools are run as any other utilities in a shell. If there are special characters in the command — such as angle brackets (> and <), ampersands (&), asterisks (*), and pipes (|) — the characters must be escaped. Otherwise, the command fails because the shell cannot properly parse the unescaped characters.
- </div></div><div class="section" id="ipa"><div class="titlepage"><div><div><h2 class="title" id="ipa">B.2. ipa</h2></div></div></div><div class="para">
+ </div></div><div class="section" id="ipa"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa">B.2. ipa</h2></div></div></div><div class="para">
The primary FreeIPA command-line tool is the <code class="command">ipa</code> command. This command has several dozen subcommands, grouped by configuration areas, to give specific control over different areas of the FreeIPA domain configuration. These subcommands are really plug-ins, that are implemented and called through the <code class="command">ipa</code> command.
</div><div class="para">
One crucial feature of the <code class="command">ipa</code> command is that it is <span class="emphasis"><em>pluggable</em></span>. Custom behavior can be defined for the FreeIPA domain through custom <code class="command">ipa</code> subcommands.
- </div><div class="section" id="ipa-location"><div class="titlepage"><div><div><h3 class="title" id="ipa-location">B.2.1. Location</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-location"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-location">B.2.1. Location</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -5793,13 +7180,13 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Package
</td><td>
ipa-admintools
- </td></tr></tbody></table></div></div><div class="section" id="ipa-syntax"><div class="titlepage"><div><div><h3 class="title" id="ipa-syntax">B.2.2. Syntax</h3></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-syntax">B.2.2. Syntax</h3></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa</code> [
<em class="replaceable"><code>global_options</code></em>
]
<em class="replaceable"><code>commands</code></em>
[
<em class="replaceable"><code>command_options</code></em>
- ]</p></div></div><div class="section" id="ipa-topics"><div class="titlepage"><div><div><h3 class="title" id="ipa-topics">B.2.3. Help Topics</h3></div></div></div><div class="para">
+ ]</p></div></div><div class="section" id="ipa-topics"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-topics">B.2.3. Help Topics</h3></div></div></div><div class="para">
All of the <code class="command">ipa</code> are loosely organized in groups, based on the configuration area that they relate to. These groups are called <span class="emphasis"><em>topics</em></span>, and the <code class="command">ipa</code> help information can be called for each topic group.
</div><pre class="screen">$ ipa help <em class="replaceable"><code>topicName</code></em></pre><div class="para">
For example, to view the description of how FreeIPA handles automount and a list of all commands for managing automount configuration, view the help topic for <span class="emphasis"><em>automount</em></span>:
@@ -5810,7 +7197,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
</th></tr></thead><tbody><tr><td>
automount
</td><td>
- Adding and managing autmount and NFS configuration.
+ Adding and managing automount and NFS configuration.
</td></tr><tr><td>
cert
</td><td>
@@ -5899,7 +7286,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
user
</td><td>
Creating and managing FreeIPA user accounts.
- </td></tr></tbody></table></div></div><div class="section" id="ipa-global-options"><div class="titlepage"><div><div><h3 class="title" id="ipa-global-options">B.2.4. Global Options</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-global-options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-global-options">B.2.4. Global Options</h3></div></div></div><div class="para">
Global options are available to every subcommand.
</div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Short Option
@@ -5979,7 +7366,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--setattr=<span class="emphasis"><em>attribute=value</em></span>
</td><td>
<span class="emphasis"><em>For add and mod commands.</em></span> Replaces the value of a given attribute with the new value.
- </td></tr></tbody></table></div></div><div class="section" id="ipa-return-codes"><div class="titlepage"><div><div><h3 class="title" id="ipa-return-codes">B.2.5. Return Codes</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-return-codes"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-return-codes">B.2.5. Return Codes</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Return Code
</th><th>
Description
@@ -5995,7 +7382,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
2
</td><td>
A resource or object was not found.
- </td></tr></tbody></table></div></div><div class="section" id="ipa-commands"><div class="titlepage"><div><div><h3 class="title" id="ipa-commands">B.2.6. Commands</h3></div></div></div><div class="table"><h6>Table B.1. dnsrecord* Commands</h6><div class="table-contents"><table summary="dnsrecord* Commands" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-commands"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-commands">B.2.6. Commands</h3></div></div></div><div class="table"><h6>Table B.1. dnsrecord* Commands</h6><div class="table-contents"><table summary="dnsrecord* Commands" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Command
</th><th>
Description
@@ -6051,11 +7438,11 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
dnszone-enable
</td><td>
Enables an existing DNS zone, which restores it to the FreeIPA domain with its previous configuration intact.
- </td></tr></tbody></table></div></div><br class="table-break" /></div></div><div class="section" id="ipa-dns"><div class="titlepage"><div><div><h2 class="title" id="ipa-dns">B.3. ipa DNS Commands</h2></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><div class="section" id="ipa-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-dns">B.3. ipa DNS Commands</h2></div></div></div><div class="para">
There are a collection of commands used to add and manage DNS zones and DNS records.
- </div><div class="section" id="ipa-command-dnszone-add"><div class="titlepage"><div><div><h3 class="title" id="ipa-command-dnszone-add">B.3.1. ipa dnszone-add</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-command-dnszone-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-command-dnszone-add">B.3.1. ipa dnszone-add</h3></div></div></div><div class="para">
Creates a new DNS zone in the FreeIPA server.
- </div><div class="section" id="ipa-dnszone-add-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-dnszone-add-syntax">B.3.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa dnszone-add</code>
+ </div><div class="section" id="ipa-dnszone-add-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-dnszone-add-syntax">B.3.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa dnszone-add</code>
<em class="replaceable"><code>zoneName</code></em>
[
--name-server=<em class="replaceable"><code>name</code></em>
@@ -6085,7 +7472,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--allow-dynupdate
] [
--force
- ]</p></div></div><div class="section" id="ipa-dnszone-add-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-dnszone-add-options">B.3.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-dnszone-add-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-dnszone-add-options">B.3.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Description
@@ -6149,11 +7536,11 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--force
</td><td>
Forces a zone to be created in the FreeIPA configuration even if the name server is not recognized by the DNS.
- </td></tr></tbody></table></div></div></div></div><div class="section" id="ipa-command-host"><div class="titlepage"><div><div><h2 class="title" id="ipa-command-host">B.4. ipa Host Commands</h2></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div></div></div><div class="section" id="ipa-command-host"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-command-host">B.4. ipa Host Commands</h2></div></div></div><div class="para">
This is a collection of subcommands which manage the client, or host, configuration within the FreeIPA domain.
- </div><div class="section" id="ipa-host-add"><div class="titlepage"><div><div><h3 class="title" id="ipa-host-add">B.4.1. ipa host-add</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-host-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-host-add">B.4.1. ipa host-add</h3></div></div></div><div class="para">
Adds a new FreeIPA client machine to the domain manually. This is done as part of the enrollment process.
- </div><div class="section" id="ipa-host-add-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-host-add-syntax">B.4.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa host-add</code>
+ </div><div class="section" id="ipa-host-add-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-host-add-syntax">B.4.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa host-add</code>
<em class="replaceable"><code>hostname</code></em>
[
--desc="<em class="replaceable"><code>description</code></em>"
@@ -6177,7 +7564,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--no-reverse
] [
--ip-address=<em class="replaceable"><code>IPaddress</code></em>
- ]</p></div></div><div class="section" id="ipa-host-add-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-host-add-options">B.4.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-host-add-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-host-add-options">B.4.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Command
</th><th>
Description
@@ -6229,15 +7616,15 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--ip-address=<span class="emphasis"><em>IPaddress</em></span>
</td><td>
Adds the host machine using its IP address, rather than the hostname.
- </td></tr></tbody></table></div></div></div></div><div class="section" id="server-tools"><div class="titlepage"><div><div><h2 class="title" id="server-tools">B.5. Server Scripts</h2></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div></div></div><div class="section" id="server-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="server-tools">B.5. Server Scripts</h2></div></div></div><div class="para">
These are scripts that are used to manage the FreeIPA server configuration. These scripts do not manage FreeIPA domain entries; they manage the configuration of the server itself. This means that these scripts are run as system administrative users rather than domain administrative users.
- </div><div class="section" id="ipa-replica-install"><div class="titlepage"><div><div><h3 class="title" id="ipa-replica-install">B.5.1. ipa-replica-install</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-replica-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-replica-install">B.5.1. ipa-replica-install</h3></div></div></div><div class="para">
Uses a configuration file based on an existing FreeIPA server to create a replica, or copy, of that server. Once the replica is created, it functions as an equal participant and mirror of the original FreeIPA server within the FreeIPA domain. Any changes made on the server or any other replica are automatically propagated over to the other replicas and server.
</div><div class="para">
A replica is created using a file that contains all of the configuration for the FreeIPA server. This initial file is created by running the <code class="command">ipa-replica-prepare</code> on the FreeIPA server. Then the file is copied over to the replica machine, and the <code class="command">ipa-replica-install</code> script is run.
</div><div class="para">
As with the server and client install scripts, any replica arguments which require a parameter value (such as the Directory Manager password) will be prompted for during installation, unless the argument is passed with the command. Parameters with Boolean values (like configuring DNS) will assume that the default value should be used unless the argument is passed with the command.
- </div><div class="section" id="ipa-replica-install-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-install-location">B.5.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-replica-install-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-install-location">B.5.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -6249,11 +7636,11 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Package
</td><td>
ipa-server
- </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-install-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-install-syntax">B.5.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-install</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-install-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-install-syntax">B.5.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-install</code> [
<em class="replaceable"><code>options</code></em>
]
<em class="replaceable"><code>/path/to/replica_file</code></em>
- </p></div></div><div class="section" id="ipa-replica-install-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-install-options">B.5.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ </p></div></div><div class="section" id="ipa-replica-install-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-install-options">B.5.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Short Parameter
</th><th>
Long Parameter
@@ -6334,7 +7721,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Disables checks for the replica's connection to the FreeIPA domain. If this is not used, then the default value is true, which checks that the replica can connect to the Kerberos realm.
</div>
<div class="para">
- This can be useful if the replica is unable to reach the Directory Server or the CA used by the original FreeIPA server, such as the server is offline or the server's firewall is blocking access on the required ports (<a class="xref" href="#prereq-ports">Section 2.1.3.3, “System Ports”</a>).
+ This can be useful if the replica is unable to reach the Directory Server or the CA used by the original FreeIPA server, such as the server is offline or the server's firewall is blocking access on the required ports (<a class="xref" href="#prereq-ports">Section 2.1.3.4, “System Ports”</a>).
</div>
</td></tr><tr><td>
@@ -6343,7 +7730,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--unattended
</td><td>
Disables user prompts so that the replica installation script runs without user interaction.
- </td></tr></tbody></table></div></div></div><div class="section" id="ipa-replica-prepare"><div class="titlepage"><div><div><h3 class="title" id="ipa-replica-prepare">B.5.2. ipa-replica-prepare</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div></div><div class="section" id="ipa-replica-prepare"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-replica-prepare">B.5.2. ipa-replica-prepare</h3></div></div></div><div class="para">
Creates a file that can be used to create a copy, or <span class="emphasis"><em>replica</em></span>, of the FreeIPA server.
</div><div class="para">
Each replica initialization file is unique to the replica machine because the configuration is based, in part, on the IP address and hostname of the replica machine. This host-specific configuration is especially critical for setting up services like Kerberos which use SSL because SSL certificates are created based on the hostname.
@@ -6353,7 +7740,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Once the configuration file is created on the server using the <code class="command">ipa-replica-prepare</code> command, then the replica file is copied over to the replica machine and the replica is configured using the <code class="command">ipa-replica-prepare</code> command.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
If DNS is managed by FreeIPA, then use either the <code class="option">--ip-address</code> option or configure DNS forwarders and allow reverse DNS lookups.
- </div></div></div><div class="section" id="ipa-replica-prepare-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-prepare-location">B.5.2.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div></div></div><div class="section" id="ipa-replica-prepare-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-prepare-location">B.5.2.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -6365,7 +7752,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Package
</td><td>
ipa-server
- </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-prepare-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-prepare-syntax">B.5.2.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-prepare</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-prepare-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-prepare-syntax">B.5.2.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-prepare</code> [
--dirsrv_pkcs12=<em class="replaceable"><code>file</code></em>
] [
--http_pkcs12=<em class="replaceable"><code>file</code></em>
@@ -6377,7 +7764,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--ip-address=<em class="replaceable"><code>ipAddress</code></em>
]
<em class="replaceable"><code>hostname</code></em>
- </p></div></div><div class="section" id="ipa-replica-prepare-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-prepare-options">B.5.2.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </p></div></div><div class="section" id="ipa-replica-prepare-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-prepare-options">B.5.2.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Description
@@ -6401,7 +7788,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--ip-address
</td><td>
Gives the IP address of the replica server. Using this option automatically adds A and PTR records for the replica host to the FreeIPA DNS configuration.
- </td></tr></tbody></table></div></div></div><div class="section" id="ipa-server-install"><div class="titlepage"><div><div><h3 class="title" id="ipa-server-install">B.5.3. ipa-server-install</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div></div><div class="section" id="ipa-server-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-server-install">B.5.3. ipa-server-install</h3></div></div></div><div class="para">
Configures all of the services used by the FreeIPA server for the FreeIPA domain:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Dogtag Certificate System, for issuing server certificates
@@ -6421,7 +7808,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
This script can be run interactively, which prompts for many of the server values, or information can be passed directly to the script so that the server can be configured without human intervention.
</div><div class="para">
The FreeIPA server configuration is very flexible. The setup script allows some customization to services like DNS, NTP, certificate issuance, and access control in FreeIPA so that the server can be suited to the network environment.
- </div><div class="section" id="ipa-server-install-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-server-install-location">B.5.3.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-server-install-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-server-install-location">B.5.3.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -6433,7 +7820,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Package
</td><td>
ipa-server
- </td></tr></tbody></table></div></div><div class="section" id="ipa-server-install-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-server-install-syntax">B.5.3.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-server-install</code>
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-server-install-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-server-install-syntax">B.5.3.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-server-install</code>
-a <em class="replaceable"><code>ipa_admin_password</code></em>
--hostname=<em class="replaceable"><code>hostname</code></em>
@@ -6454,13 +7841,17 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
] [
--subject=<em class="replaceable"><code>subject_DN</code></em>
] [
+ --setup-dns
+ ] [
--forwarder=<em class="replaceable"><code>forwarder</code></em>
] [
--no-forwarders
] [
--no-reverse
] [
- --setup-dns
+ --zone-refresh=<em class="replaceable"><code>seconds</code></em>
+ ] [
+ --zone-notif
] [
--zonemgr=<em class="replaceable"><code>email_address</code></em>
] [
@@ -6487,14 +7878,14 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
--help
] [
--version
- ]</p></div></div><div class="section" id="ipa-server-install-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-server-install-options">B.5.3.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-server-install-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-server-install-options">B.5.3.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col class="col1" width="33%" /><col class="col3" width="33%" /><col class="col2" width="33%" /></colgroup><thead><tr><th>
Argument
</th><th>
Alternate Argument
</th><th>
Description
</th></tr></thead><tbody><tr><td colspan="3">
- <span class="bold bold"><strong>Required Options</strong></span><sup>[<a id="id3279227" href="#ftn.id3279227" class="footnote">a</a>]</sup>
+ <span class="bold bold"><strong>Required Options</strong></span><sup>[<a id="id997901" href="#ftn.id997901" class="footnote">a</a>]</sup>
</td></tr><tr><td>
-a <span class="emphasis"><em>ipa_admin_password</em></span>
</td><td>
@@ -6584,6 +7975,18 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
</td><td>
Tells the installation script to set up a DNS service within the FreeIPA domain. Using an integrated DNS service is optional, so if this option is not passed with the installation script, then no DNS is configured.
</td></tr><tr><td>
+ --zone-refresh=<span class="emphasis"><em>seconds</em></span>
+ </td><td>
+
+ </td><td>
+ Sets whether the FreeIPA server should periodically check to see when new DNS zones are added and update its DNS server accrordingly. The polling interval is set in seconds.
+ </td></tr><tr><td>
+ --zone-notif
+ </td><td>
+
+ </td><td>
+ Opens a persistent search with its Directory Server and captures any new zone changes immediately..
+ </td></tr><tr><td>
--zonemgr=<span class="emphasis"><em>email_address</em></span>
</td><td>
@@ -6675,17 +8078,17 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
</td><td>
Prints the version number of the <code class="command">ipa-server-install</code> command.
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><p><sup>[<a id="ftn.id3279227" href="#id3279227" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><div class="para"><sup>[<a id="ftn.id997901" href="#id997901" class="para">a</a>] </sup>
The installation script will prompt for these options if they are not passed with the script.
- </p></div></td></tr></tbody></table></div></div></div></div><div class="section" id="client-tools"><div class="titlepage"><div><div><h2 class="title" id="client-tools">B.6. Client Scripts</h2></div></div></div><div class="para">
+ </div></div></td></tr></tbody></table></div></div></div></div><div class="section" id="client-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="client-tools">B.6. Client Scripts</h2></div></div></div><div class="para">
These tools are used to manage client machines.
- </div><div class="section" id="ipa-client-install"><div class="titlepage"><div><div><h3 class="title" id="ipa-client-install">B.6.1. ipa-client-install</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-client-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-client-install">B.6.1. ipa-client-install</h3></div></div></div><div class="para">
Configures a client machine. This script uses the local SSSD service to connect to the FreeIPA server during the setup process. It is also possible to connect to the server through PAM/NSS using LDAP.
</div><div class="para">
This script is also used to uninstall clients, which removes them from the FreeIPA domain and removes all FreeIPA-related configuration.
</div><div class="para">
This script is only available for Fedora platforms.
- </div><div class="section" id="ipa-client-install-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-client-install-location">B.6.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-client-install-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-client-install-location">B.6.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -6697,7 +8100,7 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Package
</td><td>
ipa-client
- </td></tr></tbody></table></div></div><div class="section" id="ipa-client-install-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-client-install-syntax">B.6.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-client-install</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-client-install-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-client-install-syntax">B.6.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-client-install</code> [
-d | --debug
] [
--domain=<em class="replaceable"><code>domainName</code></em>
@@ -6726,14 +8129,14 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
] [
-S | --no-sssd
] [
- --server=<em class="replaceable"><code>IPA_server</code></em>
+ --server=<em class="replaceable"><code>IPA_server_fqdn</code></em>
] [
-U | --unattended
] [
--uninstall
] [
-w <em class="replaceable"><code>password</code></em> | --password=<em class="replaceable"><code>password</code></em> | -W
- ]</p></div></div><div class="section" id="ipa-client-install-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-client-install-options">B.6.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-client-install-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-client-install-options">B.6.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Alternate Parameter
@@ -6818,11 +8221,11 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
</td><td>
Tells the client to use <code class="systemitem">nss_ldap</code> for authentication instead of SSSD.
</td></tr><tr><td>
- --server=<em class="replaceable"><code>IPA_server</code></em>
+ --server=<em class="replaceable"><code>IPA_server_fqdn</code></em>
</td><td>
</td><td>
- Gives the name of the FreeIPA server to connect to.
+ Gives the name of the FreeIPA server to connect to. This must be a fully-qualified domain name.
</td></tr><tr><td>
-U
</td><td>
@@ -7183,4 +8586,4 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
Speeds up the display of entries in the Directory Server Console. Virtual list view indexes can be created on any branch point in the directory tree to improve display performance.
</div><p>See Also <a class="glossseealso" href="#browsing-index">browsing index</a>.</p></dd></dl></div><div class="glossdiv"><h3 class="title">X</h3><dl><dt>X.500 standard</dt><dd><div class="para">
The set of ISO/ITU-T documents outlining the recommended information model, object classes and attributes used by directory server implementation.
-</div></dd></dl></div></div><div class="index" id="id3358772"><div class="titlepage"><div><div><h2 class="title">Index</h2></div></div></div><div class="index"><div class="indexdiv"><h3>A</h3><dl><dt>Active Directory</dt><dd><dl><dt>schema differences between FreeIPA, <a class="indexterm" href="#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt></dl></dd><dt>attributes</dt><dd><dl><dt>setting multi-valued, <a class="indexterm" href="#editing-users">Editing Users</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>bind</dt><dd><dl><dt>DNS and LDAP, <a class="indexterm" href="#about-dns">About DNS in FreeIPA</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>client</dt><dd><dl><dt>troubleshooting</dt><dd><dl><dt>installation, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt></dl></dd><dt>uninstalling, <a class="indexterm" href="#u
ninstalling-clients">Uninstalling a FreeIPA Client</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>D</h3><dl><dt>DHCP, <a class="indexterm" href="#adding-host-entry">Adding Host Entries</a></dt><dt>DNS</dt><dd><dl><dt>adding zone records, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>adding zones, <a class="indexterm" href="#Managing_DNS_Zones-Adding_DNS_Zones">Adding DNS Zones</a></dt><dt>bind-dyndb-ldap and Directory Server, <a class="indexterm" href="#about-dns">About DNS in FreeIPA</a></dt><dt>disabling zones, <a class="indexterm" href="#enabling-zones">Enabling and Disabling Zones</a></dt><dt>dynamic updates, <a class="indexterm" href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates">Enabling Dynamic DNS Updates</a></dt><dt>hosts with DHCP, <a class="indexterm" href="#adding-host-entry">Adding Host Entries</a></dt></dl></dd><dt>DNS zone records, <a class="indexterm" href="#Managing_DNS_Zones-Adding
_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>IPv4 example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>IPv6 example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>PTR example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>SRV example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>types of records, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><
/dl></dd></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hosts</dt><dd><dl><dt>creating</dt><dd><dl><dt>with DHCP, <a class="indexterm" href="#adding-host-entry">Adding Host Entries</a></dt></dl></dd><dt>disabling, <a class="indexterm" href="#host-disable">Disabling Host and Service Entries</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>Kerberos, <a class="indexterm" href="#about-kerberos">About Kerberos</a></dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="#caching-tickets">Caching User Kerberos Tickets</a></dt><dt>SSSD password cache, <a class="indexterm" href="#kerberos-pwd-cache">Caching Kerberos Passwords</a></dt><dt>ticket policies, <a class="indexterm" href="#kerb-policies">Setting Kerberos Ticket Policies</a></dt><dd><dl><dt>global, <a class="indexterm" href="#kerb-policies-global">Setting Global Ticket Policies</a></dt><dt>user-level, <a class="indexterm" href="#user-ticket-policies">Setting User-Level Ticket Policies</a
></dt></dl></dd><dt>troubleshooting Windows problems, <a class="indexterm" href="#Configuring_Microsoft_Windows">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>logging in</dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>schema</dt><dd><dl><dt>differences between FreeIPA and Active Directory, <a class="indexterm" href="#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt><dd><dl><dt>cn, <a class="indexterm" href="#Schema_Differences-cn">Values for cn Attributes</a></dt><dt>initials, <a class="indexterm" href="#Schema_Diferences-initials">Constraints on the initials Attribute</a></dt><dt>street and streetAddress, <a class="indexterm" href="#Schema_Differences-street">Values for street and streetAddre
ss</a></dt></dl></dd></dl></dd><dt>services</dt><dd><dl><dt>disabling, <a class="indexterm" href="#host-disable">Disabling Host and Service Entries</a></dt></dl></dd><dt>SSSD</dt><dd><dl><dt>and Kerberos passwords, <a class="indexterm" href="#kerberos-pwd-cache">Caching Kerberos Passwords</a></dt><dd><dl><dt>disabling cache, <a class="indexterm" href="#kerberos-pwd-cache">Caching Kerberos Passwords</a></dt></dl></dd></dl></dd></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>ticket policies, <a class="indexterm" href="#kerb-policies">Setting Kerberos Ticket Policies</a></dt><dt>troubleshooting</dt><dd><dl><dt>client installation, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt><dt>Kerberos on Windows, <a class="indexterm" href="#Configuring_Microsoft_Windows">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt><dt>Kerberos, unknown server error, <a class="indexterm" href="#troubleshooting-client-i
nstall">Troubleshooting Client Installations</a></dt><dt>resolving hostnames on client, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>uninstalling</dt><dd><dl><dt>clients, <a class="indexterm" href="#uninstalling-clients">Uninstalling a FreeIPA Client</a></dt></dl></dd><dt>users</dt><dd><dl><dt>multi-valued attributes, <a class="indexterm" href="#editing-users">Editing Users</a></dt><dt>separate credentials cache, <a class="indexterm" href="#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>Windows</dt><dd><dl><dt>troubleshooting Kerberos problems, <a class="indexterm" href="#Configuring_Microsoft_Windows">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>Z</h3><dl><dt>zone records, <a class="indexterm" href="#Managing_DNS_
Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>IPv4 example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>IPv6 example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>PTR example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>SRV example, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>types, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt>
</dl></dd></dl></div></div></div></div></body></html>
+</div></dd></dl></div></div><div class="index" id="id864961"><div class="titlepage"><div><div><h2 class="title">Index</h2></div></div></div><div class="index"><div class="indexdiv"><h3>A</h3><dl><dt>Active Directory</dt><dd><dl><dt>schema differences between FreeIPA, <a class="indexterm" href="#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt></dl></dd><dt>attributes</dt><dd><dl><dt>setting multi-valued, <a class="indexterm" href="#editing-users-cmd">From the Command Line</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>bind</dt><dd><dl><dt>DNS and LDAP, <a class="indexterm" href="#about-dns">About DNS in FreeIPA</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>client</dt><dd><dl><dt>troubleshooting</dt><dd><dl><dt>installation, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt></dl></dd><dt>uninstalling, <a class="indexter
m" href="#uninstalling-clients">Uninstalling a FreeIPA Client</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>D</h3><dl><dt>DHCP, <a class="indexterm" href="#adding-host-entry-cmd">Adding Host Entries from the Command Line</a></dt><dt>DNS</dt><dd><dl><dt>adding zone records, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dt>adding zones, <a class="indexterm" href="#Managing_DNS_Zones-Adding_DNS_Zones">Adding DNS Zones</a></dt><dt>bind-dyndb-ldap and Directory Server, <a class="indexterm" href="#about-dns">About DNS in FreeIPA</a></dt><dt>disabling zones, <a class="indexterm" href="#enabling-zones">Enabling and Disabling Zones</a></dt><dt>dynamic updates, <a class="indexterm" href="#Adding_DNS_Zones-Using_Dynamic_DNS_Updates">Enabling Dynamic DNS Updates</a></dt><dt>hosts with DHCP, <a class="indexterm" href="#adding-host-entry-cmd">Adding Host Entries from the Command Line</a></dt></dl></dd><dt>DNS zone
records, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv4 example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv6 example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>PTR example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>SRV example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>types of records, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Record
s_to_DNS_Zones">Adding Records to DNS Zones</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hosts</dt><dd><dl><dt>creating</dt><dd><dl><dt>with DHCP, <a class="indexterm" href="#adding-host-entry-cmd">Adding Host Entries from the Command Line</a></dt></dl></dd><dt>disabling, <a class="indexterm" href="#host-disable">Disabling Host and Service Entries</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>Kerberos, <a class="indexterm" href="#about-kerberos">About Kerberos</a></dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="#caching-tickets">Caching User Kerberos Tickets</a></dt><dt>SSSD password cache, <a class="indexterm" href="#kerberos-pwd-cache">Caching Kerberos Passwords</a></dt><dt>ticket policies, <a class="indexterm" href="#kerb-policies">Setting Kerberos Ticket Policies</a></dt><dd><dl><dt>global, <a class="indexterm" href="#kerb-policies-global">Setting Global Ticket Policies</a></dt><dt>user-level, <a class
="indexterm" href="#user-ticket-policies">Setting User-Level Ticket Policies</a></dt></dl></dd><dt>troubleshooting Windows problems, <a class="indexterm" href="#Configuring_Microsoft_Windows">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>logging in</dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>schema</dt><dd><dl><dt>differences between FreeIPA and Active Directory, <a class="indexterm" href="#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt><dd><dl><dt>cn, <a class="indexterm" href="#Schema_Differences-cn">Values for cn Attributes</a></dt><dt>initials, <a class="indexterm" href="#Schema_Diferences-initials">Constraints on the initials Attribute</a></dt><dt>street and streetAddress, <a class=
"indexterm" href="#Schema_Differences-street">Values for street and streetAddress</a></dt></dl></dd></dl></dd><dt>services</dt><dd><dl><dt>disabling, <a class="indexterm" href="#host-disable">Disabling Host and Service Entries</a></dt></dl></dd><dt>SSSD</dt><dd><dl><dt>and Kerberos passwords, <a class="indexterm" href="#kerberos-pwd-cache">Caching Kerberos Passwords</a></dt><dd><dl><dt>disabling cache, <a class="indexterm" href="#kerberos-pwd-cache">Caching Kerberos Passwords</a></dt></dl></dd></dl></dd></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>ticket policies, <a class="indexterm" href="#kerb-policies">Setting Kerberos Ticket Policies</a></dt><dt>troubleshooting</dt><dd><dl><dt>client installation, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt><dt>Kerberos on Windows, <a class="indexterm" href="#Configuring_Microsoft_Windows">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt><dt>Kerbe
ros, unknown server error, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt><dt>resolving hostnames on client, <a class="indexterm" href="#troubleshooting-client-install">Troubleshooting Client Installations</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>uninstalling</dt><dd><dl><dt>clients, <a class="indexterm" href="#uninstalling-clients">Uninstalling a FreeIPA Client</a></dt></dl></dd><dt>users</dt><dd><dl><dt>multi-valued attributes, <a class="indexterm" href="#editing-users-cmd">From the Command Line</a></dt><dt>separate credentials cache, <a class="indexterm" href="#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>Windows</dt><dd><dl><dt>troubleshooting Kerberos problems, <a class="indexterm" href="#Configuring_Microsoft_Windows">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div
class="indexdiv"><h3>Z</h3><dl><dt>zone records, <a class="indexterm" href="#Managing_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv4 example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv6 example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>PTR example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>SRV example, <a class="indexterm" href="#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>types, <a class="indexterm" href="#Man
aging_DNS_Zones-Adding_Records_to_DNS_Zones">Adding Records to DNS Zones</a></dt></dl></dd></dl></div></div></div></div></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html
index 3e41d80..dddae16 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html
@@ -1,14 +1,24 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.8. Enabling Dynamic DNS Updates</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.7. Enabling Dynamic DNS Updates</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="modifying-dns-zones.html" title="10.7. Modifying DNS Zones" /><link rel="next" href="enabling-zones.html" title="10.9. Enabling and Disabling Zones" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="modifying-dns-zones.html"><strong>Prev</strong></a></li><li cla
ss="next"><a accesskey="n" href="enabling-zones.html"><strong>Next</strong></a></li></ul><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates"><div class="titlepage"><div><div><h2 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates">10.8. Enabling Dynamic DNS Updates</h2></div></div></div><a id="id3304406" class="indexterm"></a><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="modifying-dns-zones.html" title="8.6. Modifying DNS Zones" /><link rel="next" href="enabling-zones.html" title="8.8. Enabling and Disabling Zones" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="modifying-dns-zones.html"><strong>Prev</strong></a></li><li class
="next"><a accesskey="n" href="enabling-zones.html"><strong>Next</strong></a></li></ul><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates">8.7. Enabling Dynamic DNS Updates</h2></div></div></div><a id="id689576" class="indexterm"></a><div class="para">
Dynamic DNS updates are not enabled by default for new DNS zones in FreeIPA. If dynamic updates are not allowed, then it may not be possible for the <code class="command">ipa-client-install</code> script to join a client to the domain because it cannot add a DNS record pointing to the new client.
- </div><div class="para">
- To allow dynamic updates to the DNS zones, set the <code class="option">--allow-dynupdate</code> option.
- </div><pre class="screen">$ ipa dnszone-mod server.example.com --allow-dynupdate</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="modifying-dns-zones.html"><strong>Prev</strong>10.7. Modifying DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="enabling-zones.html"><strong>Next</strong>10.9. Enabling and Disabling Zones</a></li></ul></body></html>
+ </div><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">8.7.1. Enabling Dynamic DNS Updates in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll down to the <span class="guilabel"><strong>Dynamic update</strong></span> field, and set the value to TRUE.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-dynamic.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the settings page.
+ </div></li></ol></div></div><div class="section" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd">8.7.2. Enabling Dynamic DNS Updates in the Command Line</h3></div></div></div><div class="para">
+ To allow dynamic updates to the DNS zones, set the <code class="option">--allow-dynupdate</code> option.
+ </div><pre class="screen">$ ipa dnszone-mod server.example.com --allow-dynupdate</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="modifying-dns-zones.html"><strong>Prev</strong>8.6. Modifying DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="enabling-zones.html"><strong>Next</strong>8.8. Enabling and Disabling Zones</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Client_Problems.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Client_Problems.html
index 4a00327..9d74d93 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Client_Problems.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Client_Problems.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.5. Debugging Client Connection Problems</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.5. Debugging Client Connection Problems</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /><link rel="prev" href="manually-unconfig-machines.html" title="14.4. Manually Unconfiguring Client Machines" /><link rel="next" href="certmongerX.html" title="14.6. Working with certmonger" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="manually-unconfig-mac
hines.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="certmongerX.html"><strong>Next</strong></a></li></ul><div class="section" id="Client_Problems"><div class="titlepage"><div><div><h2 class="title" id="Client_Problems">14.5. Debugging Client Connection Problems</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="manually-unconfig-machines.html" title="6.4. Manually Unconfiguring Client Machines" /><link rel="next" href="managing-services.html" title="6.6. Managing Services" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="manually-unconfig-machines.html"><strong>Pr
ev</strong></a></li><li class="next"><a accesskey="n" href="managing-services.html"><strong>Next</strong></a></li></ul><div class="section" id="Client_Problems"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Client_Problems">6.5. Debugging Client Connection Problems</h2></div></div></div><div class="para">
Client connection problems are apparent immediately. This can mean that users cannot log into a machine or attempts to access user and group information fails (for example, <code class="command">getent passwd admin</code>).
</div><div class="para">
Authentication in FreeIPA is managed with the SSSD daemon, which is described in the <em class="citetitle">Red Hat Enterprise Linux Deployment Guide</em>. If there are problems with client authentication, then check the SSSD information.
@@ -23,4 +23,4 @@
Restart the <code class="systemitem">sssd</code> daemon.
</div><pre class="screen">service sssd restart</pre></li><li class="listitem"><div class="para">
Check the <code class="filename">/var/log/sssd/sssd_example.com.log</code> file for the debug messages.
- </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="manually-unconfig-machines.html"><strong>Prev</strong>14.4. Manually Unconfiguring Client Machines</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="certmongerX.html"><strong>Next</strong>14.6. Working with certmonger</a></li></ul></body></html>
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="manually-unconfig-machines.html"><strong>Prev</strong>6.4. Manually Unconfiguring Client Machines</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-services.html"><strong>Next</strong>6.6. Managing Services</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/css/common.css b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/css/common.css
index e0090e2..d7dc3f2 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/css/common.css
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/css/common.css
@@ -1,3 +1,8 @@
+* {
+ widows: 2 !important;
+ orphans: 2 !important;
+}
+
body, h1, h2, h3, h4, h5, h6, pre, li, div {
line-height: 1.29em;
}
@@ -126,6 +131,12 @@ div.longdesc-link {
.toc a, .qandaset a {
font-weight:normal;
+ border:none;
+}
+
+.toc a:hover, .qandaset a:hover
+{
+ border-bottom: 1px dotted;
}
/*headings*/
@@ -134,6 +145,8 @@ h1, h2, h3, h4, h5, h6 {
margin-top: 0em;
margin-bottom: 0em;
background-color: transparent;
+ page-break-inside: avoid;
+ page-break-after: avoid;
}
h1 {
@@ -376,36 +389,27 @@ a.version:focus, a.version:hover {
.revhistory table {
background-color:transparent;
- border-color:#fff;
+ border-color:#fff;
padding:0em;
margin: 0;
border-collapse:collapse;
- border-style:none;
+ border-style:none;
}
.revhistory td {
text-align :left;
padding:0em;
- border: none;
+ border: none;
border-top: 1px solid #fff;
font-weight: bold;
}
-.revhistory .itemizedlist {
- font-weight: normal;
-}
-
-.revhistory ul {
- margin-top: 0;
- margin-left: 1em;
-}
-
.revhistory .simplelist td {
font-weight: normal;
}
.revhistory .simplelist {
- margin-bottom: 0em;
+ margin-bottom: 1.5em;
margin-left: 1em;
}
@@ -659,6 +663,7 @@ img {
.figure img {
display:block;
margin:0;
+ page-break-inside: avoid;
}
.figure .title {
@@ -762,7 +767,9 @@ pre .keycap {
code {
font-family:"liberation mono", "bitstream vera mono", "dejavu mono", monospace;
- white-space: nowrap;
+/* white-space: nowrap;*/
+ white-space: pre-wrap;
+ word-wrap: break-word;
font-weight:bold;
}
@@ -799,6 +806,7 @@ div.warning, div.note, div.important {
background-color: white;
margin-bottom: 1em;
border-bottom: 1px solid #aaaaaa;
+ page-break-inside: avoid;
}
div.warning h2, div.note h2,div.important h2 {
@@ -893,6 +901,10 @@ div.admonition {
}
/*Table*/
+div.table {
+ page-break-inside: avoid;
+}
+
table {
border:1px solid #6c614b;
width:100%;
@@ -991,8 +1003,12 @@ th.dbkey {
span.book {
margin-top:4em;
display:block;
+ font-size:11pt;
}
+span.book a{
+ font-weight:bold;
+}
span.chapter {
display:block;
margin-top:0.5em;
@@ -1117,10 +1133,16 @@ sup {
/**/
div.chapter {
margin-top:3em;
+ page-break-inside: avoid;
+}
+
+div.preface {
+ page-break-inside: avoid;
}
div.section {
margin-top:1em;
+ page-break-inside: auto;
}
div.note .replaceable,
@@ -1403,12 +1425,14 @@ pre {
-moz-border-radius:11px;
-webkit-border-radius:11px;
border-radius: 11px;
+ page-break-inside: avoid;
}
.example {
-moz-border-radius:0px;
-webkit-border-radius:0px;
border-radius: 0px;
+ page-break-inside: avoid;
}
.package, .citetitle {
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/images/watermark-draft.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/images/watermark-draft.png
index e3a9852..0ead5af 100644
Binary files a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/images/watermark-draft.png and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Common_Content/images/watermark-draft.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Authentication-Refreshing_Kerberos_Tickets.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Authentication-Refreshing_Kerberos_Tickets.html
index dfe9e7e..f6b2374 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Authentication-Refreshing_Kerberos_Tickets.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Authentication-Refreshing_Kerberos_Tickets.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.3. Refreshing Kerberos Tickets</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.3. Refreshing Kerberos Tickets</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /><link rel="prev" href="kerb-policies.html" title="6.2. Setting Kerberos Ticket Policies" /><link rel="next" href="kerberos-pwd-cache.html" title="6.4. Caching Kerberos Passwords" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="kerb-policies.html"><strong>Prev</strong></a></li
><li class="next"><a accesskey="n" href="kerberos-pwd-cache.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_Authentication-Refreshing_Kerberos_Tickets"><div class="titlepage"><div><div><h2 class="title" id="Configuring_Authentication-Refreshing_Kerberos_Tickets">6.3. Refreshing Kerberos Tickets</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /><link rel="prev" href="kerb-policies.html" title="12.2. Setting Kerberos Ticket Policies" /><link rel="next" href="kerberos-pwd-cache.html" title="12.4. Caching Kerberos Passwords" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="kerb-policies.html"><strong>Prev</strong></a></
li><li class="next"><a accesskey="n" href="kerberos-pwd-cache.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_Authentication-Refreshing_Kerberos_Tickets"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_Authentication-Refreshing_Kerberos_Tickets">12.3. Refreshing Kerberos Tickets</h2></div></div></div><div class="para">
Kerberos keys are analogous to passwords. Like passwords, security policies may require that Kerberos tickets are manually refreshed after a specified interval.
</div><div class="para">
The version of the key is shown in its <span class="emphasis"><em>key version number</em></span> (KVNO). Refreshing (also called rotating) the principal's key increments the KVNO in the keytab entry. When a key is refreshed, a new entry is added to the keytab with a higher KVNO. The original key remains in the keytab but is no longer used to issue tickets.
@@ -20,7 +20,7 @@
</div><pre class="screen"># ldapsearch -x -b "cn=computers,cn=accounts,dc=example,dc=com" "(&(krblastpwdchange>=20100101000000)(krblastpwdchange<=20101231235959))" dn krbprincipalname
# ldapsearch -x -b "cn=services,cn=accounts,dc=example,dc=com" "(&(krblastpwdchange>=20100101000000)(krblastpwdchange<=20101231235959))" dn krbprincipalname</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Host (machine) principals are stored unter the <code class="command">cn=computers,cn=accounts,dc=example,dc=com</code> subtree.
+ Host (machine) principals are stored under the <code class="command">cn=computers,cn=accounts,dc=example,dc=com</code> subtree.
</div></li><li class="listitem"><div class="para">
Service principals are stored under the <code class="command">cn=services,cn=accounts,dc=example,dc=com</code> subtree.
</div></li><li class="listitem"><div class="para">
@@ -58,4 +58,4 @@ KVNO Timestamp Principal
Tickets issued against the old keytab continue to work, while new tickets are issued using the key with the highest KVNO. This avoids any disruption to system operations.
</div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
Some services, such as NFSv4, only support a limited set of encryption types. Pass the appropriate arguments to the <code class="command">ipa-getkeytab</code> command to configure the keytab properly.
- </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="kerb-policies.html"><strong>Prev</strong>6.2. Setting Kerberos Ticket Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="kerberos-pwd-cache.html"><strong>Next</strong>6.4. Caching Kerberos Passwords</a></li></ul></body></html>
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="kerb-policies.html"><strong>Prev</strong>12.2. Setting Kerberos Ticket Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="kerberos-pwd-cache.html"><strong>Next</strong>12.4. Caching Kerberos Passwords</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Certificates_and_Certificate_Authorities.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Certificates_and_Certificate_Authorities.html
index cf9c3af..ca4a3a8 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Certificates_and_Certificate_Authorities.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Certificates_and_Certificate_Authorities.html
@@ -1,20 +1,20 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.5. Configuring Alternate Certificate Authorities</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.3. Configuring Alternate Certificate Authorities</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="Managing-Unique_UID_and_GID_Attributes.html" title="13.4. Managing Unique UID and GID Number Assignments" /><link rel="next" href="Using_OCSP.html" title="13.6. Configuring OCSP Responders" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing-Unique_U
ID_and_GID_Attributes.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Using_OCSP.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_Certificates_and_Certificate_Authorities"><div class="titlepage"><div><div><h2 class="title" id="Configuring_Certificates_and_Certificate_Authorities">13.5. Configuring Alternate Certificate Authorities</h2></div></div></div><div class="para">
- FreeIPA creates a Dogtag Certificate System certificate authority (CA) during the server installation process. To use an external CA, it is possible to create the required server certificates and then import them into the 389 Directory Server and the HTTP server.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="disabling-anon-binds.html" title="16.2. Disabling Anonymous Binds" /><link rel="next" href="Using_OCSP.html" title="16.4. Configuring OCSP Responders" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="disabling-anon-binds.html"><strong>Prev</strong></a></l
i><li class="next"><a accesskey="n" href="Using_OCSP.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_Certificates_and_Certificate_Authorities"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_Certificates_and_Certificate_Authorities">16.3. Configuring Alternate Certificate Authorities</h2></div></div></div><div class="para">
+ FreeIPA creates a Dogtag Certificate System certificate authority (CA) during the server installation process. To use an external CA, it is possible to create the required server certificates and then import them into the 389 Directory Server and the HTTP server, which require FreeIPA server certificates.
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
Save an ASCII copy of the CA certificate as <code class="filename">/usr/share/ipa/html/ca.crt</code>. This allows users to download the correct certificate when they configure their browsers.
</div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Use the <code class="command">ipa-server-certinstall</code> command to install your own certificate. You can install the certificate for use by 389 Directory Server, <code class="systemitem">HTTP</code> Server, or both.
+ Use the <code class="command">ipa-server-certinstall</code> command to install the certificate.
</div><pre class="screen"># /usr/sbin/ipa-server-certinstall -d /path/to/pkcs12.p12</pre></li><li class="listitem"><div class="para">
- To continue using Firefox's auto-configuration, regenerate the <code class="filename">/usr/share/ipa/html/configure.jar</code> file.
+ To keep using browser autoconfiguration in Firefox, regenerate the <code class="filename">/usr/share/ipa/html/configure.jar</code> file.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create a directory, and then create the new security databases in that directory.
<pre class="screen"># mkdir /tmp/signdb
@@ -26,12 +26,12 @@
<pre class="screen"># pk12util -i <em class="replaceable"><code>/path/to/</code></em>pkcs12.p12 -d /tmp/signdb</pre>
</div></li><li class="listitem"><div class="para">
- Make a temporary signing directory, and copy the FreeIPA javascript file to that directory.
+ Make a temporary signing directory, and copy the FreeIPA JavaScript file to that directory.
<pre class="screen"># mkdir /tmp/sign
# cp /usr/share/ipa/html/preferences.html /tmp/sign</pre>
</div></li><li class="listitem"><div class="para">
- Use the object signing certificate to sign the javascript file and to regenerate the <code class="filename">configure.jar</code> file.
+ Use the object signing certificate to sign the JavaScript file and to regenerate the <code class="filename">configure.jar</code> file.
<pre class="screen"># signtool -d /tmp/signdb -k Signing_cert_nickname -Z /usr/share/ipa/html/configure.jar -e .html</pre>
- </div></li></ol></div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing-Unique_UID_and_GID_Attributes.html"><strong>Prev</strong>13.4. Managing Unique UID and GID Number Assignme...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Using_OCSP.html"><strong>Next</strong>13.6. Configuring OCSP Responders</a></li></ul></body></html>
+ </div></li></ol></div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="disabling-anon-binds.html"><strong>Prev</strong>16.2. Disabling Anonymous Binds</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Using_OCSP.html"><strong>Next</strong>16.4. Configuring OCSP Responders</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_IPA_Users-Specifying_Default_User_Settings.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_IPA_Users-Specifying_Default_User_Settings.html
index fd8597c..cb2bb40 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_IPA_Users-Specifying_Default_User_Settings.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_IPA_Users-Specifying_Default_User_Settings.html
@@ -1,19 +1,23 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.3. Specifying Default User Settings</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.7. Specifying Default User and Group Settings</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="managing-users.html" title="5.2. Managing User Accounts" /><link rel="next" href="changing-pwds.html" title="5.4. Changing Passwords" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-users.html"><strong>Prev</strong></a></li><li class="next"><a a
ccesskey="n" href="changing-pwds.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_IPA_Users-Specifying_Default_User_Settings"><div class="titlepage"><div><div><h2 class="title" id="Configuring_IPA_Users-Specifying_Default_User_Settings">5.3. Specifying Default User Settings</h2></div></div></div><div class="para">
- FreeIPA uses default values for FreeIPA user accounts. These defaults can define actual values for user account attributes (such as the home directory location) or it can define the format of attribute values, such as the username length.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="searching.html" title="5.6. Searching for Users and Groups" /><link rel="next" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="searching.html"><strong>Prev</strong></a></li><li
class="next"><a accesskey="n" href="hosts.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_IPA_Users-Specifying_Default_User_Settings"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_IPA_Users-Specifying_Default_User_Settings">5.7. Specifying Default User and Group Settings</h2></div></div></div><div class="para">
+ FreeIPA uses a template when it creates new entries.
+ </div><div class="para">
+ For users, the template is very specific. FreeIPA uses default values for several core attributes for FreeIPA user accounts. These defaults can define actual values for user account attributes (such as the home directory location) or it can define the format of attribute values, such as the username length. These settings also define the object classes assigned to users.
+ </div><div class="para">
+ For groups, the template only defines the assigned object classes.
</div><div class="para">
These default definitions are all contained in a single configuration entry for the FreeIPA server, <code class="command">cn=ipaconfig,cn=etc,dc=example,dc=com</code>.
</div><div class="para">
- The configuration can be changed using the <code class="command">ipa config-mod</code> command, which is covered in .
- </div><div class="table" id="tab.user-config-defaults"><h6>Table 5.3. Default User Parameters</h6><div class="table-contents"><table summary="Default User Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ The configuration can be changed using the <code class="command">ipa config-mod</code> command.
+ </div><div class="table" id="tab.user-config-defaults"><h6>Table 5.5. Default User Parameters</h6><div class="table-contents"><table summary="Default User Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Field
</th><th>
Command-Line Option
@@ -103,9 +107,15 @@
</td><td>
Sets the format of passwords that are allowed for users.
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="config-show"><div class="titlepage"><div><div><h3 class="title" id="config-show">5.3.1. Showing the Settings Configuration</h3></div></div></div><div class="para">
- The <code class="command">config-show</code> command shows the current configuration which applies to all new user accounts. By default, only the most common attributes are displayed; use the <code class="option">--all</code> option to show the complete configuration.
- </div><pre class="screen"># ipa config-show --all
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="config-show"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="config-show">5.7.1. Viewing the Settings Configuration</h3></div></div></div><div class="section" id="show-config-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="show-config-ui">5.7.1.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ The complete configuration entry is shown in three sections, one for all search limits, one for user templates, and one for group templates.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config.png" width="444" /></div></div></li></ol></div></div><div class="section" id="show-config-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="show-config-cmd">5.7.1.2. From the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">config-show</code> command shows the current configuration which applies to all new user accounts. By default, only the most common attributes are displayed; use the <code class="option">--all</code> option to show the complete configuration.
+ </div><pre class="screen"># ipa config-show --all
dn: cn=ipaconfig,cn=etc,dc=example,dc=com
Max. username length: 32
@@ -125,23 +135,81 @@
Password Expiration Notification (days): 4
Password plugin features: AllowNThash
cn: ipaConfig
- objectclass: nsContainer, top, ipaGuiConfig, ipaConfigObject</pre></div><div class="section" id="adding-custom-objclasses"><div class="titlepage"><div><div><h3 class="title" id="adding-custom-objclasses">5.3.2. Applying Custom Object Classes to New User Entries</h3></div></div></div><div class="para">
+ objectclass: nsContainer, top, ipaGuiConfig, ipaConfigObject</pre></div></div><div class="section" id="adding-custom-objclasses"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-custom-objclasses">5.7.2. Applying Custom Object Classes to New User Entries</h3></div></div></div><div class="para">
User and group accounts are created with a pre-defined set of LDAP object classes applied to the entry. Any attributes which belong to the object class can be added to the user entry.
</div><div class="para">
While the standard and FreeIPA-specific LDAP object classes will cover most deployment scenarios, administrators may have custom object classes with custom attributes which should be applied to user entries.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
- </div></li><li class="listitem"><div class="para">
- Add the new object class to the list of object classes added to entries. The option for user object classes is <code class="option">--userobjectclasses</code>, and the option for group object classes is <code class="option">--groupobjectclasses</code>.
- </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ </div><div class="section" id="adding-custom-objclasses-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-ui">5.7.2.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>User Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config-users.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ At the bottom of the users area, click the <span class="guilabel"><strong>Add</strong></span> link to add a new field for another object class.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-objectclass-change.png" width="444" /></div></div><div class="para">
Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
- </div></div></div><div class="para">
- For example:
- </div><pre class="screen">$ ipa config-mod <strong class="userinput"><code>--userobjectclasses=</code></strong>top,person,organizationalperson,inetorgperson,inetuser,posixaccount, krbprincipalaux,krbticketpolicyaux,ipaobject,<strong class="userinput"><code>employeeinfo</code></strong></pre></li></ol></div></div><div class="section" id="search-limits"><div class="titlepage"><div><div><h3 class="title" id="search-limits">5.3.3. Setting Default Search Limits</h3></div></div></div><div class="para">
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="adding-custom-objclasses-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-cmd">5.7.2.2. From the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Add the new object class to the list of object classes added to entries. The option for user object classes is <code class="option">--userobjectclasses</code>.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></div></div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa config-mod <strong class="userinput"><code>--userobjectclasses=</code></strong>top,person,organizationalperson,inetorgperson,inetuser,posixaccount, krbprincipalaux,krbticketpolicyaux,ipaobject,<strong class="userinput"><code>employeeinfo</code></strong></pre></li></ol></div></div></div><div class="section" id="adding-custom-objclasses-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-custom-objclasses-groups">5.7.3. Applying Custom Object Classes to New Group Entries</h3></div></div></div><div class="para">
+ As with user entries, administrators may have custom object classes with custom attributes which should be applied to group entries. These can be added automatically by adding the object classes to the FreeIPA server configuration.
+ </div><div class="section" id="adding-custom-objclasses-group-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-group-ui">5.7.3.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Group Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-config.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link to add a new field for another object class.
+ </div><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="adding-custom-objclasses-group-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-custom-objclasses-group-cmd">5.7.3.2. From the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add all of the custom schema elements to the 389 Directory Server instance used by FreeIPA. Adding schema elements is described in <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Extending_the_Directory_Schema.html">the schema chapter of the Directory Server Administrator's Guide</a>.
+ </div></li><li class="listitem"><div class="para">
+ Add the new object class to the list of object classes added to entries. The option for group object classes is <code class="option">--groupobjectclasses</code>.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Always include the <span class="emphasis"><em>existing</em></span> default object classes when the configuration is updated. Otherwise, the current settings will be overwritten, which could cause serious performance problems.
+ </div></div></div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa config-mod <strong class="userinput"><code>--groupobjectclasses=</code></strong>top,groupofnames,nestedgroup,ipausergroup,ipaobject,<strong class="userinput"><code>employeegroup</code></strong></pre></li></ol></div></div></div><div class="section" id="search-limits"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="search-limits">5.7.4. Setting Default Search Limits</h3></div></div></div><div class="para">
<span class="emphasis"><em>Search limits</em></span> set caps on the number of records returned or the time spent searching when querying the database for user or group entries. There are two types of search limits: time limits and size (number) limits.
</div><div class="para">
- With the default settings, users are limited to two second searches and no more than 100 records returned per search. Those limits can be changed using the <code class="command">config-mod</code> command.
- </div><pre class="screen">$ ipa config-mod --searchtimelimit=5 --searchrecordslimit=500
+ With the default settings, users are limited to two second searches and no more than 100 records returned per search.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Setting search size or time limits too high can negatively affect FreeIPA server performance.
+ </div></div></div><div class="section" id="search-limits-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-limits-ui">5.7.4.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Search Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Change the search limit settings.
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Search size limit</em></span>, the maximum number of records to return in a search.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Search time limit</em></span>, the maximum amount of time, in seconds, to spend on a search before the server returns results.
+ </div></li></ul></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Setting the time limit or size limit value to zero (0) or -1 means that there are no limits on searches.
+ </div></div></div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="search-limits-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-limits-cmd">5.7.4.2. With the Command Line</h4></div></div></div><div class="para">
+ The search limits can be changed using the <code class="command">config-mod</code> command.
+ </div><pre class="screen">$ ipa config-mod --searchtimelimit=5 --searchrecordslimit=500
Max. username length: 32
Home directory base: /home
@@ -155,15 +223,41 @@
Enable migration mode: FALSE
Certificate Subject base: O=EXAMPLE.COM
Password Expiration Notification (days): 4</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Setting the time limit or size limit value to zero (0) or -1 means that there are no limits on searches.
- </div></div></div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- Setting search size or time limits too high can negatively affect FreeIPA server performance.
- </div></div></div></div><div class="section" id="search-fields"><div class="titlepage"><div><div><h3 class="title" id="search-fields">5.3.4. Setting Search Attributes</h3></div></div></div><div class="para">
+ Setting the time limit or size limit value to zero (0) or -1 means that there are no limits on searches.
+ </div></div></div></div></div><div class="section" id="search-fields"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="search-fields">5.7.5. Setting User Search Attributes</h3></div></div></div><div class="para">
+ A search for users or groups does not automatically search every possible attribute for that attribute. Rather, it searches a specific subset of attributes, and that list is configurable.
+ </div><div class="para">
+ When adding attributes to the user or group search fields, make sure that there is a corresponding index within the LDAP directory for that attribute. Searches are performed based on indexes. Most standard LDAP attributes have indexes, but any custom attributes must have indexes created for them. Creating indexes is described in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Indexes-Creating_Indexes.html">indexes chapter in the Directory Server Administrator's Guide</a>.
+ </div><div class="section" id="search-fields-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-ui">5.7.5.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>User Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/server-config-users.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Add any additional search attributes, in a comma-separated list, in the <span class="guilabel"><strong>User search fields</strong></span> field.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="search-fields-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-cmd">5.7.5.2. From the Web UI</h4></div></div></div><div class="para">
+ To change the search attributes, use the <code class="option">--usersearch</code> option to set the attributes for user searches.
+ </div><pre class="screen">$ ipa config-mod --usersearch=uid,givenname,sn,telephonenumber,ou,title</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Always give the complete list of search attributes. Whatever values are passed with the configuration argument overwrite the previous settings.
+ </div></div></div></div></div><div class="section" id="search-fields-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="search-fields-groups">5.7.6. Setting Group Search Attributes</h3></div></div></div><div class="para">
A search for users or groups does not automatically search every possible attribute for that attribute. Rather, it searches a specific subset of attributes, and that list is configurable.
</div><div class="para">
- To change the search attributes, use the <code class="option">--usersearch</code> and <code class="option">--groupsearch</code> options to set the attributes for user and group searches, respectively.
- </div><pre class="screen">$ ipa config-mod --usersearch=uid,givenname,sn,telephonenumber,ou,title --groupsearch=cn,description</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Always give the complete list of search attributes. Whatever values are passed with the configuration argument overwrite the previous settings.
- </div></div></div><div class="para">
When adding attributes to the user or group search fields, make sure that there is a corresponding index within the LDAP directory for that attribute. Searches are performed based on indexes. Most standard LDAP attributes have indexes, but any custom attributes must have indexes created for them. Creating indexes is described in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Indexes-Creating_Indexes.html">indexes chapter in the Directory Server Administrator's Guide</a>.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-users.html"><strong>Prev</strong>5.2. Managing User Accounts</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="changing-pwds.html"><strong>Next</strong>5.4. Changing Passwords</a></li></ul></body></html>
+ </div><div class="section" id="search-fields-groups-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-groups-ui">5.7.6.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Configuration</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Group Options</strong></span> area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-config.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Add any additional search attributes, in a comma-separated list, in the <span class="guilabel"><strong>Group search fields</strong></span> field.
+ </div></li><li class="listitem"><div class="para">
+ When the changes are complete, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the <span class="guilabel"><strong>Configuration</strong></span> page.
+ </div></li></ol></div></div><div class="section" id="search-fields-groups-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="search-fields-groups-cmd">5.7.6.2. From the Command Line</h4></div></div></div><div class="para">
+ To change the search attributes, use the <code class="option">--groupsearch</code> options to set the attributes for group searches.
+ </div><pre class="screen">$ ipa config-mod --groupsearch=cn,description</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Always give the complete list of search attributes. Whatever values are passed with the configuration argument overwrite the previous settings.
+ </div></div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="searching.html"><strong>Prev</strong>5.6. Searching for Users and Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="hosts.html"><strong>Next</strong>Chapter 6. Identity: Managing Hosts and Services</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Microsoft_Windows.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Microsoft_Windows.html
index 30243ba..65484ff 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Microsoft_Windows.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Microsoft_Windows.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 8. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="managing-sync-agmt.html" title="8.4. Managing Synchronization Agreements" /><link rel="next" href="nis.html" title="Chapter 9. Identity: Integrating with NIS Domains and Netgroups" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="
managing-sync-agmt.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="nis.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_Microsoft_Windows"><div class="titlepage"><div><div><h2 class="title" id="Configuring_Microsoft_Windows">8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</h2></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 7. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="managing-sync-agmt.html" title="7.4. Managing Synchronization Agreements" /><link rel="next" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-sync-ag
mt.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Working_with_DNS.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_Microsoft_Windows"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_Microsoft_Windows">7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</h2></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
FreeIPA does <span class="emphasis"><em>not</em></span> support Microsoft Windows client authentication.
</div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Download the MIT Kerberos 3.x package for Windows.
@@ -29,8 +29,8 @@
Edit the hosts file and add the FreeIPA server. For example:
</div><pre class="programlisting">1.2.3.4 ipaserver.example.com ipaserver</pre><div class="para">
Depending on the version of Windows, the HOSTS file could be located in different directories.
- </div></li></ol></div><a id="id3087454" class="indexterm"></a><a id="id3087466" class="indexterm"></a><a id="id3087478" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- One potential proble is that a ticket is not generated by Kerberos on Windows. Windows can use multiple ticket caches with MIT Kerberos. This can create odd scenarios, where it is possible to authenticate against FreeIPA's domain in the command line, but not to open the web UI.
+ </div></li></ol></div><a id="id823887" class="indexterm"></a><a id="id823899" class="indexterm"></a><a id="id823911" class="indexterm"></a><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ One potential problem is that a ticket is not generated by Kerberos on Windows. Windows can use multiple ticket caches with MIT Kerberos. This can create odd scenarios, where it is possible to authenticate against FreeIPA's domain in the command line, but not to open the web UI.
</div><div class="para">
MIT Kerberos for Windows provides some debugging tools which can be used to troubleshoot Windows Kerberos problems, available at <a href="http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2">http://web.mit.edu/Kerberos/dist/index.html#kfw-3.2</a>.
- </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-sync-agmt.html"><strong>Prev</strong>8.4. Managing Synchronization Agreements</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="nis.html"><strong>Next</strong>Chapter 9. Identity: Integrating with NIS Domains...</a></li></ul></body></html>
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-sync-agmt.html"><strong>Prev</strong>7.4. Managing Synchronization Agreements</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Working_with_DNS.html"><strong>Next</strong>Chapter 8. Identity: Managing DNS</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_AIX.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_AIX.html
index 6e349fc..8ff9d85 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_AIX.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_AIX.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.5. Configuring an AIX System as a FreeIPA Client</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.5. Configuring an AIX System as a FreeIPA Client</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_HP_UX.html" title="3.4. Configuring an HP-UX System as a FreeIPA" /><link rel="next" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html" title="3.6. Configuring a Macintosh OS X System as a FreeIPA Client" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><
li class="previous"><a accesskey="p" href="Configuring_an_IPA_Client_on_HP_UX.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_AIX"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_AIX">3.5. Configuring an AIX System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Prerequisites"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</h3></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_HP_UX.html" title="3.4. Configuring an HP-UX System as a FreeIPA" /><link rel="next" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html" title="3.6. Configuring a Macintosh OS X System as a FreeIPA Client" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav">
<li class="previous"><a accesskey="p" href="Configuring_an_IPA_Client_on_HP_UX.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_AIX"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_AIX">3.5. Configuring an AIX System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Prerequisites"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</h3></div></div></div><div class="para">
Make sure that all of these packages are installed on the AIX machine before beginning the client configuration:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
v5.3 OS
@@ -31,7 +31,7 @@
modcrypt.base (for gssd)
</div></li></ul></div><div class="para">
Configure and enable NTP and make sure that time is synchronized between the client and the FreeIPA server.
- </div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</h3></div></div></div><div class="para">
Setting up an AIX client requires setting up the client to work in the FreeIPA Kerberos domain and, optionally, to enable SSH authentication to the AIX client using FreeIPA credentials.
</div><div class="para">
Kerberos configuration includes specifying the realm and domain details, and default ticket attributes. Forwardable tickets are configured by default, which facilitates connection to the administration interface from any operating system, and also provides for auditing of administration operations. For example:
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_HP_UX.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_HP_UX.html
index 4d956e7..9f0f6ce 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_HP_UX.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_HP_UX.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.4. Configuring an HP-UX System as a FreeIPA</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.4. Configuring an HP-UX System as a FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_Solaris.html" title="3.3. Configuring a Solaris System as a FreeIPA Client" /><link rel="next" href="Configuring_an_IPA_Client_on_AIX.html" title="3.5. Configuring an AIX System as a FreeIPA Client" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="p
revious"><a accesskey="p" href="Configuring_an_IPA_Client_on_Solaris.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_AIX.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_HP_UX"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_HP_UX">3.4. Configuring an HP-UX System as a FreeIPA</h2></div></div></div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_Solaris.html" title="3.3. Configuring a Solaris System as a FreeIPA Client" /><link rel="next" href="Configuring_an_IPA_Client_on_AIX.html" title="3.5. Configuring an AIX System as a FreeIPA Client" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="
previous"><a accesskey="p" href="Configuring_an_IPA_Client_on_Solaris.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_AIX.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_HP_UX"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_HP_UX">3.4. Configuring an HP-UX System as a FreeIPA</h2></div></div></div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
The FreeIPA client installation process requires that a FreeIPA server already exist.
- </div></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</h3></div></div></div><div class="para">
Configure and enable NTP and make sure that time is synchronized between the client and the FreeIPA server.
- </div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Install the <code class="filename">ldapux</code> client.
</div><pre class="programlisting"> <span class="perl_Comment"># swinstall -s J4269AA_B.04.15.01_HP-UX_B.11.23_IA_PA.depot</span></pre></li><li class="listitem"><div class="para">
Change to the configuration directory, and run the setup script.
@@ -69,7 +69,7 @@ Do you want to create custom search descriptors? [ No ]
enable=yes
</pre>
- </div></li></ol></div></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</h3></div></div></div><div class="para">
Edit the <code class="filename">/etc/krb5.conf</code> file to reflect the Kerberos domain used by the FreeIPA server. Setting up the Kerberos configuration includes specifying the realm and domain details, and default ticket attributes. Forwardable tickets are configured by default, which facilitates connection to the administration interface from any operating system, and also provides for auditing of administration operations. For example:
</div><pre class="programlisting">[libdefaults]
default_realm = EXAMPLE.COM
@@ -93,9 +93,9 @@ example.com = EXAMPLE.COM
kinit = {
forwardable = true
}
-</pre></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_PAM"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</h3></div></div></div><div class="para">
+</pre></div><div class="section" id="Configuring_Kerberos_and_PAM-Configuring_PAM"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</h3></div></div></div><div class="para">
The PAM configuration differs slightly between different versions of HP-UX.
- </div><div class="section" id="Configuring_PAM-HP_UX_11i_v2"><div class="titlepage"><div><div><h4 class="title" id="Configuring_PAM-HP_UX_11i_v2">3.4.4.1. HP-UX 11i v2</h4></div></div></div><div class="para">
+ </div><div class="section" id="Configuring_PAM-HP_UX_11i_v2"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_PAM-HP_UX_11i_v2">3.4.4.1. HP-UX 11i v2</h4></div></div></div><div class="para">
Edit the <code class="filename">/etc/pam.conf</code> file so that all of the required modules are loaded for authentication. For example:
</div><pre class="programlisting">#
# PAM configuration
@@ -181,7 +181,7 @@ dtaction password required libpam_hpsec.so.1
dtaction password sufficient libpam_krb5.so.1
dtaction password required libpam_unix.so.1
OTHER password required libpam_unix.so.1
-</pre></div><div class="section" id="Configuring_PAM-HP_UX_11i_v1"><div class="titlepage"><div><div><h4 class="title" id="Configuring_PAM-HP_UX_11i_v1">3.4.4.2. HP-UX 11i v1</h4></div></div></div><div class="para">
+</pre></div><div class="section" id="Configuring_PAM-HP_UX_11i_v1"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_PAM-HP_UX_11i_v1">3.4.4.2. HP-UX 11i v1</h4></div></div></div><div class="para">
Edit the <code class="filename">/etc/pam.conf</code> file to reflect the following example:
</div><pre class="programlisting">#
# PAM configuration
@@ -242,7 +242,7 @@ dtlogin password required /usr/lib/security/libpam_unix.1
dtaction password sufficient /usr/lib/security/libpam_krb5.1
dtaction password required /usr/lib/security/libpam_unix.1
OTHER password required /usr/lib/security/libpam_unix.1
-</pre></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+</pre></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Ensure that you have version A.05.10.007 or later of <code class="command">ssh</code> installed. A current package can be downloaded from the HP website at <a href="http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA">http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA</a>.
</div></li><li class="listitem"><div class="para">
Edit the <code class="filename">/etc/opt/ssh/ssh_config</code> file:
@@ -268,8 +268,8 @@ OTHER password required /usr/lib/security/libpam_unix.1
Create the host keytab file.
</div><pre class="programlisting"> <span class="perl_Comment"># ipa-getkeytab -s ipaserver.example.com -p host/hpuxipaclient.example.com -k /tmp/krb5.keytab -e des-cbc-crc</span></pre></li><li class="listitem"><div class="para">
Copy this keytab to the HP-UX machine, and save it as <code class="filename">/etc/krb5/krb5.keytab</code>.
- </div><pre class="programlisting"> <span class="perl_Comment"># scp /tmp/krb5.keytab root at hpuxipaclient.example.com:/etc/krb5/krb5.keytab</span></pre></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</h3></div></div></div><div class="para">
- HP-UX systems provide the <code class="systemitem">pam_authz</code> PAM module, which can be used to control login access to the system based on a user's group membership. For details on how to configure access control with this module, see the HP documenttion at <a href="http://docs.hp.com/en/B3921-60631/pam_authz.5.html">http://docs.hp.com/en/B3921-60631/pam_authz.5.html</a>.
+ </div><pre class="programlisting"> <span class="perl_Comment"># scp /tmp/krb5.keytab root at hpuxipaclient.example.com:/etc/krb5/krb5.keytab</span></pre></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</h3></div></div></div><div class="para">
+ HP-UX systems provide the <code class="systemitem">pam_authz</code> PAM module, which can be used to control login access to the system based on a user's group membership. For details on how to configure access control with this module, see the HP documentation at <a href="http://docs.hp.com/en/B3921-60631/pam_authz.5.html">http://docs.hp.com/en/B3921-60631/pam_authz.5.html</a>.
</div><div class="example" id="ex.hp-pam-authz-mod"><h6>Example 3.1. pam_authz.policy File: Allow User Access, Deny Admin Access</h6><div class="example-contents"><div class="para">
This configuration in <code class="filename">/etc/opt/ldapux/pam_authz.policy</code> prevents the admin user from logging in while still allowing regular users to log in.
</div><pre class="programlisting">
@@ -306,7 +306,7 @@ OTHER password required /usr/lib/security/libpam_unix.1
deny:unix_group:admins
allow:unix_local_user
-</pre></div></div><br class="example-break" /></div><div class="section" id="hp-test"><div class="titlepage"><div><div><h3 class="title" id="hp-test">3.4.7. Testing the Configuration</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+</pre></div></div><br class="example-break" /></div><div class="section" id="hp-test"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hp-test">3.4.7. Testing the Configuration</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
By default, the admin user is given <code class="command">/bin/bash</code> as the shell to use and <code class="filename">/home/admin</code> as the home directory. It may be necessary to install bash to be able to log in.
</div></div></div><div class="para">
There are three quick ways to check the Kerberos and PAM configuration for the HP client:
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Macintosh_OS_X.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Macintosh_OS_X.html
index 69ca529..fe91bbc 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Macintosh_OS_X.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Macintosh_OS_X.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.6. Configuring a Macintosh OS X System as a FreeIPA Client</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.6. Configuring a Macintosh OS X System as a FreeIPA Client</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_AIX.html" title="3.5. Configuring an AIX System as a FreeIPA Client" /><link rel="next" href="troubleshooting-client-install.html" title="3.7. Troubleshooting Client Installations" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a access
key="p" href="Configuring_an_IPA_Client_on_AIX.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="troubleshooting-client-install.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_AIX.html" title="3.5. Configuring an AIX System as a FreeIPA Client" /><link rel="next" href="troubleshooting-client-install.html" title="3.7. Troubleshooting Client Installations" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a acces
skey="p" href="Configuring_an_IPA_Client_on_AIX.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="troubleshooting-client-install.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</h2></div></div></div><div class="para">
These instructions are specific to Mac OS X 10.4 (Tiger) because this version includes the required Kerberos tools by default.
- </div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</h3></div></div></div><div class="para">
+ </div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</h3></div></div></div><div class="para">
Configuring the Macintosh to use Kerberos for authentication with FreeIPA is a two-step process. First, Kerberos needs to be correctly installed and configured. Then, Kerberos authentication needs to be enabled.
- </div><div class="section" id="Configuring_Kerberos_Authentication-Configuring_Kerberos"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Kerberos_Authentication-Configuring_Kerberos">3.6.1.1. Configuring Kerberos</h4></div></div></div><div class="para">
+ </div><div class="section" id="Configuring_Kerberos_Authentication-Configuring_Kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Kerberos_Authentication-Configuring_Kerberos">3.6.1.1. Configuring Kerberos</h4></div></div></div><div class="para">
Setting up the Kerberos configuration includes specifying the realm and domain details, and default ticket attributes. Forwardable tickets are configured by default, which facilitates connection to the administration interface from any operating system, and also provides for auditing of administration operations. For example, this is the Kerberos configuration for Fedora systems:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Make sure that the Kerberos version is 4.2 or higher. The Kerberos directory is <code class="filename">/System/Library/CFMSupport/Kerberos</code>. If that directory does not exist or is the wrong version, install the Kerberos Extras support.
@@ -50,7 +50,7 @@ EXAMPLE.COM = {
default_domain = example.com
kdc = ipaserver.example.com:88
}
-</pre></li></ol></div></div><div class="section" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication">3.6.1.2. Enabling Kerberos Authentication</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+</pre></li></ol></div></div><div class="section" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Kerberos_Authentication-Enabling_Kerberos_Authentication">3.6.1.2. Enabling Kerberos Authentication</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as the admin user and launch a terminal.
</div></li><li class="listitem"><div class="para">
Change to the <code class="filename">/private/etc</code> directory and make a backup of the existing authorization file.
@@ -72,7 +72,7 @@ EXAMPLE.COM = {
GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
Restart the machine to enable Kerberos authentication.
- </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</h3></div></div></div><div class="section" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration"><div class="titlepage"><div><div><h4 class="title" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration">3.6.2.1. Creating the LDAP Configuration</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</h3></div></div></div><div class="section" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_LDAP_Authorization-Creating_the_LDAP_Configuration">3.6.2.1. Creating the LDAP Configuration</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Launch the Directory Access utility.
</div></li><li class="listitem"><div class="para">
In the <span class="guilabel"><strong>Services</strong></span> tab, clear all check boxes except LDAPv3 and Bonjour.
@@ -90,7 +90,7 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
Enter the configuration name, such as <code class="command">FreeIPA LDAP</code>.
</div></li><li class="listitem"><div class="para">
Select the <span class="guilabel"><strong>Enable</strong></span> checkbox, and clear the <span class="guilabel"><strong>SSL</strong></span> checkbox.
- </div></li></ol></div></div><div class="section" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options"><div class="titlepage"><div><div><h4 class="title" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options">3.6.2.2. Setting up the LDAP Service Configuration Options</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options">3.6.2.2. Setting up the LDAP Service Configuration Options</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Select the newly-created LDAP configuration, and click <span class="guibutton"><strong>Edit</strong></span>.
</div></li><li class="listitem"><div class="para">
In the <span class="guilabel"><strong>Connection</strong></span> tab, specify the connection settings:
@@ -160,7 +160,7 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
UniqueID and uidNumber
</div></li></ul></div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>OK</strong></span> to finish setting up the LDAP service configuration options.
- </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
In the <span class="guilabel"><strong>Authentication</strong></span> tab, change the <span class="guilabel"><strong>Search</strong></span> value to <span class="guilabel"><strong>Custom path</strong></span>.
</div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>Add</strong></span>.
@@ -168,9 +168,9 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
Select the configuration created in <a class="xref" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_LDAP_Authorization-Setting_up_the_LDAP_Service_Configuration_Options">Section 3.6.2.2, “Setting up the LDAP Service Configuration Options”</a>, and click <span class="guibutton"><strong>Add</strong></span>.
</div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>Apply</strong></span> to update the LDAP configuration.
- </div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</h3></div></div></div><div class="para">
Open the Date and Time utility and point it to the FreeIPA server URL to set the date and time automatically.
- </div></div><div class="section" id="testing-config-on-mac"><div class="titlepage"><div><div><h3 class="title" id="testing-config-on-mac">3.6.5. Testing the Configuration</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="testing-config-on-mac"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="testing-config-on-mac">3.6.5. Testing the Configuration</h3></div></div></div><div class="para">
If client authentication is properly configured, a user can connect to the FreeIPA server using SSH without being prompted for a password.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Obtain a Kerberos ticket for the admin user.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html
index 960dd0d..2d1e3a7 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_an_IPA_Client_on_Solaris.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.3. Configuring a Solaris System as a FreeIPA Client</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.3. Configuring a Solaris System as a FreeIPA Client</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Installing_the_IPA_Client_on_Linux.html" title="3.2. Configuring a Fedora System as a FreeIPA Client" /><link rel="next" href="Configuring_an_IPA_Client_on_HP_UX.html" title="3.4. Configuring an HP-UX System as a FreeIPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previou
s"><a accesskey="p" href="Installing_the_IPA_Client_on_Linux.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_HP_UX.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_Solaris"><div class="titlepage"><div><div><h2 class="title" id="Configuring_an_IPA_Client_on_Solaris">3.3. Configuring a Solaris System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris_10"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</h3></div></div></div><div class="orderedlist"><ol><li class="listitem" id="st.sol1"><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Installing_the_IPA_Client_on_Linux.html" title="3.2. Configuring a Fedora System as a FreeIPA Client" /><link rel="next" href="Configuring_an_IPA_Client_on_HP_UX.html" title="3.4. Configuring an HP-UX System as a FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previo
us"><a accesskey="p" href="Installing_the_IPA_Client_on_Linux.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_HP_UX.html"><strong>Next</strong></a></li></ul><div class="section" id="Configuring_an_IPA_Client_on_Solaris"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Configuring_an_IPA_Client_on_Solaris">3.3. Configuring a Solaris System as a FreeIPA Client</h2></div></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris_10"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</h3></div></div></div><div class="orderedlist"><ol><li class="listitem" id="st.sol1"><div class="para">
As with Fedora systems, FreeIPA provides an automated method of configuring Solaris 10 to function as a FreeIPA client. On the Solaris client, run the <code class="command">ldapclient</code> with the name of the FreeIPA domain:
</div><pre class="programlisting"><span class="perl_Comment"># ldapclient init ipa.example.com -v</span></pre><div class="para">
When the command is run, it creates a configuration profile that will automatically set up the necessary PAM and <code class="filename">/etc/ldap.conf</code> configuration.
@@ -90,7 +90,7 @@ GSSAPITrustDNS no</pre></li><li class="listitem"><div class="para">
ktutil: <span class="perl_BString">write</span>_kt /etc/krb5/krb5.keytab
ktutil: q</pre>
- </div></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></li></ol></div></li></ol></div></div><div class="section" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Perform steps <a class="xref" href="Configuring_an_IPA_Client_on_Solaris.html#st.sol1">1</a> through <a class="xref" href="Configuring_an_IPA_Client_on_Solaris.html#st.sol3">4</a> in <a class="xref" href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10">Section 3.3.1, “Configuring Solaris 10”</a> to set up the Solaris 9 client.
</div></li><li class="listitem"><div class="para">
Configure the <code class="filename">/etc/pam.conf</code> file to use PAM Kerberos. For example:
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Document_Conventions.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Document_Conventions.html
index d8b0190..76759b4 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Document_Conventions.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Document_Conventions.html
@@ -1,21 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2. Examples and Formatting</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2. Examples and Formatting</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Preface.html" title="Preface" /><link rel="prev" href="Preface.html" title="Preface" /><link rel="next" href="feedback.html" title="3. Giving Feedback" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Preface.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="feedback.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US
" class="section" id="Document_Conventions" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="Document_Conventions">2. Examples and Formatting</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Preface.html" title="Preface" /><link rel="prev" href="Preface.html" title="Preface" /><link rel="next" href="feedback.html" title="3. Giving Feedback" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Preface.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="feedback.html"><strong>Next</strong></a></li></ul><div xml:lang="en-U
S" class="section" id="Document_Conventions" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Document_Conventions">2. Examples and Formatting</h2></div></div></div><div class="para">
Each of the examples used in this guide, such as file locations and commands, have certain defined conventions.
- </div><div class="section" id="bracketsexamples"><div class="titlepage"><div><div><h3 class="title" id="bracketsexamples">2.1. Brackets</h3></div></div></div><div class="para">
+ </div><div class="section" id="bracketsexamples"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="bracketsexamples">2.1. Brackets</h3></div></div></div><div class="para">
Square brackets (<code class="command">[]</code>) are used to indicate an alternative element in a name. For example, if a tool is available in <code class="filename">/usr/lib</code> on 32-bit systems and in <code class="filename">/usr/lib64</code> on 64-bit systems, then the tool location may be represented as <code class="filename">/usr/lib[64]</code>.
- </div></div><div class="section" id="tool-locations"><div class="titlepage"><div><div><h3 class="title" id="tool-locations">2.2. Client Tool Information</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="tool-locations"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="tool-locations">2.2. Client Tool Information</h3></div></div></div><div class="para">
The tools for FreeIPA are located in the <code class="filename">/usr/bin</code> and the <code class="filename">/usr/sbin</code> directories.
</div><div class="para">
The LDAP tools used to edit the FreeIPA directory services, such as <code class="command">ldapmodify</code> and <code class="command">ldapsearch</code>, are from OpenLDAP. OpenLDAP tools use SASL connections by default. To perform a simple bind using a username and password, use the <code class="option">-x</code> argument to disable SASL.
- </div></div><div class="section" id="guide-formatting"><div class="titlepage"><div><div><h3 class="title" id="guide-formatting">2.3. Text Formatting and Styles</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="guide-formatting"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="guide-formatting">2.3. Text Formatting and Styles</h3></div></div></div><div class="para">
Certain words are represented in different fonts, styles, and weights. Different character formatting is used to indicate the function or purpose of the phrase being highlighted.
</div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr valign="top"><th valign="top">
Formatting Style
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Exposing_Automount_Maps_to_NIS_Clients.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Exposing_Automount_Maps_to_NIS_Clients.html
index 235b0cc..9332806 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Exposing_Automount_Maps_to_NIS_Clients.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Exposing_Automount_Maps_to_NIS_Clients.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9.3. Exposing Automount Maps to NIS Clients</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.3. Exposing Automount Maps to NIS Clients</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="nis.html" title="Chapter 9. Identity: Integrating with NIS Domains and Netgroups" /><link rel="prev" href="adding-netgroups.html" title="9.2. Adding Netgroups" /><link rel="next" href="migrating-from-nis.html" title="9.4. Migrating from NIS to FreeIPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-netgroups.html"><strong>Prev</strong></a></
li><li class="next"><a accesskey="n" href="migrating-from-nis.html"><strong>Next</strong></a></li></ul><div class="section" id="Exposing_Automount_Maps_to_NIS_Clients"><div class="titlepage"><div><div><h2 class="title" id="Exposing_Automount_Maps_to_NIS_Clients">9.3. Exposing Automount Maps to NIS Clients</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="nis.html" title="Chapter 10. Policy: Integrating with NIS Domains and Netgroups" /><link rel="prev" href="adding-netgroups.html" title="10.2. Creating Netgroups" /><link rel="next" href="migrating-from-nis.html" title="10.4. Migrating from NIS to FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-netgroups.html"><strong>Prev</strong></
a></li><li class="next"><a accesskey="n" href="migrating-from-nis.html"><strong>Next</strong></a></li></ul><div class="section" id="Exposing_Automount_Maps_to_NIS_Clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Exposing_Automount_Maps_to_NIS_Clients">10.3. Exposing Automount Maps to NIS Clients</h2></div></div></div><div class="para">
When the NIS service is enabled on a system, the FreeIPA server is automatically configured to set the NIS domain to the FreeIPA domain's name, and to include FreeIPA users, groups, and netgroups as passwd, group, and netgroup maps in the NIS domain.
</div><div class="para">
If any automount maps are already defined, these maps need to be manually added to the NIS configuration in FreeIPA for them to be exposed to NIS clients. The NIS server is managed by a special plug-in entry in the FreeIPA LDAP directory; this is a container entry, and each NIS domain and map used by the NIS server is configured as a child entry beneath that container. The NIS domain entry in the must have the name of the NIS domain, the name of the NIS map, how to find the directory entries to use as the NIS map's contents, and which attributes to use as the NIS map's key and value. Most of these settings will be the same for every map.
@@ -28,4 +28,4 @@ nis-base: automountmapname=auto.master,cn=default,cn=automount,dc=example,dc=com
</div><div class="para">
A similar add operation needs to be run for every map that is configured.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-netgroups.html"><strong>Prev</strong>9.2. Adding Netgroups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="migrating-from-nis.html"><strong>Next</strong>9.4. Migrating from NIS to FreeIPA</a></li></ul></body></html>
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-netgroups.html"><strong>Prev</strong>10.2. Creating Netgroups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="migrating-from-nis.html"><strong>Next</strong>10.4. Migrating from NIS to FreeIPA</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Extending_the_Permissions_of_IPA_Managed_Hosts.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Extending_the_Permissions_of_IPA_Managed_Hosts.html
index 08b387c..d95e1ed 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Extending_the_Permissions_of_IPA_Managed_Hosts.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Extending_the_Permissions_of_IPA_Managed_Hosts.html
@@ -1,19 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.6. Extending the Permissions of FreeIPA Managed Hosts</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.8. Extending Access Permissions over Other Hosts and Services</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="prev" href="host-groups.html" title="11.5. Managing Host Groups" /><link rel="next" href="configuring-host-access.html" title="11.7. Configuring Host-Based Access Control" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="host-groups.html"><str
ong>Prev</strong></a></li><li class="next"><a accesskey="n" href="configuring-host-access.html"><strong>Next</strong></a></li></ul><div class="section" id="Extending_the_Permissions_of_IPA_Managed_Hosts"><div class="titlepage"><div><div><h2 class="title" id="Extending_the_Permissions_of_IPA_Managed_Hosts">11.6. Extending the Permissions of FreeIPA Managed Hosts</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="host-disable.html" title="6.7. Disabling Host and Service Entries" /><link rel="next" href="renaming-machines.html" title="6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="host-disable.h
tml"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="renaming-machines.html"><strong>Next</strong></a></li></ul><div class="section" id="Extending_the_Permissions_of_IPA_Managed_Hosts"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Extending_the_Permissions_of_IPA_Managed_Hosts">6.8. Extending Access Permissions over Other Hosts and Services</h2></div></div></div><div class="para">
As discussed in <a class="xref" href="service-interactions.html">Section 1.3, “Relationships Between Servers and Clients”</a>, within the FreeIPA domain, <span class="emphasis"><em>manage</em></span> means being able to retrieve a keytab and certificates for another host or service. Every host and service has a <em class="parameter"><code>managedby</code></em> entry which lists what hosts or services can manage it. By default, a host can manage itself and all of its services. It is also possible to allow a host to manage other hosts, or services on other hosts, by updating the appropriate delegations or providing a suitable <em class="parameter"><code>managedby</code></em> entry.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ </div><div class="para">
+ A FreeIPA service can be managed from any FreeIPA host, as long as that host has been granted, or <span class="emphasis"><em>delegated</em></span>, permission to access the service. Likewise, hosts can be delegated permissions to other hosts within the domain.
+ </div><div class="figure" id="fig.host-service"><div class="figure-contents"><div class="mediaobject"><img src="images/host-services.png" width="444" alt="Host and Service Delegation" /></div></div><h6>Figure 6.1. Host and Service Delegation</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
If a host is delegated authority to another host through a <code class="command">managedBy</code> entry, it does not mean that the host has also been delegated management for all services on that host. Each delegation has to be performed independently.
- </div></div></div><div class="section" id="Delegating_Service_Management"><div class="titlepage"><div><div><h3 class="title" id="Delegating_Service_Management">11.6.1. Delegating Service Management</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Delegating_Service_Management"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Delegating_Service_Management">6.8.1. Delegating Service Management</h3></div></div></div><div class="para">
A host is delegated control over a service using the <code class="command">service-add-host</code> command. There are two parts to delegating the service: specifying the principal and identifying the hosts (in a comma-separated list) with control:
- </div><pre class="screen">4ipa service-add-host <em class="replaceable"><code>principal</code></em> --hosts=<em class="replaceable"><code>hostnames</code></em></pre><div class="para">
+ </div><pre class="screen"># ipa service-add-host <em class="replaceable"><code>principal</code></em> --hosts=<em class="replaceable"><code>hostnames</code></em></pre><div class="para">
For example:
</div><pre class="screen"># ipa service-add-host http/web.example.com --hosts=client1.example.com</pre><div class="para">
Once the host is delegated authority, the host principal can be used to manage the service:
@@ -31,7 +33,7 @@ Keytab successfully retrieved and stored in: /tmp/test.keytab</pre><div class="p
Fingerprint (SHA1):
01:43:bc:fa:b9:d8:30:35:ee:b6:54:dd:a4:e7:d2:11:b1:9d:bc:38
Serial number: 1005
-</pre></div><div class="section" id="Delegating_Host_Management"><div class="titlepage"><div><div><h3 class="title" id="Delegating_Host_Management">11.6.2. Delegating Host Management</h3></div></div></div><div class="para">
+</pre></div><div class="section" id="Delegating_Host_Management"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Delegating_Host_Management">6.8.2. Delegating Host Management</h3></div></div></div><div class="para">
Hosts are delegated authority over other hosts through the <code class="command">host-add-managedby</code> command. This creates a <code class="command">managedby</code> entry. Once the <code class="command">managedby</code> entry is created, then the host can retrieve a keytab for the host it has delegated authority over.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as the admin user.
@@ -47,7 +49,7 @@ Keytab successfully retrieved and stored in: /tmp/test.keytab</pre><div class="p
# ipa-getkeytab -s `hostname` -k /tmp/client2.keytab -p host/client2.example.com
Keytab successfully retrieved and stored in: /tmp/client2.keytab</pre>
- </div></li></ol></div></div><div class="section" id="accessing-service"><div class="titlepage"><div><div><h3 class="title" id="accessing-service">11.6.3. Accessing Delegated Services</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="accessing-service"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="accessing-service">6.8.3. Accessing Delegated Services</h3></div></div></div><div class="para">
For both services and hosts, if a client has delegated authority, it can obtain a keytab for that principal on the local machine. For services, this has the format <span class="emphasis"><em>service/hostname at REALM</em></span>. For hosts, the <span class="emphasis"><em>service</em></span> is <code class="systemitem">host</code>.
</div><div class="para">
With <code class="command">kinit</code>, use the <code class="option">-k</code> option to load a keytab and the <code class="option">-t</code> option to specify the keytab.
@@ -56,7 +58,7 @@ Keytab successfully retrieved and stored in: /tmp/client2.keytab</pre>
<pre class="screen"># kinit -kt /etc/krb5.keytab host/ipa.example.com at EXAMPLE.COM</pre>
</div><div class="para">
- TO access a service:
+ To access a service:
<pre class="screen"># kinit -kt /etc/httpd/conf/krb5.keytab http/ipa.example.com at EXAMPLE.COM</pre>
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="host-groups.html"><strong>Prev</strong>11.5. Managing Host Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="configuring-host-access.html"><strong>Next</strong>11.7. Configuring Host-Based Access Control</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="host-disable.html"><strong>Prev</strong>6.7. Disabling Host and Service Entries</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="renaming-machines.html"><strong>Next</strong>6.9. Renaming Machines and Reconfiguring FreeIPA ...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Glossary.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Glossary.html
index 5b019d2..c53d8c3 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Glossary.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Glossary.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Glossary</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Glossary</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="client-tools.html" title="B.6. Client Scripts" /><link rel="next" href="ix01.html" title="Index" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="client-tools.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ix01.html"><strong>Next</strong></a></l
i></ul><div xml:lang="en-US" class="glossary" id="Glossary" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Glossary</h2></div></div></div><div class="glossdiv"><h3 class="title">A</h3><dl><dt>access control instruction</dt><dd><p>See <a class="glosssee" href="Glossary.html#aci">ACI</a>.</p></dd><dt>access control list</dt><dd><p>See <a class="glosssee" href="Glossary.html#ACL">ACL</a>.</p></dd><dt>access rights</dt><dd><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="client-tools.html" title="B.6. Client Scripts" /><link rel="next" href="ix01.html" title="Index" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="client-tools.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ix01.html"><strong>Next</strong></a></
li></ul><div xml:lang="en-US" class="glossary" id="Glossary" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Glossary</h2></div></div></div><div class="glossdiv"><h3 class="title">A</h3><dl><dt>access control instruction</dt><dd><p>See <a class="glosssee" href="Glossary.html#aci">ACI</a>.</p></dd><dt>access control list</dt><dd><p>See <a class="glosssee" href="Glossary.html#ACL">ACL</a>.</p></dd><dt>access rights</dt><dd><div class="para">
In the context of access control, specify the level of access granted or denied. Access rights are related to the type of operation that can be performed on the directory. The following rights can be granted or denied: read, write, add, delete, search, compare, selfwrite, proxy and all.
</div></dd><dt>account inactivation</dt><dd><div class="para">
Disables a user account, group of accounts, or an entire domain so that all authentication attempts are automatically rejected.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/HBAC_Service_Groups.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/HBAC_Service_Groups.html
new file mode 100644
index 0000000..27e900d
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/HBAC_Service_Groups.html
@@ -0,0 +1,75 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.2. Creating Host-Based Access Control Entries for Services and Service Groups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="configuring-host-access.html" title="Chapter 14. Policy: Configuring Host-Based Access Control" /><link rel="prev" href="configuring-host-access.html" title="Chapter 14. Policy: Configuring Host-Based Access Control" /><link rel="next" href="hbac-rules.html" title="14.3. Defining Host-Based Access Control Rules" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accessk
ey="p" href="configuring-host-access.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="hbac-rules.html"><strong>Next</strong></a></li></ul><div class="section" id="HBAC_Service_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="HBAC_Service_Groups">14.2. Creating Host-Based Access Control Entries for Services and Service Groups</h2></div></div></div><div class="para">
+ Any PAM service can be identified as to the host-based access control (HBAC) system in FreeIPA. The service entries used in host-based access control are separate from adding a service to the FreeIPA domain. Adding a service to the domain makes it a recognized resource which is available to other resources. Adding a domain resource to the host-based access control configuration allows administrators to exert defined control over what domain users and what domain clients can access that service.
+ </div><div class="para">
+ Some common services are already configured as HBAC services, so they can be used in host-based access control rules. Additional services can be added, and services can be added into service groups for simpler management.
+ </div><div class="section" id="adding-hbac-svc"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-hbac-svc">14.2.1. Adding HBAC Services</h3></div></div></div><div class="section" id="adding-hbac-svc-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svc-ui">14.2.1.1. Adding HBAC Services in the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Host-Based Access Control</strong></span> subtab, and then select the <span class="guilabel"><strong>HBAC Services</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of services.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-services-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the service name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-service-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new service.
+ </div></li><li class="listitem"><div class="para">
+ If a service group already exists, then add the service to the desired group, as described in <a class="xref" href="HBAC_Service_Groups.html#adding-hbac-svcgrp-ui">Section 14.2.2.1, “Adding Service Groups in the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="adding-hbac-svc-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svc-cmd">14.2.1.2. Adding Services in the Command Line</h4></div></div></div><div class="para">
+ The service is added to the access control system using the <code class="command">hbacsvc-add</code> command, specifying the service by the name that PAM uses to evaluate the service.
+ </div><div class="para">
+ For example, this adds the <code class="systemitem">tftp</code> service:
+ </div><pre class="screen"># ipa hbacsvc-add --desc="TFTP service" tftp
+-------------------------
+Added HBAC service "tftp"
+-------------------------</pre><div class="para">
+ If a service group already exists, then the service can be added to the group using the <code class="command">hbacsvcgroup-add-member</code> command, as in <a class="xref" href="HBAC_Service_Groups.html#adding-hbac-svcgrp-cmd">Section 14.2.2.2, “Adding Service Groups in the Command Line”</a>.
+ </div></div></div><div class="section" id="adding-hbac-svcgrp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-hbac-svcgrp">14.2.2. Adding Service Groups</h3></div></div></div><div class="para">
+ Once the individual service is added, it can be added to the access control rule. However, if there a large number of services, then it can require frequent updates to the access control rules as services change. FreeIPA also allows groups of services to added to access control rules. This makes it much easier to manage access control, because the members of the service group can be changed without having to edit the rule itself.
+ </div><div class="section" id="adding-hbac-svcgrp-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svcgrp-ui">14.2.2.1. Adding Service Groups in the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Host-Based Access Control</strong></span> subtab, and then select the <span class="guilabel"><strong>HBAC Service Groups</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of service groups.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the service group name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to the service configuration page.
+ </div></li><li class="listitem"><div class="para">
+ At the top of the <span class="guilabel"><strong>HBAC Services</strong></span> tab, click the <span class="guilabel"><strong>Add</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-member1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the services to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the command to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-svcgrp-member2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button to save the group membership.
+ </div></li></ol></div></div><div class="section" id="adding-hbac-svcgrp-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-hbac-svcgrp-cmd">14.2.2.2. Adding Service Groups in the Command Line</h4></div></div></div><div class="para">
+ First create the service group entry, then create the service, and then add that service to the service group as a member. For example:
+ </div><pre class="screen">$ ipa hbacsvcgroup-add --desc="login services" login
+--------------------------------
+Added HBAC service group "login"
+--------------------------------
+ Service group name: login
+ Description: login services
+
+
+$ ipa hbacsvc-add --desc="SSHD service" sshd
+-------------------------
+Added HBAC service "sshd"
+-------------------------
+
+$ ipa hbacsvcgroup-add-member --hbacsvcs=sshd login
+ Service group name: login
+ Description: login services
+-------------------------
+Number of members added 1
+-------------------------</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ FreeIPA defines one default service group, <code class="systemitem">SUDO</code>, for sudo services.
+ </div></div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-host-access.html"><strong>Prev</strong>Chapter 14. Policy: Configuring Host-Based Access...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="hbac-rules.html"><strong>Next</strong>14.3. Defining Host-Based Access Control Rules</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Client_on_Linux.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Client_on_Linux.html
index 4504f36..30a727c 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Client_on_Linux.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Client_on_Linux.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.2. Configuring a Fedora System as a FreeIPA Client</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.2. Configuring a Fedora System as a FreeIPA Client</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="next" href="Configuring_an_IPA_Client_on_Solaris.html" title="3.3. Configuring a Solaris System as a FreeIPA Client" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a acc
esskey="p" href="setting-up-clients.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_Solaris.html"><strong>Next</strong></a></li></ul><div class="section" id="Installing_the_IPA_Client_on_Linux"><div class="titlepage"><div><div><h2 class="title" id="Installing_the_IPA_Client_on_Linux">3.2. Configuring a Fedora System as a FreeIPA Client</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="next" href="Configuring_an_IPA_Client_on_Solaris.html" title="3.3. Configuring a Solaris System as a FreeIPA Client" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a ac
cesskey="p" href="setting-up-clients.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_an_IPA_Client_on_Solaris.html"><strong>Next</strong></a></li></ul><div class="section" id="Installing_the_IPA_Client_on_Linux"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Installing_the_IPA_Client_on_Linux">3.2. Configuring a Fedora System as a FreeIPA Client</h2></div></div></div><div class="para">
There are two elements to prepare before beginning the client setup process for the Fedora client:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
There must be a way to connect the client machine to the Kerberos domain, either by having an available Kerberos identity (such as the admin user) or by manually adding the client machine to the KDC on the server with a one-time password before beginning the enrollment process for the client machine.
@@ -27,6 +27,8 @@
Run the client setup command.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-client-install --enable-dns-updates</span></pre><div class="para">
The <code class="option">--enable-dns-updates</code> option updates DNS with the client machine's IP address. Other options for <code class="command">ipa-client-install</code> are listed in <a class="xref" href="client-tools.html#ipa-client-install">Section B.6.1, “ipa-client-install”</a>.
+ </div><div class="para">
+ When using the <code class="option">--server</code> option to specify the FreeIPA server to register with, the server name must be a fully-qualified domain name.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
There is an <code class="option">--on-master</code> option that is used as part of configuring an FreeIPA server (which also is an FreeIPA client, since it is within the domain). This option should <span class="emphasis"><em>never</em></span> be used when configuring a regular FreeIPA client, because it results in slightly different client configuration which may not work on a non-FreeIPA server machine.
</div></div></div></li><li class="listitem"><div class="para">
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Server_Packages.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Server_Packages.html
index 03a248f..525f29d 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Server_Packages.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Installing_the_IPA_Server_Packages.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.2. Installing the FreeIPA Server Packages</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.2. Installing the FreeIPA Server Packages</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="next" href="creating-server.html" title="2.3. Creating a FreeIPA Server Instance" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="installing-ipa.html"><strong>Prev</strong></a>
</li><li class="next"><a accesskey="n" href="creating-server.html"><strong>Next</strong></a></li></ul><div class="section" id="Installing_the_IPA_Server_Packages"><div class="titlepage"><div><div><h2 class="title" id="Installing_the_IPA_Server_Packages">2.2. Installing the FreeIPA Server Packages</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="next" href="creating-server.html" title="2.3. Creating a FreeIPA Server Instance" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="installing-ipa.html"><strong>Prev</strong></a
></li><li class="next"><a accesskey="n" href="creating-server.html"><strong>Next</strong></a></li></ul><div class="section" id="Installing_the_IPA_Server_Packages"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Installing_the_IPA_Server_Packages">2.2. Installing the FreeIPA Server Packages</h2></div></div></div><div class="para">
Installing only the FreeIPA server requires a single package, . If the FreeIPA server will also manage a DNS server, then it requires two additional packages to set up the DNS.
</div><div class="para">
All of these packages can be installed using the <code class="command">yum</code> command:
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Kerberos_Errors.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Kerberos_Errors.html
index b15b170..abec163 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Kerberos_Errors.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Kerberos_Errors.html
@@ -1,25 +1,27 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.6. Troubleshooting Kerberos Errors</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.6. Troubleshooting Kerberos Errors</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /><link rel="prev" href="removing-keytabs.html" title="6.5. Removing Keytabs" /><link rel="next" href="automount.html" title="Chapter 7. Identity: Using Automount" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="removing-keytabs.html"><strong>Prev</strong></a></li><li class="n
ext"><a accesskey="n" href="automount.html"><strong>Next</strong></a></li></ul><div class="section" id="Kerberos_Errors"><div class="titlepage"><div><div><h2 class="title" id="Kerberos_Errors">6.6. Troubleshooting Kerberos Errors</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /><link rel="prev" href="removing-keytabs.html" title="12.5. Removing Keytabs" /><link rel="next" href="sudo.html" title="Chapter 13. Policy: Using sudo" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="removing-keytabs.html"><strong>Prev</strong></a></li><li class="next"><a ac
cesskey="n" href="sudo.html"><strong>Next</strong></a></li></ul><div class="section" id="Kerberos_Errors"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Kerberos_Errors">12.6. Troubleshooting Kerberos Errors</h2></div></div></div><div class="para">
Kerberos errors frequently become apparent when trying to connect to the realm using <code class="command">kinit</code> or a similar client. For information related to Kerberos, first check the Kerberos manpages, help files, and other resources.
</div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
FreeIPA has its own command-line tools to use to manage Kerberos policies. <span class="bold bold"><strong>Do not</strong></span> use <code class="command">kadmin</code> or <code class="command">kadmin.local</code> to manage FreeIPA Kerberos settings.
- </div></div></div><div class="formalpara"><h5 class="formalpara" id="id3026313">Logs with Kerberos Information</h5>
- There are several places to look for Kerberos error log information:
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- For <code class="command">kinit</code> problems or other Kerberos server problems, look at the KDC log in <code class="filename">/var/log/krb5kdc.log</code>.
- </div></li><li class="listitem"><div class="para">
- For FreeIPA-specific errors, look in <code class="filename">/var/log/httpd/error_log</code>.
- </div></li></ul></div>
+ </div></div></div><div class="para">
+ There are several places to look for Kerberos error log information:
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ For <code class="command">kinit</code> problems or other Kerberos server problems, look at the KDC log in <code class="filename">/var/log/krb5kdc.log</code>.
+ </div></li><li class="listitem"><div class="para">
+ For FreeIPA-specific errors, look in <code class="filename">/var/log/httpd/error_log</code>.
+ </div></li></ul></div>
- </div><div class="formalpara"><h5 class="formalpara" id="id3026358">Problems making connections with SSH when using GSS-API</h5>
+ </div><div class="para">
+ The FreeIPA logs, both for the server and for FreeIPA-associated services, are covered in <a class="xref" href="server-config.html#logging">Section 16.1.3, “Checking FreeIPA Server Logs”</a>.
+ </div><div class="formalpara"><h5 class="formalpara" id="id781917">Problems making connections with SSH when using GSS-API</h5>
If there are bad reverse DNS entries in the DNS configuration, then it may not be possible to log into FreeIPA resources using SSH. When SSH attempts to connect to a resource using GSS-API as its security method, GSS-API first checks the DNS records. The bad records prevent SSH from locating the resource.
</div><div class="para">
It is possible to disable reverse DNS lookups in the SSH configuration. Rather than using reverse DNS records, SSH passes the given username directly to GSS-API.
@@ -27,8 +29,8 @@
To disable reverse DNS lookups with SSH, add or edit the <em class="parameter"><code>GSSAPITrustDNS</code></em> directive and set the value to <code class="command">no</code>.
</div><pre class="screen"># vim /etc/ssh/ssh_config
-GSSAPITrustDNS no</pre><div class="formalpara"><h5 class="formalpara" id="id3054806">There are problems connecting to an NFS server after changing a keytab</h5>
+GSSAPITrustDNS no</pre><div class="formalpara"><h5 class="formalpara" id="id781952">There are problems connecting to an NFS server after changing a keytab</h5>
Clients attempting to mount NFS exports rely on the existence of a valid principal and secret key on both the NFS server and the client host. Clients themselves should not have access to the NFS keytab. The ticket for the NFS connection will be given to clients from the KDC.
</div><div class="para">
Failure to export an updated keytab can cause problems that are difficult to isolate. For example, existing service connections may continue to function, but no new connections may be possible.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="removing-keytabs.html"><strong>Prev</strong>6.5. Removing Keytabs</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="automount.html"><strong>Next</strong>Chapter 7. Identity: Using Automount</a></li></ul></body></html>
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="removing-keytabs.html"><strong>Prev</strong>12.5. Removing Keytabs</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="sudo.html"><strong>Next</strong>Chapter 13. Policy: Using sudo</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing-Unique_UID_and_GID_Attributes.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing-Unique_UID_and_GID_Attributes.html
index 806e156..afd646c 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing-Unique_UID_and_GID_Attributes.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing-Unique_UID_and_GID_Attributes.html
@@ -1,23 +1,23 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.4. Managing Unique UID and GID Number Assignments</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.4. Managing Unique UID and GID Number Assignments</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="disabling-anon-binds.html" title="13.3. Disabling Anonymous Binds" /><link rel="next" href="Configuring_Certificates_and_Certificate_Authorities.html" title="13.5. Configuring Alternate Certificate Authorities" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" hr
ef="disabling-anon-binds.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing-Unique_UID_and_GID_Attributes"><div class="titlepage"><div><div><h2 class="title" id="Managing-Unique_UID_and_GID_Attributes">13.4. Managing Unique UID and GID Number Assignments</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="changing-pwds.html" title="5.3. Changing Passwords" /><link rel="next" href="user-groups.html" title="5.5. Managing User Groups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="changing-pwds.html"><strong>Prev</strong></a></li><li class="next"><a access
key="n" href="user-groups.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing-Unique_UID_and_GID_Attributes"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing-Unique_UID_and_GID_Attributes">5.4. Managing Unique UID and GID Number Assignments</h2></div></div></div><div class="para">
A FreeIPA server must generate random UID and GID values and simultaneously ensure that replicas never generate the same UID or GID value. The need for unique UID and GID numbers might even cross FreeIPA domains, if a single organization has multiple disparate domains.
</div><div class="para">
The UID and GID numbers are divided into <span class="emphasis"><em>ranges</em></span>. By keeping separate numeric ranges for individual servers and replicas, the chances are minimal that any numbers issued by one server or replica will duplicate those from another. Ranges are updated and shared intelligently between servers and replicas through the Dynamic Numeric Assignment (DNA) Plug-in, as part of the backend 389 Directory Server instance for the domain. The same range is used for user IDs (<em class="parameter"><code>uidNumber</code></em>) and group IDs (<em class="parameter"><code>gidNumber</code></em>). A user and a group may have the same ID, but since the ID is set in different attributes, there is no conflict. Using the same ID number for both a user and a group also allows an administrator to configure user private groups, where a unique system group is created for each user and the ID number is the same for both the user and the group.
</div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
When a user is created interactively or without specifying a UID or GID number, then the user account is created with an ID number that is next available in the server or replica range. This means that a user always has a unique number for its UID number and, if configured, for its private group.
</div><div class="para">
- If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for Posix entries. The same is true for group entries: a duplicate <em class="parameter"><code>gidNumber</code></em> can be manually assigned to the entry.
+ If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries. The same is true for group entries: a duplicate <em class="parameter"><code>gidNumber</code></em> can be manually assigned to the entry.
</div><div class="para">
If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
- </div></div></div><div class="section" id="id-ranges-at-install"><div class="titlepage"><div><div><h3 class="title" id="id-ranges-at-install">13.4.1. About ID Range Assignments During Installation</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="id-ranges-at-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="id-ranges-at-install">5.4.1. About ID Range Assignments During Installation</h3></div></div></div><div class="para">
The FreeIPA administrator can initially define a range during server installation, using the <code class="option">--idstart</code> and <code class="option">--idmax</code> options with <code class="command">ipa-server-install</code>. These options are not required, so the setup script can assign random ranges during installation.
</div><div class="para">
If no range is set manually when the first FreeIPA server is installed, a range of 200,000 IDs is randomly selected. There are 10,000 possible ranges. Selecting a random range from that number provides a high probability of non-conflicting IDs if two separate FreeIPA domains are ever merged in the future.
@@ -25,7 +25,7 @@
With a single FreeIPA server, IDs are assigned to entries in order through the range. With replicas, the initial server ID range is split and distributed.
</div><div class="para">
When a replica is installed, it is configured with an invalid range. It also has a directory entry (that is shared among replicas) that instructs the replica where it can request a valid range. When the replica starts, or as its current range is depleted so that less than 100 IDs are available, it can contact one of the available servers for a new range allotment. A special extended operation splits the range in two, so that the original server and the replica each have half of the available range.
- </div></div><div class="section" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges"><div class="titlepage"><div><div><h3 class="title" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges">13.4.2. Adding New Ranges</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Assigning_UIDs_and_GIDs-Adding_New_Ranges">5.4.2. Adding New Ranges</h3></div></div></div><div class="para">
If the range for the entire domain is close to depletion, a new range can be manually selected and assigned to one of the master servers. All replicas then request ID ranges from the master as necessary.
</div><div class="para">
The changes to the range are done by editing the 389 Directory Server configuration to change the DNA Plug-in instance. The range is defined in the <em class="parameter"><code>dnaNextRange</code></em> parameter. For example:
@@ -36,4 +36,4 @@ changetype: modify
add: dnaNextRange
dnaNextRange: 123400000-123500000</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
This command only adds the specified range of values; it does not check that the values in that range are actually available. This check is performed when an attempt is made to allocate those values. If a range is added that contains mostly values that were already allocated, the system will cycle through the entire range searching for unallocated values, and then the operation ultimately fails if none are available.
- </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="disabling-anon-binds.html"><strong>Prev</strong>13.3. Disabling Anonymous Binds</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Next</strong>13.5. Configuring Alternate Certificate Authoriti...</a></li></ul></body></html>
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="changing-pwds.html"><strong>Prev</strong>5.3. Changing Passwords</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="user-groups.html"><strong>Next</strong>5.5. Managing User Groups</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_DNS_Zones.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_DNS_Zones.html
index 8337ae0..c883f2b 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_DNS_Zones.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_DNS_Zones.html
@@ -1,26 +1,34 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.6. Adding DNS Zones</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.5. Adding DNS Zones</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="finding-dns-zones.html" title="10.5. Finding and Displaying DNS Zones" /><link rel="next" href="modifying-dns-zones.html" title="10.7. Modifying DNS Zones" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="finding-dns-zones.html"><strong>Prev</strong></a></li><l
i class="next"><a accesskey="n" href="modifying-dns-zones.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones"><div class="titlepage"><div><div><h2 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones">10.6. Adding DNS Zones</h2></div></div></div><a id="id3207241" class="indexterm"></a><div class="para">
- The <code class="command">ipa dnszone-add</code> command add a new zone to the DNS domain. At a minimum, this requires the name of the new subdomain:
- </div><pre class="screen">$ ipa dnszone-add <em class="replaceable"><code>domainName</code></em></pre><div class="para">
- If the name is not given, the script prompts for it. Other command-line options can also be passed with the <code class="command">ipa dnszone-add</code> command; these are described in .
- </div><div class="para">
- To add a zone entry:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Add the new zone. For example:
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="changing-forwarder.html" title="8.4. Changing Recursive Queries Against Forwarders" /><link rel="next" href="modifying-dns-zones.html" title="8.6. Modifying DNS Zones" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="changing-forwarder.html"><strong>Prev</stron
g></a></li><li class="next"><a accesskey="n" href="modifying-dns-zones.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones">8.5. Adding DNS Zones</h2></div></div></div><a id="id590921" class="indexterm"></a><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones-ui">8.5.1. Adding DNS Zones from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of DNS zones.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Fill in the information about the new DNS zone. The <span class="guilabel"><strong>Zone Name</strong></span> is required; this is the actual domain name. The other information about the administrator email and the authoritative name server are optional.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the DNS zone page. In the <span class="guilabel"><strong>Settings</strong></span> tab, it is possible to reset the default zone configuration to enable dynamic binds (<a class="xref" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">Section 8.7.1, “Enabling Dynamic DNS Updates in the Web UI”</a>) or change other default records information (<a class="xref" href="modifying-dns-zones.html#editing-dns-zone-ui">Section 8.6.1, “Editing the Zone Configuration in the Web UI”</a>). It is also possible to begin adding new DNS resource records (<a class="xref" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-ui">Section 8.9.1, “Adding DNS Resource Records from the Web UI”</a>) in the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li></ol></div></div><div class="section" id="Managing_DNS_Zones-Adding_DNS_Zones-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Adding_DNS_Zones-cmd">8.5.2. Adding DNS Zones from the Command Line</h3></div></div></div><div class="para">
+ The <code class="command">ipa dnszone-add</code> command add a new zone to the DNS domain. At a minimum, this requires the name of the new subdomain:
+ </div><pre class="screen">$ ipa dnszone-add <em class="replaceable"><code>domainName</code></em></pre><div class="para">
+ If the name is not given, the script prompts for it. Other command-line options can also be passed with the <code class="command">ipa dnszone-add</code> command; these are described in .
+ </div><div class="para">
+ To add a zone entry:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add the new zone. For example:
<pre class="screen">$ ipa dnszone-add newserver.example.com --admin-email=admin at example.com --minimum=3000 --allow-dynupdate</pre>
- </div></li><li class="listitem"><div class="para">
- Reload the name service.
+ </div></li><li class="listitem"><div class="para">
+ Reload the name service.
<pre class="screen"># rndc reload</pre>
- </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- To make new zone records immediately resolvable without restarting the name service, enable persistent searches with the <code class="systemitem">named</code> service or configure the BIND service to poll the Directory Server automatically for zone changes. See <a class="xref" href="bind-dyndb-ldap-config.html">Section 10.3, “Configuring the bind-dyndb-ldap Plug-in”</a>.
- </div></div></div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="finding-dns-zones.html"><strong>Prev</strong>10.5. Finding and Displaying DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="modifying-dns-zones.html"><strong>Next</strong>10.7. Modifying DNS Zones</a></li></ul></body></html>
+ </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ To make new zone records immediately resolvable without restarting the name service, enable persistent searches with the <code class="systemitem">named</code> service or configure the BIND service to poll the Directory Server automatically for zone changes. See <a class="xref" href="bind-dyndb-ldap-config.html">Section 8.3, “Configuring the bind-dyndb-ldap Plug-in”</a>.
+ </div></div></div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="changing-forwarder.html"><strong>Prev</strong>8.4. Changing Recursive Queries Against Forwarders</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="modifying-dns-zones.html"><strong>Next</strong>8.6. Modifying DNS Zones</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html
index f0ef885..aeaddcc 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html
@@ -1,15 +1,15 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.10. Adding Records to DNS Zones</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.9. Adding Records to DNS Zones</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="enabling-zones.html" title="10.9. Enabling and Disabling Zones" /><link rel="next" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html" title="10.11. Deleting Records from DNS Zones" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-zones.html
"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones"><div class="titlepage"><div><div><h2 class="title" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones">10.10. Adding Records to DNS Zones</h2></div></div></div><a id="id3304512" class="indexterm"></a><a id="id3248091" class="indexterm"></a><a id="id3248099" class="indexterm"></a><div class="para">
- FreeIPA supports several different types of DNS records, listed in <a class="xref" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#tab.record-types">Table 10.4, “DNS Record Types”</a>.
- </div><a id="id3248116" class="indexterm"></a><a id="id3248128" class="indexterm"></a><div class="table" id="tab.record-types"><h6>Table 10.4. DNS Record Types</h6><div class="table-contents"><table summary="DNS Record Types" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><tbody><tr><td>
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="enabling-zones.html" title="8.8. Enabling and Disabling Zones" /><link rel="next" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html" title="8.10. Deleting Records from DNS Zones" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-zones.html">
<strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing_DNS_Zones-Adding_Records_to_DNS_Zones">8.9. Adding Records to DNS Zones</h2></div></div></div><a id="id669544" class="indexterm"></a><a id="id669556" class="indexterm"></a><a id="id669564" class="indexterm"></a><div class="para">
+ FreeIPA supports several different types of DNS records, listed in <a class="xref" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#tab.record-types">Table 8.4, “DNS Record Types”</a>.
+ </div><a id="id669582" class="indexterm"></a><a id="id669594" class="indexterm"></a><div class="table" id="tab.record-types"><h6>Table 8.4. DNS Record Types</h6><div class="table-contents"><table summary="DNS Record Types" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><tbody><tr><td>
A
</td><td>
DS
@@ -75,44 +75,72 @@
</td><td>
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- The <code class="command">ipa dnsrecord-add</code> command adds records to DNS zones, based on the type. Adding a record has the same basic command format:
- </div><a id="id3304197" class="indexterm"></a><a id="id3244283" class="indexterm"></a><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>domainName urlLabel</code></em> --<em class="replaceable"><code>recordType</code></em>--rec <em class="replaceable"><code>record</code></em></pre><div class="para">
- The <span class="emphasis"><em>recordType</em></span> is an identifier, such as <code class="command">a</code> for A or IPv4 records. The <span class="emphasis"><em>record</em></span> value is the actual entry, which has a value corresponding to the record type.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The <code class="command">ipa dnsrecord-add</code> command only creates forward entries, not reverse entries.
- </div></div></div><a id="id3244342" class="indexterm"></a><a id="id3244353" class="indexterm"></a><div class="example" id="ex.ipv4-record"><h6>Example 10.2. IPv4 Record</h6><div class="example-contents"><div class="para">
- Type A resource records map hostnames to IPv4 addresses. The <span class="emphasis"><em>record</em></span> value for these commands, then, is a standard IPv4 address. The URL label is usually www.
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="adding-dns-records-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-dns-records-ui">8.9.1. Adding DNS Resource Records from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to which to add records.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab, click the <span class="guilabel"><strong>Add</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the type of record to create in the <span class="guilabel"><strong>Record Type</strong></span> drop-down menu. The type of record affects the information that is required in the <span class="guilabel"><strong>Record Name</strong></span> and <span class="guilabel"><strong>Data</strong></span> fields.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-new.png" width="444" /></div></div><div class="para">
+ Although FreeIPA supports many different record types, there are four frequent record types that are used:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>IPv4</em></span>. This is a basic map for a hostname and an ordinary IPv4 address. The <span class="guilabel"><strong>Record Name</strong></span> is a hostname, such as <span class="bold bold"><strong>www</strong></span>. The <span class="guilabel"><strong>Data</strong></span> is a standard IPv4 address, such as <span class="bold bold"><strong>192.168.1.2</strong></span>.
+ </div><div class="para">
+ More information about A records is in <a href="http://tools.ietf.org/html/rfc1035">RFC 1035</a>.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>IPv6</em></span>. This is a basic map for a hostname and an IPv6 address. The <span class="guilabel"><strong>Record Name</strong></span> is a hostname, such as <span class="bold bold"><strong>www</strong></span>. The <span class="guilabel"><strong>Data</strong></span> is a standard hexadecimal IPv6 address, such as <span class="bold bold"><strong>fe80::20c:29ff:fe02:a1b3</strong></span>.
+ </div><div class="para">
+ More information about AAAA records is in <a href="http://tools.ietf.org/html/rfc3596">RFC 3596</a>.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>SRV</em></span>. <em class="firstterm">Service (SRV) resource records</em> map service names to the DNS name of the server that is providing that particular service. The <span class="guilabel"><strong>Record Name</strong></span> has the format <span class="emphasis"><em>_service._protocol</em></span>, such as <span class="bold bold"><strong>_ldap._tcp</strong></span>. The <span class="guilabel"><strong>Data</strong></span> value sets the priority, weight, port number, and hostname for the target service. For example, <span class="bold bold"><strong>0 100 389 ldap.example.com</strong></span>.
+ </div><div class="para">
+ More information about SRV records is in <a href="http://tools.ietf.org/html/rfc2782">RFC 2782</a>.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>PTR</em></span>. A pointer record type (PTR) record adds a <span class="emphasis"><em>reverse</em></span> DNS record, which maps an IP address to a domain name. In this case, the <span class="guilabel"><strong>Record Name</strong></span> is the record ID number for the DNS entry of the resource and the <span class="guilabel"><strong>Data</strong></span> value is the hostname with a terminal period, such as <span class="bold bold"><strong>server.example.com.</strong></span>.
+ </div><div class="para">
+ More information about PTR records is in <a href="http://tools.ietf.org/html/rfc1035#page-12">RFC 1035</a>.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the new resource record.
+ </div></li></ol></div></div><div class="section" id="adding-dns-records-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-dns-records-cmd">8.9.2. Adding DNS Resource Records from the Command Line</h3></div></div></div><div class="para">
+ The <code class="command">ipa dnsrecord-add</code> command adds records to DNS zones, based on the type. Adding a record has the same basic command format:
+ </div><a id="id844451" class="indexterm"></a><a id="id844463" class="indexterm"></a><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>domainName urlLabel</code></em> --<em class="replaceable"><code>recordType</code></em>--rec <em class="replaceable"><code>record</code></em></pre><div class="para">
+ The <span class="emphasis"><em>recordType</em></span> is an identifier, such as <code class="command">a</code> for A or IPv4 records. The <span class="emphasis"><em>record</em></span> value is the actual entry, which has a value corresponding to the record type.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="command">ipa dnsrecord-add</code> command only creates forward entries, not reverse entries.
+ </div></div></div><a id="id844522" class="indexterm"></a><a id="id778638" class="indexterm"></a><div class="example" id="ex.ipv4-record"><h6>Example 8.3. IPv4 Record</h6><div class="example-contents"><div class="para">
+ Type A resource records map hostnames to IPv4 addresses. The <span class="emphasis"><em>record</em></span> value for these commands, then, is a standard IPv4 address. The URL label is usually www.
<pre class="screen">$ ipa dnsrecord-add example.com www --a-rec 10.64.14.165</pre>
- This creates the record <code class="uri">www.example.com</code> with the IP address 10.64.14.165.
- </div><div class="para">
- More information about A records is in <a href="http://tools.ietf.org/html/rfc1035">RFC 1035</a>.
- </div></div></div><br class="example-break" /><a id="id3244404" class="indexterm"></a><a id="id3121218" class="indexterm"></a><div class="example" id="ex.ipv6-record"><h6>Example 10.3. IPv6 Record</h6><div class="example-contents"><div class="para">
- Type AAAA resource records (<em class="firstterm">quad-A records)</em> map hostnames to IPv6 addresses. The <span class="emphasis"><em>record</em></span> value for these commands is an IPv6 address. As with Type A records, the URL label is usually www.
+ This creates the record <code class="uri">www.example.com</code> with the IP address 10.64.14.165.
+ </div><div class="para">
+ More information about A records is in <a href="http://tools.ietf.org/html/rfc1035">RFC 1035</a>.
+ </div></div></div><br class="example-break" /><a id="id778688" class="indexterm"></a><a id="id778700" class="indexterm"></a><div class="example" id="ex.ipv6-record"><h6>Example 8.4. IPv6 Record</h6><div class="example-contents"><div class="para">
+ Type AAAA resource records (<em class="firstterm">quad-A records)</em> map hostnames to IPv6 addresses. The <span class="emphasis"><em>record</em></span> value for these commands is an IPv6 address. As with Type A records, the URL label is usually www.
<pre class="screen">$ ipa dnsrecord-add example.com www --aaaa-rec fe80::20c:29ff:fe02:a1b3</pre>
- This creates the record <code class="uri">www.example.com</code> with the IP address fe80::20c:29ff:fe02:a1b3. More information about AAAA records is in <a href="http://tools.ietf.org/html/rfc3596">RFC 3596</a>.
- </div></div></div><br class="example-break" /><a id="id3121269" class="indexterm"></a><a id="id3121281" class="indexterm"></a><div class="example" id="ex.srv-record"><h6>Example 10.4. SRV Record</h6><div class="example-contents"><div class="para">
- <em class="firstterm">Service (SRV) resource records</em> map service names to the DNS name of the server that is providing that particular service. For example, this record type can map a service like an LDAP directory to the DNS server which manages it.
- </div><div class="para">
- As with Type A and Type AAAA records, SRV records specify a way to connect to and identify the service, but the record format is different.
- </div><div class="para">
- The <span class="emphasis"><em>urlLabel</em></span> identifies the service type and the connection protocol, in the format <span class="emphasis"><em>_service._protocol</em></span>.
- </div><div class="para">
- The <span class="emphasis"><em>record</em></span> information has the format <span class="emphasis"><em>"priority weight port target"</em></span>.
- </div><pre class="screen">$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="0 100 389 server1.example.com"
+ This creates the record <code class="uri">www.example.com</code> with the IP address fe80::20c:29ff:fe02:a1b3. More information about AAAA records is in <a href="http://tools.ietf.org/html/rfc3596">RFC 3596</a>.
+ </div></div></div><br class="example-break" /><a id="id612857" class="indexterm"></a><a id="id612869" class="indexterm"></a><div class="example" id="ex.srv-record"><h6>Example 8.5. SRV Record</h6><div class="example-contents"><div class="para">
+ <em class="firstterm">Service (SRV) resource records</em> map service names to the DNS name of the server that is providing that particular service. For example, this record type can map a service like an LDAP directory to the DNS server which manages it.
+ </div><div class="para">
+ As with Type A and Type AAAA records, SRV records specify a way to connect to and identify the service, but the record format is different.
+ </div><div class="para">
+ The <span class="emphasis"><em>urlLabel</em></span> identifies the service type and the connection protocol, in the format <span class="emphasis"><em>_service._protocol</em></span>.
+ </div><div class="para">
+ The <span class="emphasis"><em>record</em></span> information has the format <span class="emphasis"><em>"priority weight port target"</em></span>.
+ </div><pre class="screen">$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="0 100 389 server1.example.com"
$ ipa dnsrecord-add server.example.com _ldap._tcp --srv-rec="1 100 389 server2.example.com"</pre><div class="para">
- More information about SRV records is in <a href="http://tools.ietf.org/html/rfc2782">RFC 2782</a>.
- </div></div></div><br class="example-break" /><a id="id3275468" class="indexterm"></a><a id="id3275479" class="indexterm"></a><div class="example" id="ex.ptr-record"><h6>Example 10.5. PTR Record</h6><div class="example-contents"><div class="para">
- A pointer record type (PTR) record adds a <span class="emphasis"><em>reverse</em></span> DNS record, which maps an IP address to a domain name, rather than the other way around.
- </div><div class="para">
- All reverse DNS lookups for OPv4 addresses user reverse entries that are defined in the <code class="command">in-addr.arpa.</code> domain. The reverse address, in human-readable form, is the exact reverse of the regular IP address, with the <code class="command">in-addr.arpa.</code> domain appended to it. For example, for the IP address <code class="systemitem">192.0.1.2</code>, the reverse address is <code class="systemitem">2.1.0.192..in-addr.arpa</code>.
- </div><div class="para">
- When adding the reverse DNS record, the format of the <code class="command">dnsrecord-add</code> command is also reverse, compared to the usage for adding regular DNS entries:
- </div><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>reverseIpAddress recordId</code></em> --ptr-rec <em class="replaceable"><code>FQDN</code></em></pre><div class="para">
- The <span class="emphasis"><em>recordId</em></span> is the numeric identifier to use for the entry in the zone.
- </div><div class="para">
- For example, this adds a record with an ID of 4 for <code class="command">server2.example.com</code>:
- </div><pre class="screen">$ ipa dnsrecord-add 2.1.0.192..in-addr.arpa 4 --ptr-rec server2.example.com.</pre><div class="para">
- More information about PTR records is in <a href="http://tools.ietf.org/html/rfc1035#page-12">RFC 1035</a>.
- </div></div></div><br class="example-break" /></div><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-zones.html"><strong>Prev</strong>10.9. Enabling and Disabling Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Next</strong>10.11. Deleting Records from DNS Zones</a></li></ul></body></html>
+ More information about SRV records is in <a href="http://tools.ietf.org/html/rfc2782">RFC 2782</a>.
+ </div></div></div><br class="example-break" /><a id="id612945" class="indexterm"></a><a id="id789634" class="indexterm"></a><div class="example" id="ex.ptr-record"><h6>Example 8.6. PTR Record</h6><div class="example-contents"><div class="para">
+ A pointer record type (PTR) record adds a <span class="emphasis"><em>reverse</em></span> DNS record, which maps an IP address to a domain name, rather than the other way around.
+ </div><div class="para">
+ All reverse DNS lookups for IPv4 addresses user reverse entries that are defined in the <code class="command">in-addr.arpa.</code> domain. The reverse address, in human-readable form, is the exact reverse of the regular IP address, with the <code class="command">in-addr.arpa.</code> domain appended to it. For example, for the IP address <code class="systemitem">192.0.1.2</code>, the reverse address is <code class="systemitem">2.1.0.192..in-addr.arpa</code>.
+ </div><div class="para">
+ When adding the reverse DNS record, the format of the <code class="command">dnsrecord-add</code> command is also reverse, compared to the usage for adding regular DNS entries:
+ </div><pre class="screen">$ ipa dnsrecord-add <em class="replaceable"><code>reverseIpAddress recordId</code></em> --ptr-rec <em class="replaceable"><code>FQDN</code></em></pre><div class="para">
+ The <span class="emphasis"><em>recordId</em></span> is the numeric identifier to use for the entry in the zone.
+ </div><div class="para">
+ For example, this adds a record with an ID of 4 for <code class="command">server2.example.com</code>:
+ </div><pre class="screen">$ ipa dnsrecord-add 2.1.0.192..in-addr.arpa 4 --ptr-rec server2.example.com.</pre><div class="para">
+ More information about PTR records is in <a href="http://tools.ietf.org/html/rfc1035#page-12">RFC 1035</a>.
+ </div></div></div><br class="example-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-zones.html"><strong>Prev</strong>8.8. Enabling and Disabling Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Next</strong>8.10. Deleting Records from DNS Zones</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html
index fc286b7..7355857 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html
@@ -1,18 +1,38 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.11. Deleting Records from DNS Zones</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.10. Deleting Records from DNS Zones</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html" title="10.10. Adding Records to DNS Zones" /><link rel="next" href="dns-resolve.html" title="10.12. Resolving Hostnames in the FreeIPA Domain" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zon
es-Adding_Records_to_DNS_Zones.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="dns-resolve.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones"><div class="titlepage"><div><div><h2 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">10.11. Deleting Records from DNS Zones</h2></div></div></div><a id="id3180433" class="indexterm"></a><a id="id3180445" class="indexterm"></a><div class="para">
- Records are removed from the zone using the <code class="command">ipa dnsrecord-del</code> command. As with adding records, records are deleted using an option that specifies the type of record (<code class="option">--</code><span class="emphasis"><em>recordType</em></span><code class="option">-rec</code>) and the record value.
- </div><div class="para">
- For example, to remove the A type record:
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html" title="8.9. Adding Records to DNS Zones" /><link rel="next" href="dns-resolve.html" title="8.11. Resolving Hostnames in the FreeIPA Domain" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-
Adding_Records_to_DNS_Zones.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="dns-resolve.html"><strong>Next</strong></a></li></ul><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones">8.10. Deleting Records from DNS Zones</h2></div></div></div><a id="id893413" class="indexterm"></a><a id="id893425" class="indexterm"></a><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui">8.10.1. Deleting Records with the Web UI</h3></div></div></div><div class="para">
+ To delete only a specific record from the resource record:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab, click the name of the resource record.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link by the name of the record type to delete. This deletes only that record type while leaving the other configuration intact.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-types.png" width="444" /></div></div></li></ol></div><div class="para">
+ Alternatively, delete all of the records for the resource in the zone:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>DNS Resource Records</strong></span> tab, select the checkbox by the name of the resource record to delete. This deletes the entire record.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-record-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link at the top of the zone records page.
+ </div></li></ol></div></div><div class="section" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd">8.10.2. Deleting Records with the Command Line</h3></div></div></div><div class="para">
+ Records are removed from the zone using the <code class="command">ipa dnsrecord-del</code> command. As with adding records, records are deleted using an option that specifies the type of record (<code class="option">--</code><span class="emphasis"><em>recordType</em></span><code class="option">-rec</code>) and the record value.
+ </div><div class="para">
+ For example, to remove the A type record:
<pre class="screen">$ ipa dnsrecord-del example.com www --a-rec 10.64.14.213</pre>
- </div><div class="para">
- Alternatively, using the <code class="option">--del-all</code> option removes all associated records for the zone.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html"><strong>Prev</strong>10.10. Adding Records to DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="dns-resolve.html"><strong>Next</strong>10.12. Resolving Hostnames in the FreeIPA Domain</a></li></ul></body></html>
+ </div><div class="para">
+ Alternatively, using the <code class="option">--del-all</code> option removes all associated records for the zone.
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html"><strong>Prev</strong>8.9. Adding Records to DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="dns-resolve.html"><strong>Next</strong>8.11. Resolving Hostnames in the FreeIPA Domain</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html
index 8d817d6..d379bd9 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html
@@ -1,35 +1,42 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>15.4. Performing a Client-based Migration</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>17.5. Scenario 2: Using SSSD as Part of Migration</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 15. Migrating from a Directory Server to IPA" /><link rel="prev" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html" title="15.3. Performing a Server-based Migration" /><link rel="next" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html" title="Appendix A. Frequently Asked Questions" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/imag
e_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html"><strong>Next</strong></a></li></ul><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration"><div class="titlepage"><div><div><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">15.4. Performing a Client-based Migration</h2></div></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD">15.4.1. Step 1: Installing and Configuring SSSD</h3></div></div></div><div clas
s="itemizedlist"><ul><li class="listitem"><div class="para">
- Install SSSD first on the machines that can support it:
- </div><div class="para">
- <code class="command"># yum install sssd</code>
- </div></li><li class="listitem"><div class="para">
- Configure SSSD with the LDAP back end and point it to the existing DS deployment.
- </div></li></ul></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_2_Migrating_Existing_Data_to_IPA"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_2_Migrating_Existing_Data_to_IPA">15.4.2. Step 2: Migrating Existing Data to IPA</h3></div></div></div><div class="para">
- Install IPA and migrate the existing DS data as described in <a class="xref" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">Section 15.3.1, “Step 1: Migrating Existing Data to IPA”</a>
- </div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA">15.4.3. Step 3: Migrate SSSD Clients from LDAP to IPA</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Start moving clients that have SSSD installed from the LDAP back end to the IPA back end, and enroll them with IPA. This will download the required keys and certificates.
- </div></li><li class="listitem"><div class="para">
- Instruct users to use (that is, to log in at least once) the machines with SSSD and IPA back end, or go to the web page and authenticate.
- </div></li><li class="listitem"><div class="para">
- Monitor the user migration process using the following LDAP query. This query detects the state of the migration by determining which users do not have a Kerberos principal key but do have a password.
- </div><div class="para">
- This query will prompt for the Directory Manager password.
-<pre class="screen"><code class="command">$ ldapsearch -LL -x -D 'cn=Directory Manager' -W -b 'cn=users,cn=accounts,dc=example,dc=com' \</code>
-<code class="command">'(&(!(krbprincipalkey=*))(userpassword=*))' uid</code></pre>
-
- </div><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
- It is important to include the quotes around the filter so that it is not interpreted by the shell.
- </div></div></div></li></ul></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients">15.4.4. Step 4: Reconfigure non-SSSD Clients</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- As the user population is migrated (the Kerberos keys are generated), you can start reconfiguring other (non‐SSSD) clients as required. The clients can be set up in any state shown on the diagram above.
- </div></li></ul></div></div><div class="section" id="Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server">15.4.5. Step 5: Decommission the Directory Server</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- When the migration of the clients is complete, decommission the DS.
- </div></li></ul></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Prev</strong>15.3. Performing a Server-based Migration</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html"><strong>Next</strong>Appendix A. Frequently Asked Questions</a></li></ul></body></html>
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 17. Migrating from a 389 Directory Server to FreeIPA" /><link rel="prev" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html" title="17.4. Scenario 1: Migrating Directly to FreeIPA" /><link rel="next" href="certmongerX.html" title="Chapter 18. Working with certmonger" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a><
/p><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="certmongerX.html"><strong>Next</strong></a></li></ul><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration">17.5. Scenario 2: Using SSSD as Part of Migration</h2></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Set up SSSD. Using SSSD allows the required Kerberos keys and server certificates to be delivered to the clients.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install SSSD on every client machine:
+ </div><pre class="screen"># yum install sssd</pre></li><li class="listitem"><div class="para">
+ Configure SSSD to use the existing 389 Directory Server as its LDAP backend.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Install FreeIPA, including any custom Directory Server schema, on a different machine from the existing Directory Server.
+ </div></li><li class="listitem"><div class="para">
+ Enable the FreeIPA server to allow migration:
+ </div><pre class="screen"># ipa config-mod --enable-migration=TRUE</pre></li><li class="listitem"><div class="para">
+ Run the FreeIPA migration script, <code class="command">ipa migrate-ds</code>. At its most basic, this requires only the LDAP URL of the Directory Server instance to migrate:
+ </div><pre class="screen"># ipa migrate-ds ldap://ldap.example.com:389</pre><div class="para">
+ The <code class="command">ipa migrate-ds</code> command connects to the Directory Server and binds as the Directory Manager and extracts all entries with the <code class="command">person</code> object class from the <code class="command">ou=People</code> subtree, by default. A different subtree can be specified using the <code class="option">--user-container</code> option.
+ </div><div class="para">
+ This script also exports all entries from the <code class="command">ou=Groups</code> subtree to maintain group memberships. The group can be changed using the <code class="option">--group-container</code> option.
+ </div><div class="para">
+ Once the information is exported, the script adds all required FreeIPA object classes and attributes and coverts DNs in attributes to match the FreeIPA directory tree.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen"># ipa migrate-ds --user-container=ou=employees --group-container="ou=employee groups" ldap://ldap.example.com:389</pre></li><li class="listitem"><div class="para">
+ Move clients that have SSSD installed from the LDAP backend to the FreeIPA backend and enroll them as client with FreeIPA. This downloads the required keys and certificates.
+ </div></li><li class="listitem"><div class="para">
+ Have users to log into a machine with SSSD and FreeIPA backend. This generates the required Kerberos keys for the user.
+ </div><div class="para">
+ To monitor the user migration process, query the existing Directory Server to see which user accounts have a password but do not yet have a Kerberos principal key.
+ </div><pre class="screen">$ ldapsearch -LL -x -D 'cn=Directory Manager' -w secret -b 'ou=people,dc=example,dc=com' '(&(!(krbprincipalkey=*))(userpassword=*))' uid</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Include the quotes around the filter so that it is not interpreted by the shell.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Once users have been migrated over, configure non-SSSD clients to use the FreeIPA domain, as required.
+ </div></li><li class="listitem"><div class="para">
+ When the migration of all clients and users is complete, decommission the Directory Server.
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Prev</strong>17.4. Scenario 1: Migrating Directly to FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="certmongerX.html"><strong>Next</strong>Chapter 18. Working with certmonger</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html
index 16648ea..7cd2b6e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html
@@ -1,68 +1,42 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>15.3. Performing a Server-based Migration</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>17.4. Scenario 1: Migrating Directly to FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 15. Migrating from a Directory Server to IPA" /><link rel="prev" href="Overview-Recommended_Sequence_of_Steps.html" title="15.2. Recommended Sequence of Steps" /><link rel="next" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html" title="15.4. Performing a Client-based Migration" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Si
te" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Next</strong></a></li></ul><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration"><div class="titlepage"><div><div><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">15.3. Performing a Server-based Migration</h2></div></div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">15.3.1. Step 1: Migrating Existing Data to IPA</h3></div></div></div><div class="para">
- The first phase of the migration consists of setting up IPA and migrating data from the existing DS to that used by IPA. This involves the use of the <code class="command">ipa migrate-ds</code> command, which dumps the user data from the original DS, converts it into a format suitable for use by IPA, and then loads the converted data into IPA.
- </div><div class="para">
- The <code class="command">ipa migrate-ds</code> command connects to the DS and binds as the <code class="systemitem">Directory Manager</code>, and then extracts all objectClass=person objects from ou=People. This can be changed using the <code class="option">--user-container</code> option. It also extracts all objects from ou=Groups. This can be changed using the <code class="option">--group-container</code> option. It adds all object classes and attributes required by IPA (if they are missing) and coverts DNs in attributes to match the IPA Directory Information Tree (DIT). The command returns an error if migration is not enabled.
- </div><div class="para">
- Refer to the <code class="command">ipa migrate-ds</code> help page for more details about this command (<code class="command">ipa help migrate-ds</code>).
- </div><div class="procedure" id="Phase_1_Migrating_Existing_Data_to_IPA-To_migrate_existing_data_to_IPA"><h6>Procedure 15.1. To migrate existing data to IPA:</h6><ol class="1"><li class="step"><div class="para">
- Install IPA, including any custom DS schema, on a different machine from the existing DS.
- </div></li><li class="step"><div class="para">
- Use the following command to enable IPA migration mode:
- </div><div class="para">
- <code class="command"># ipa config-mod --enable-migration=TRUE</code>
- </div></li><li class="step"><div class="para">
- To migrate users and groups from an existing Directory Server using a default configuration, reachable at <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em></code>, use the following command:
- </div><div class="para">
- <code class="command"># ipa migrate-ds <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em>:389</code></code>
- </div><div class="para">
- To migrate users and groups from an existing IPAv1 installation using a default configuration, whose DS is reachable at <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em></code>, use the following command:
- </div><div class="para">
- <code class="command"># ipa migrate-ds --user-container=cn=users,cn=accounts \</code> <code class="command">--group-container=cn=groups,cn=accounts <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em>:389</code></code>
- </div><div class="para">
- In this example, <code class="uri">ldap://<em class="replaceable"><code>example.com</code></em>:389</code> is the LDAP-URI and port number of the existing directory server from which you want to migrate your data. Update this URI to suit your own environment.
- </div><div class="para">
- Enter the <code class="systemitem">Directory Manager</code> password for the DS when prompted.
- </div></li><li class="step"><div class="para">
- Check the log file for errors and instructions on how to address them.
- <div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- The migration log file is currently not implemented. Instead, any error messages are printed to standard output.
- </div></div></div>
-
- </div></li></ol></div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Configuration"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Configuration">15.3.2. Step 2: Updating the Client Configuration</h3></div></div></div><div class="procedure" id="Phase_2_Updating_the_Client_Configuration-To_update_the_client_configuration"><h6>Procedure 15.2. To update the client configuration:</h6><ul><li class="step"><div class="para">
- Update the client configuration to use PAM_LDAP and NSS_LDAP to connect to IPA instead of connecting to DS, NIS, or using local files.
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- If the intention is to automatically generate the Kerberos keys when a user authenticates, the configuration should use startTLS and simple bind authentication. For this to occur, the IT department needs to ensure the IPA server certificate is copied to the client.
- </div></li><li class="listitem"><div class="para">
- If the intention is to install SSSD on a client at a later date, the startTLS and certificate requirements do not apply.
- </div></li></ul></div>
-
- </div></li></ul></div><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
- You should not update your client configuration to use PAM_KRB5 and NSS_LDAP (that is, the equivalent of IPA v1) at this stage unless absolutely necessary. This is because the Kerberos keys will not yet exist in the IPA user entries, and consequently users will not be able to log in. If such a configuration is required, users can be directed to a specific web page on the IPA server after the data has been loaded into the IPA server. This page will prompt the user for their password and perform an LDAP bind. The DS password plug-in will capture these passwords and generate the Kerberos keys.
- </div></div></div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">15.3.3. Step 3: Installing and Configuring SSSD</h3></div></div></div><div class="formalpara" id="Phase_3_Installing_and_Configuring_SSSD-To_install_and_configure_SSSD"><h5 class="formalpara">To install and configure SSSD:</h5>
- <div class="orderedlist"><ol><li class="listitem"><div class="para">
- Install SSSD on the machines that can support it:
- </div><div class="para">
- <code class="command"># yum install sssd</code>
- </div></li><li class="listitem"><div class="para">
- Configure SSSD to use IPA as a back end (Kerberos and LDAP). Installing SSSD and enrolling the client with IPA will ensure delivery of the machine Kerberos key and server certificate to the client.
- </div></li></ol></div>
-
- </div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_4_Migrating_Users"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_4_Migrating_Users">15.3.4. Step 4: Migrating Users</h3></div></div></div><div class="formalpara" id="Phase_4_Migrating_Users-To_migrate_the_users_from_DS_to_IPA"><h5 class="formalpara">To migrate the users from DS to IPA:</h5>
- <div class="orderedlist"><ol><li class="listitem"><div class="para">
- Instruct users to log in to IPA using either an SSSD client or a client that supports PAM_LDAP with startTLS and simple bind. An SSSD client configured as described in <a class="xref" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">Section 15.3.3, “Step 3: Installing and Configuring SSSD”</a> will perform a silent migration. Clients configured with startTLS and simple bind will also trigger key generation. A Kerberos key is created the first time a user logs in, and this key is stored in the IPA back end.
- </div></li><li class="listitem"><div class="para">
- As the migration of the user population progresses (that is, as the Kerberos keys are generated on the IPA server), you can begin to configure other, non-SSSD clients to suit your requirements.
- </div></li></ol></div>
-
- </div></div><div class="section" id="Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS"><div class="titlepage"><div><div><h3 class="title" id="Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS">15.3.5. Step 5: Decommission the DS</h3></div></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- When the migration of all clients and users is complete, decommission the DS.
- </div></li></ul></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Prev</strong>15.2. Recommended Sequence of Steps</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Next</strong>15.4. Performing a Client-based Migration</a></li></ul></body></html>
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 17. Migrating from a 389 Directory Server to FreeIPA" /><link rel="prev" href="Overview-Recommended_Sequence_of_Steps.html" title="17.3. Migration Sequence" /><link rel="next" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html" title="17.5. Scenario 2: Using SSSD as Part of Migration" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentat
ion Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Next</strong></a></li></ul><div class="section" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration">17.4. Scenario 1: Migrating Directly to FreeIPA</h2></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install FreeIPA, including any custom Directory Server schema, on a different machine from the existing Directory Server.
+ </div></li><li class="listitem"><div class="para">
+ Enable the FreeIPA server to allow migration:
+ </div><pre class="screen"># ipa config-mod --enable-migration=TRUE</pre></li><li class="listitem"><div class="para">
+ Run the FreeIPA migration script, <code class="command">ipa migrate-ds</code>. At its most basic, this requires only the LDAP URL of the Directory Server instance to migrate:
+ </div><pre class="screen"># ipa migrate-ds ldap://ldap.example.com:389</pre><div class="para">
+ The <code class="command">ipa migrate-ds</code> command connects to the Directory Server and binds as the Directory Manager and extracts all entries with the <code class="command">person</code> object class from the <code class="command">ou=People</code> subtree, by default. A different subtree can be specified using the <code class="option">--user-container</code> option.
+ </div><div class="para">
+ This script also exports all entries from the <code class="command">ou=Groups</code> subtree to maintain group memberships. The group can be changed using the <code class="option">--group-container</code> option.
+ </div><div class="para">
+ Once the information is exported, the script adds all required FreeIPA object classes and attributes and coverts DNs in attributes to match the FreeIPA directory tree.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen"># ipa migrate-ds --user-container=ou=employees,dc=example,dc=com --group-container="ou=employee groups,dc=example,dc=com" ldap://ldap.example.com:389</pre></li><li class="listitem"><div class="para">
+ Update the client configuration to use PAM_LDAP and NSS_LDAP to connect to FreeIPA instead of connecting to Directory Server, NIS, or local files.
+ </div><div class="para">
+ <span class="emphasis"><em>For SSSD.</em></span> If the Kerberos keys will be automatically generated when a user authenticates, the configuration must use Start TLS and simple bind authentication. Additionally, copy the FreeIPA server certificate is to the client.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Optional.</em></span> Set up SSSD. Using SSSD allows the required Kerberos keys and server certificates to be delivered to the clients.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install SSSD on every client machine:
+ </div><pre class="screen"># yum install sssd</pre></li><li class="listitem"><div class="para">
+ Configure SSSD to use FreeIPA as an LDAP backend and enable Kerberos, using FreeIPA as the KDC server.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Instruct users to log in to FreeIPA using either an SSSD client or a client that supports PAM_LDAP with Statr TLS and simple bind.
+ </div></li><li class="listitem"><div class="para">
+ Once users have been migrated over, configure non-SSSD clients to use the FreeIPA domain, as required.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Use PAM_LDAP modules until all of the users have been migrated; then it is possible to use PAM_KRB5.
+ </div></div></div></li><li class="listitem"><div class="para">
+ When the migration of all clients and users is complete, decommission the Directory Server.
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Prev</strong>17.3. Migration Sequence</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Next</strong>17.5. Scenario 2: Using SSSD as Part of Migration</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA.html
index 458c3b8..e945d65 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Migrating_from_a_Directory_Server_to_IPA.html
@@ -1,56 +1,34 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 15. Migrating from a Directory Server to IPA</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 17. Migrating from a 389 Directory Server to FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="certmongerX.html" title="14.6. Working with certmonger" /><link rel="next" href="Overview-Recommended_Sequence_of_Steps.html" title="15.2. Recommended Sequence of Steps" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="certmongerX.html"><strong>Prev</strong></a></li><li cl
ass="next"><a accesskey="n" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="Migrating_from_a_Directory_Server_to_IPA" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 15. Migrating from a Directory Server to IPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA.html#Overview-Assumptions">15.1. Understanding Red Hat Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="Overview-Recommended_Sequence_of_Steps.html">15.2. Recommended Sequence of Steps</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html">15.3. Performing a Server-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_S
erver_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">15.3.1. Step 1: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Configuration">15.3.2. Step 2: Updating the Client Configuration</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_3_Installing_and_Configuring_SSSD">15.3.3. Step 3: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_4_Migrating_Users">15.3.4. Step 4: Migrating Users</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Perfo
rming_a_Server_based_Migration-Phase_5_Decommission_the_DS">15.3.5. Step 5: Decommission the DS</a></span></dt></dl></dd><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html">15.4. Performing a Client-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD">15.4.1. Step 1: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_2_Migrating_Existing_Data_to_IPA">15.4.2. Step 2: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD
_Clients_from_LDAP_to_IPA">15.4.3. Step 3: Migrate SSSD Clients from LDAP to IPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients">15.4.4. Step 4: Reconfigure non-SSSD Clients</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_5_Decommission_the_Directory_Server">15.4.5. Step 5: Decommission the Directory Server</a></span></dt></dl></dd></dl></div><div class="para">
- This chapter addresses the situation where a customer has previously deployed an internal Directory Server (DS) and is planning to use IPA instead. The customer needs to transfer all user data from the DS to IPA so that IPA can function fully and correctly. The goal is to perform this migration without requiring that users change their passwords or perform some other specific action.
- </div><div class="section" id="Overview-Assumptions"><div class="titlepage"><div><div><h2 class="title" id="Overview-Assumptions">15.1. Understanding Red Hat Directory Server to FreeIPA Migration</h2></div></div></div><div class="para">
- It is not practical to identify and address each of the scenarios in which a DS and IPA might be deployed, and where migration might be required. Consequently, the following assumptions are made:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- This is a one-to-one transition from one DS realm to one IPA realm. No consolidation is involved.
- </div></li><li class="listitem"><div class="para">
- User passwords are stored as a hash in the source DS in a form that the IPA DS can understand
- </div></li><li class="listitem"><div class="para">
- You are using LDAP as the central authentication service, and the client machines are configured to use <code class="systemitem">pam_ldap</code> and <code class="systemitem">nss_ldap</code>
- </div></li><li class="listitem"><div class="para">
- Some machines might be present that are managed by <code class="systemitem">NIS</code> or are not part of the DS deployment, but are planned to be part of the IPA domain
- </div><div class="para">
- Machines that cannot be moved from the <code class="systemitem">NIS</code> domain to LDAP or IPA because they are old and do not support <code class="systemitem">nss_ldap</code> are assumed to remain in and be served by the <code class="systemitem">NIS</code> domain. The migration of such machines to the IPA domain, while possible, is a challenging task and is out of the scope of the current use case.
- </div></li></ul></div><div class="para">
- The following have been identified as typical migration scenarios:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Migrate an existing environment to IPA but do not use its Kerberos features for now
- </div></li><li class="listitem"><div class="para">
- Migrate an existing environment to IPA and use its Kerberos features using only IPA v1 functionality. That is, do not use SSSD.
- </div></li><li class="listitem"><div class="para">
- Migrate an existing environment to IPA and use its Kerberos features on some machines, while some machines will use SSSD and some will not; this is the primary use case.
- </div></li></ul></div><div class="para">
- In the initial state, there is a single data source (the Directory Server) and a single client machine configuration. This client configuration uses <code class="systemitem">LDAP</code> to connect to the Directory Server and retrieve information about users and groups. This configuration uses <code class="systemitem">PAM_LDAP</code> and <code class="systemitem">NSS_LDAP</code> for authentication and identity lookups. These modules enable the client systems to use data retrieved from the DS just as if it were stored in <code class="filename">/etc/passwd</code> or <code class="filename">/etc/shadow</code>. The following diagram illustrates this type of implementation, where <code class="systemitem">LDAP</code> is used to connect to the DS for both authentication and authorization. The case where <code class="systemitem">Kerberos</code> is used for authentication and <code class="systemitem">LDAP</code> for identity, and where these two data stores are synchronized, is not d
escribed here. Consequently, the initial state may not be as simple or as straightforward as displayed here, however the approach and the final state will be similar.
- </div><div class="figure" id="Initial_State-Initial_state_of_deployment_before_migrating_to_IPA."><div class="figure-contents"><div class="mediaobject"><img src="./images/IPA_Migration_Initial_State.png" alt="Initial state of deployment before migrating to IPA." /></div></div><h6>Figure 15.1. Initial state of deployment before migrating to IPA.</h6></div><br class="figure-break" /><div class="para">
- In the final state, even though only a single data source exists, multiple possible machine configurations are now possible. This is illustrated in <a class="xref" href="Migrating_from_a_Directory_Server_to_IPA.html#Final_State-Final_state_of_deployment_after_migrating_to_IPA">Figure 15.2, “Final state of deployment after migrating to IPA”</a>
- </div><div class="figure" id="Final_State-Final_state_of_deployment_after_migrating_to_IPA"><div class="figure-contents"><div class="mediaobject"><img src="./images/IPA_Migration_Final_State.png" alt="Final state of deployment after migrating to IPA" /></div></div><h6>Figure 15.2. Final state of deployment after migrating to IPA</h6></div><br class="figure-break" /><div class="formalpara" id="Configuration_Options-Connected_to_IPA_via_SSSD_Using_SSSDs_LDAP_Back_End"><h5 class="formalpara">Connected to IPA via SSSD Using SSSD's LDAP Back End</h5>
- Clients connect to IPA via SSSD. SSSD is integrated into the PAM and NSS stacks by means of PAM_SSS and NSS_SSS, respectively. SSSD's LDAP back end is configured for both authentication and for identity lookups. In this use case, IPA functions like a normal DS.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- Kerberos authentication can be configured instead of LDAP authentication. In this case, IPA acts as a normal DS for identity lookups and a normal KDC for Kerberos authentication.
- </div></div></div><div class="formalpara" id="Configuration_Options-Connected_to_IPA_via_SSSD_Using_IPAs_Back_End"><h5 class="formalpara">Connected to IPA via SSSD Using IPA's Back End</h5>
- This configuration is similar to that described above, except that SSSD has a special back end that is more IPA-aware. If this back end is configured, then SSSD can take advantage of specific IPA features, such as silent password migration and host-based access control.
- </div><div class="formalpara" id="Configuration_Options-LDAP_connected_Machines"><h5 class="formalpara">LDAP-connected Machines</h5>
- Clients connect directly to IPA and use PAM_LDAP and NSS_LDAP. In this use case, too, IPA functions like a normal Directory Server.
- </div><div class="formalpara" id="Configuration_Options-KRB5LDAP_connected_Machines"><h5 class="formalpara">KRB5/LDAP-connected Machines</h5>
- Clients connect directly to IPA and use PAM_KRB5 and NSS_LDAP. This is the same configuration as that provided for IPA v1.x
- </div><div class="para">
- In the initial state, clients use LDAP to communicate with the Directory Server to retrieve information about users and groups. <code class="systemitem">PAM_LDAP</code> and <code class="systemitem">NSS_LDAP</code> are modules that enable the client systems to use data retrieved from the Directory Server as if it were stored in <code class="filename">/etc/passwd</code> or <code class="filename">/etc/shadow</code>. In the final state, IPA provides all of the same functionality and many more features besides.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="upgrading-server.html" title="16.8. Testing Before Upgrading the FreeIPA Server" /><link rel="next" href="migration-considerations.html" title="17.2. Migration Considerations" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="upgrading-server.html"><strong>Prev</strong></a
></li><li class="next"><a accesskey="n" href="migration-considerations.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="Migrating_from_a_Directory_Server_to_IPA" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 17. Migrating from a 389 Directory Server to FreeIPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA.html#Overview-Assumptions">17.1. Understanding 389 Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="migration-considerations.html">17.2. Migration Considerations</a></span></dt><dt><span class="section"><a href="Overview-Recommended_Sequence_of_Steps.html">17.3. Migration Sequence</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html">17.4. Scenario 1: Migrating Directly to FreeIPA</a></span></dt><dt><span class="section"><a h
ref="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html">17.5. Scenario 2: Using SSSD as Part of Migration</a></span></dt></dl></div><div class="para">
+ When an infrastructure has previously deployed a 389 Directory Server instance for authentication and identity lookups, it is possible to migrate the user data, including passwords, to a new FreeIPA instance, without losing user or password data.
+ </div><div class="para">
+ FreeIPA has migration tools to help move directory data and only requires minimal updates to clients. However, the migration process assumes a very simple deployment scenario (one Directory Server system to one FreeIPA realm).
+ </div><div class="section" id="Overview-Assumptions"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Overview-Assumptions">17.1. Understanding 389 Directory Server to FreeIPA Migration</h2></div></div></div><div class="para">
+ A directory service provides a simple and clear method for network clients to look up required information. For authentication and authorization, this means specifically a means of looking up user data and associated passwords and access controls. Directory services like 389 Directory Server offer a number of different directory hierarchies; still, at its most basic level, an LDAP client simply needs to connect to the LDAP server to retrieve information.
+ </div><div class="figure" id="basic-ldap-client-config"><div class="figure-contents"><div class="mediaobject"><img src="images/IPA_Migration_Initial_State.png" alt="Basic Directory Server and Client Configuration" /></div></div><h6>Figure 17.1. Basic Directory Server and Client Configuration</h6></div><br class="figure-break" /><div class="para">
+ On Fedora-based clients, the clients use PAM_LDAP and NSS_LDAP libraries to connect to the LDAP services. These libraries retrieve allow clients to retrieve user information from the Directory Server <span class="emphasis"><em>as if</em></span> the data were stored in <code class="filename">/etc/passwd</code> or <code class="filename">/etc/shadow</code>. In real life, the infrastructure may be more complex if the Directory Server or the client is using Kerberos for authentication, but the basic scenario is illustrated in <a class="xref" href="Migrating_from_a_Directory_Server_to_IPA.html#basic-ldap-client-config">Figure 17.1, “Basic Directory Server and Client Configuration”</a>.
</div><div class="para">
- A number of issues exist that need to be considered when planning the migration:
+ There are significant structural differences between a Directory Server and a FreeIPA server, particularly in the default schema, support for custom schema, and the structure of the directory tree. For more background on those differences, see <a class="xref" href="introduction.html#ipa-v-ldap">Section 1.1, “FreeIPA v. LDAP: A More Focused Type of Service”</a>. While those differences may impact client configuration (especially with the directory tree, which affects entry names), there should be little impact on the migration process.
+ </div><div class="para">
+ The FreeIPA-client structure is different than the basic LDAP-client structure. There are two important deployment options that govern how clients connect to FreeIPA:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- A generic DS uses a different schema and <em class="firstterm">Directory Information Tree (DIT)</em> when compared to IPA. No known DS uses the same flat DIT structure that IPA uses. IPA is optimized for performance, and attempts to avoid any architectural design flaws that have occurred in the past.
+ Whether the system uses SSSD.
</div></li><li class="listitem"><div class="para">
- IPA uses Kerberos for authentication, and so each user requires that Kerberos keys be stored in the IPA DS, in addition to the standard LDAP hashes used by the DS
- </div><div class="para">
- In order to generate these keys, the password needs to be available in clear text to IPA's DS password plug-in. It is available when the user is created in IPA using IPA tools or LDAP, but this is not the case when the user is migrated from other external storage such as another DS. Consequently, the existing password hashes can be reloaded, but the Kerberos hashes cannot be generated. IPA provides a number of solutions to overcome this issue; these are described later in this chapter.
- </div></li></ul></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="certmongerX.html"><strong>Prev</strong>14.6. Working with certmonger</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Next</strong>15.2. Recommended Sequence of Steps</a></li></ul></body></html>
+ Whether clients use Kerberos with FreeIPA.
+ </div></li></ul></div><div class="para">
+ With SSSD, the client connects to SSSD to check the credentials cache. SSSD works with the PAM_SSS and NSS_SSS modules for authentication. One configuration option is for SSSD to use an LDAP backend to store the usernames and passwords; the client connects to SSSD and SSSD connects to that LDAP store. The identity lookups are performed against SSSD's LDAP backend, and FreeIPA works as a normal directory service.
+ </div><div class="figure" id="migration-with-sssd"><div class="figure-contents"><div class="mediaobject"><img src="images/migr-sssd.png" width="444" alt="Clients and SSSD with an LDAP Backend" /></div></div><h6>Figure 17.2. Clients and SSSD with an LDAP Backend</h6></div><br class="figure-break" /><div class="para">
+ SSSD can also use FreeIPA to store the usernames and passwords. The client still connects to SSSD, and then the identity lookups are performed against SSSD's FreeIPA backend. In this case, SSSD can use other features of FreeIPA, like host-based access control, as part of its authentication process. Once the client is authenticated, FreeIPA works as a normal directory service.
+ </div><div class="figure" id="migration-with-sssd2"><div class="figure-contents"><div class="mediaobject"><img src="images/migr-sssd2.png" width="444" alt="Clients and SSSD with a FreeIPA Backend" /></div></div><h6>Figure 17.3. Clients and SSSD with a FreeIPA Backend</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Kerberos authentication can be configured instead of LDAP authentication with SSSD. Either LDAP or FreeIPA is used for identity lookups and then FreeIPA serves as a normal KDC for Kerberos authentication.
+ </div></div></div><div class="para">
+ Alternatively, clients can connect directly to the FreeIPA server for authentication. This can be done using LDAP authentication and authenticating against the FreeIPA server's LDAP backend or using Kerberos authentication and using FreeIPA as a Kerberos KDC. For LDAP authentication, the system uses the PAM_LDAP module. For Kerberos authentication, it uses the PAM_KRB5 module. Because LDAP is used as the authentication store in either scenario, the system uses the NSS_LDAP module to connect to the FreeIPA directory service.
+ </div><div class="figure" id="migration-with-krb"><div class="figure-contents"><div class="mediaobject"><img src="images/migr-ldap.png" alt="Clients and FreeIPA with LDAP/LDAP or LDAP/Kerberos Authentication" /></div></div><h6>Figure 17.4. Clients and FreeIPA with LDAP/LDAP or LDAP/Kerberos Authentication</h6></div><br class="figure-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="upgrading-server.html"><strong>Prev</strong>16.8. Testing Before Upgrading the FreeIPA Server</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="migration-considerations.html"><strong>Next</strong>17.2. Migration Considerations</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Overview-Recommended_Sequence_of_Steps.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Overview-Recommended_Sequence_of_Steps.html
index 4ae455c..a62f88d 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Overview-Recommended_Sequence_of_Steps.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Overview-Recommended_Sequence_of_Steps.html
@@ -1,66 +1,28 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>15.2. Recommended Sequence of Steps</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>17.3. Migration Sequence</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 15. Migrating from a Directory Server to IPA" /><link rel="prev" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 15. Migrating from a Directory Server to IPA" /><link rel="next" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html" title="15.3. Performing a Server-based Migration" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" a
lt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Next</strong></a></li></ul><div class="section" id="Overview-Recommended_Sequence_of_Steps"><div class="titlepage"><div><div><h2 class="title" id="Overview-Recommended_Sequence_of_Steps">15.2. Recommended Sequence of Steps</h2></div></div></div><div class="para">
- The migration from DS to IPA requires:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Installing IPA on a suitable machine
- </div></li><li class="listitem"><div class="para">
- Migrating the user data. This step is performed by an IPA command which:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Dumps the data from DS
- </div></li><li class="listitem"><div class="para">
- Converts the data into a format suitable for IPA
- </div></li><li class="listitem"><div class="para">
- Loads the converted data into IPA
- </div></li></ol></div></li><li class="listitem"><div class="para">
- Reconfiguring clients to connect to IPA. This is required because the IPA Directory Information Tree (DIT) is different from the DS DIT.
- </div></li></ol></div><div class="para">
- To achieve a successful migration, changes are required both on the client and on the server machines. Reconfiguration of the clients is not required immediately after changes are made to the server. This allows for a transition period, without which it would not be possible to deploy the solution.
- </div><div class="para">
- At present the only option is to run IPA and DS concurrently until all the clients are reconfigured to point to IPA. Two main migration strategies currently exist:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Migrate the server first
- </div></li><li class="listitem"><div class="para">
- Deploy SSSD first
- </div></li></ul></div><div class="para">
- Each approach is valid and accomplishes the same goal, but using a different sequence of operations.
- </div><div class="para">
- Each approach has a different impact on the IT team and the users. You need to select the approach that best suits your deployment. These scenarios can be modified to meet the needs of your enterprise. Provided you understand the implications and reasoning behind each step, there is no requirement to follow the steps in the given order. It is important to understand that until the Kerberos keys are generated in IPA, users will not be able to authenticate with Kerberos credentials using <code class="systemitem">PAM_KRB5</code> or <code class="command">kinit</code>.
- </div><div class="para">
- You should also consider an alternative migration scenario, where passwords are not migrated. In this scenario, users are not migrated into IPA but rather added as new users with new passwords. Users would then change their password the first time they authenticate. The initial password would be defined by IT and sent to users by email or communicated in some other way.
- </div><div class="para">
- Migrating users from an existing system provides a smoother transition but also requires parallel management of DS and IPA during the migration. If you do not preserve passwords, the migration can be performed more quickly and you can avoid the period of double management of IPA and DS.
- </div><div class="para">
- The following sequence of operations occurs when users are migrated using SSSD:
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 17. Migrating from a 389 Directory Server to FreeIPA" /><link rel="prev" href="migration-considerations.html" title="17.2. Migration Considerations" /><link rel="next" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html" title="17.4. Scenario 1: Migrating Directly to FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site"
/></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="migration-considerations.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Next</strong></a></li></ul><div class="section" id="Overview-Recommended_Sequence_of_Steps"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Overview-Recommended_Sequence_of_Steps">17.3. Migration Sequence</h2></div></div></div><div class="para">
+ There are a lot of different possible configuration scenarios for both 389 Directory Server and FreeIPA, and any of those scenarios may affect the migration process. For this migration procedure, these are the assumptions about the scenarios:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- A user tries to log in to the machine.
+ A single Directory Server domain is being migrated to one FreeIPA realm. No consolidation is involved.
</div></li><li class="listitem"><div class="para">
- SSSD passes authentication to the IPA identity provider back end.
+ User passwords are stored as a hash in the Directory Server that the FreeIPA Directory Server can support.
</div></li><li class="listitem"><div class="para">
- The IPA identity provider back end attempts Kerberos authentication.
- </div></li><li class="listitem"><div class="para">
- Even though the user exists in the system, the authentication will fail with the error "key type is not supported", because the Kerberos keys do not yet exist.
- </div></li><li class="listitem"><div class="para">
- If SSSD is configured to migrate users, it will continue to the next step. Otherwise, it will fail authentication.
- </div></li><li class="listitem"><div class="para">
- The IPA identity provider back end then attempts to perform an LDAP bind.
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Because it is going to perform a simple bind and send the password in the clear, this LDAP bind operation must use startTLS.
- </div></li><li class="listitem"><div class="para">
- Perform a simple bind.
- </div></li></ul></div>
-
+ The Directory Server instance is both the identity store and the authentication method.
+ </div></li></ul></div><div class="para">
+ There are three major steps when migrating to FreeIPA:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Install FreeIPA.
</div></li><li class="listitem"><div class="para">
- The server-side plug-in will intercept this bind request and if the user has a Kerberos principal but no Kerberos keys, then the plug-in will generate the keys and store them in the user entry.
+ Migrate the user data using the FreeIPA <code class="command">ipa-migrate-ds</code> script. This exports the data from Directory Server, formats for the FreeIPA schema, and then imports it into FreeIPA.
</div></li><li class="listitem"><div class="para">
- If the bind operation fails for any reason, the IPA identity provider back end will fail authentication, otherwise it will continue.
+ <span class="emphasis"><em>Optional.</em></span> Deploy SSSD.
</div></li><li class="listitem"><div class="para">
- The IPA identity provider back end will unbind and try Kerberos authentication again. This time it is expected to succeed because the keys already exist in the entry.
- </div></li></ul></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Prev</strong>Chapter 15. Migrating from a Directory Server to ...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Next</strong>15.3. Performing a Server-based Migration</a></li></ul></body></html>
+ Reconfigure clients to connect to FreeIPA. This is required because the FreeIPA directory tree — and therefore user entry DNs — is different from the Directory Server tree. Clients do not need to be reconfigured immediately, so there can be a reasonable testing and transition phase after the data are migrated.
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="migration-considerations.html"><strong>Prev</strong>17.2. Migration Considerations</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html"><strong>Next</strong>17.4. Scenario 1: Migrating Directly to FreeIPA</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Preface.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Preface.html
index 4b315bf..23b081d 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Preface.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Preface.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Preface</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Preface</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="next" href="Document_Conventions.html" title="2. Examples and Formatting" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="index.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="
Document_Conventions.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="preface" id="Preface" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Preface</h1></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="next" href="Document_Conventions.html" title="2. Examples and Formatting" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="index.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href=
"Document_Conventions.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="preface" id="Preface" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Preface</h1></div></div></div><div class="para">
FreeIPA is a Fedora-based way to create a security, identity, and authentication domain. The different security and authentication protocols available to Linux and Unix systems (like Kerberos, NIS, DNS, PAM, and sudo) are complex, unrelated, and difficult to manage coherently, especially when combined with different identity stores.
</div><div class="para">
FreeIPA provides a layer that unifies all of these disparate services and simplifies the administrative tasks for managing users, systems, and security. FreeIPA breaks management down into two categories: <span class="emphasis"><em>identity</em></span> and <span class="emphasis"><em>policy</em></span>. It centralizes the functions of managing the users and entities within your IT environment (identity) and then provides a framework to define authentication and authorization for a global security framework and user-friendly tools like single sign-on (policy).
- </div><div class="section" id="audience"><div class="titlepage"><div><div><h2 class="title" id="audience">1. Audience and Purpose</h2></div></div></div><div class="para">
+ </div><div class="section" id="audience"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="audience">1. Audience and Purpose</h2></div></div></div><div class="para">
With FreeIPA, a Fedora system can easily become the center of an identity/authentication domain and even provide access to the domain for clients of other operating systems. FreeIPA is an integrated system, that builds on existing and reliable technologies like LDAP and certificate protocols, with a robust yet straightforward set of tools (including a web-based UI). The key to identity/policy management with FreeIPA is simplicity and flexibility:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Centralized identity stores for authentication and single sign-on using both integrated LDAP services (with 389 Directory Server) and, optionally, NIS services
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_Account-lockout_Policies.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_Account-lockout_Policies.html
new file mode 100644
index 0000000..812c0cd
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_Account-lockout_Policies.html
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.6. Setting Account Lockout Policies</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="prev" href="Setting_the_Priority_of_Password_Policies.html" title="11.5. Changing the Priority of Group Password Policies" /><link rel="next" href="Using_SSH_for_Password_Authentication.html" title="11.7. Enabling a Password Change Dialog" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previo
us"><a accesskey="p" href="Setting_the_Priority_of_Password_Policies.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Using_SSH_for_Password_Authentication.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_Account-lockout_Policies"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_Account-lockout_Policies">11.6. Setting Account Lockout Policies</h2></div></div></div><div class="para">
+ A brute force attack occurs when a malefactor attempts to guess a password by simply slamming the server with multiple login attempts. An account lockout policy prevents brute force attacks by blocking an account from logging into the system after a certain number of login failures — even if the correct password is subsequently entered.
+ </div><div class="para">
+ There are three parts to the account lockout policy:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The number of failed login attempts before the account is locked (<code class="option">--maxfail</code>).
+ </div></li><li class="listitem"><div class="para">
+ How long an account is locked after the max number of failures is reached (<code class="option">--lockouttime</code>). This is in seconds.
+ </div></li><li class="listitem"><div class="para">
+ The time after a failed login attempt before the counter resets (<code class="option">--failinterval</code>). Since mistakes do happen honestly, the count of failed attempts is not kept forever; it naturally lapses after a certain amount of time. This is in seconds.
+ </div></li></ul></div><div class="para">
+ These can all be set when a password policy is created with <code class="command">pwpolicy-add</code> or added later using <code class="command">pwpolicy-mod</code>. For example:
+ </div><pre class="screen">$ ipa pwpolicy-mod examplegroup --maxfail=4 --lockouttime=600 --failinterval=30</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The account lockout policy priority cannot be set or modified in the UI.
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_the_Priority_of_Password_Policies.html"><strong>Prev</strong>11.5. Changing the Priority of Group Password Pol...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Using_SSH_for_Password_Authentication.html"><strong>Next</strong>11.7. Enabling a Password Change Dialog</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_Different_Password_Policies_for_Different_User_Groups.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_Different_Password_Policies_for_Different_User_Groups.html
new file mode 100644
index 0000000..37858cd
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_Different_Password_Policies_for_Different_User_Groups.html
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.4. Creating Group-Level Password Policies</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="prev" href="The_IPA_Password_Policy-Editing_the_Password_Policy.html" title="11.3. Editing the Global Password Policy" /><link rel="next" href="Setting_the_Priority_of_Password_Policies.html" title="11.5. Changing the Priority of Group Password Policies" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><l
i class="previous"><a accesskey="p" href="The_IPA_Password_Policy-Editing_the_Password_Policy.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Setting_the_Priority_of_Password_Policies.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_Different_Password_Policies_for_Different_User_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_Different_Password_Policies_for_Different_User_Groups">11.4. Creating Group-Level Password Policies</h2></div></div></div><div class="para">
+ Group-level policies override the global policies and offer specific policies that only apply to group members. Password policies are not cumulative. Either a group policy or the global policy is in effect for a user or group, but not both simultaneously.
+ </div><div class="para">
+ Group-level policies do not exist by default, so they must be created manually.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ It is not possible to set a password policy for a non-existent group.
+ </div></div></div><div class="section" id="creating-group-policy-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-group-policy-ui">11.4.1. With the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. The global password policy is defined by the <span class="guilabel"><strong>global_policy</strong></span> group. Click the group link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top.
+ </div></li><li class="listitem"><div class="para">
+ In the pop-up box, select the group for which to create the password policy.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy1a.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Set the priority of the policy. The higher the number, the lower the priority.
+ </div><div class="para">
+ Only one password policy is in effect for a user, and that is the highest priority policy.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy1b.png" /></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The priority cannot be changed in the UI once the policy is created.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button so that the policy form immediately opens.
+ </div></li><li class="listitem"><div class="para">
+ Set the policy fields. Leaving a field blank means that attribute is not added the password policy configuration.
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max lifetime</em></span> sets the maximum amount of time, in days, that a password is valid before a user must reset it.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min lifetime</em></span> sets the minimum amount of time, in hours, that a password must remain in effect before a user is permitted to change it. This prevents a user from attempting to change a password back immediately to an older password or from cycling through the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>History size</em></span> sets how many previous passwords are stored. A user cannot re-use a password that is still in the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Character classes</em></span> sets the different categories of character that must be used in the password. For example, a character class can be a number, special character, or capital; the complete list of categories is in <a class="xref" href="user-pwdpolicy.html#tab.pwpolicy-attrs">Table 11.1, “Password Policy Settings”</a>. This is part of setting the complexity requirements.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min length</em></span> sets how many characters must be in a password. This is part of setting the complexity requirements.
+ </div></li></ul></div></li></ol></div></div><div class="section" id="creating-group-policy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-group-policy-cmd">11.4.2. With the Command Line</h3></div></div></div><div class="para">
+ Password policies are added with the <code class="command">pwpolicy-add</code> command.
+ </div><pre class="screen">$ ipa pwpolicy-add <em class="replaceable"><code>groupName --attribute-value</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa pwpolicy-add examplegroup --minlife=7 --maxlife=49 --history= --priority=1
+Group: examplegroup
+Max lifetime (days): 49
+Min lifetime (hours): 7
+Priority: 1
+</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Setting an attribute to a blank value effectively removes that attribute from the password policy.
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="The_IPA_Password_Policy-Editing_the_Password_Policy.html"><strong>Prev</strong>11.3. Editing the Global Password Policy</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Setting_the_Priority_of_Password_Policies.html"><strong>Next</strong>11.5. Changing the Priority of Group Password Pol...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_the_Priority_of_Password_Policies.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_the_Priority_of_Password_Policies.html
new file mode 100644
index 0000000..8318673
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_the_Priority_of_Password_Policies.html
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.5. Changing the Priority of Group Password Policies</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="prev" href="Setting_Different_Password_Policies_for_Different_User_Groups.html" title="11.4. Creating Group-Level Password Policies" /><link rel="next" href="Setting_Account-lockout_Policies.html" title="11.6. Setting Account Lockout Policies" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="pr
evious"><a accesskey="p" href="Setting_Different_Password_Policies_for_Different_User_Groups.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Setting_Account-lockout_Policies.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_the_Priority_of_Password_Policies"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_the_Priority_of_Password_Policies">11.5. Changing the Priority of Group Password Policies</h2></div></div></div><div class="para">
+ A user may belong to multiple groups, each with different password policies. Since only one policy can be in effect for a user, there has to be a method to assign precedence to policies. That is done through <span class="emphasis"><em>priority</em></span>.
+ </div><div class="para">
+ The highest priority is zero (0). The lower the number, the higher the priority.
+ </div><div class="para">
+ This is set initially when the password policy is created. It can be modified after the policy is created by resetting the <code class="option">--priority</code> option.
+ </div><pre class="screen">$ ipa pwpolicy-mod examplegroup --priority=10</pre><div class="para">
+ When a user belongs to multiple groups, the group password policy with the lowest number has the priority.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The password policy priority cannot be changed in the UI after it is created.
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_Different_Password_Policies_for_Different_User_Groups.html"><strong>Prev</strong>11.4. Creating Group-Level Password Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Setting_Account-lockout_Policies.html"><strong>Next</strong>11.6. Setting Account Lockout Policies</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_Active_Directory.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_Active_Directory.html
index 0429a5b..4d24e32 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_Active_Directory.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_Active_Directory.html
@@ -1,14 +1,14 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.2. Setting up Active Directory for Synchronization</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.2. Setting up Active Directory for Synchronization</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 8. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="active-directory.html" title="Chapter 8. Identity: Integrating with Microsoft Active Directory" /><link rel="next" href="password-sync.html" title="8.3. Exempting Active Directory Users from Password Synchronization" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li clas
s="previous"><a accesskey="p" href="active-directory.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="password-sync.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_up_Active_Directory"><div class="titlepage"><div><div><h2 class="title" id="Setting_up_Active_Directory">8.2. Setting up Active Directory for Synchronization</h2></div></div></div><div class="para">
- Synchronizing user accounts alone is enabled within FreeIPA, so all that is necessary is to set up a sync agreement (<a class="xref" href="managing-sync-agmt.html#Creating_Synchronization_Agreements">Section 8.4.2, “Creating Synchronization Agreements”</a>). To synchronize passwords requires that Active Directory be running in SSL and that the Password Sync Service be installed on each Active Directory domain controller. The Password Sync Service records password changes and synchronizes them, over a secure connection, to the FreeIPA entry.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 7. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="active-directory.html" title="Chapter 7. Identity: Integrating with Microsoft Active Directory" /><link rel="next" href="password-sync.html" title="7.3. Exempting Active Directory Users from Password Synchronization" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li cla
ss="previous"><a accesskey="p" href="active-directory.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="password-sync.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_up_Active_Directory"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_up_Active_Directory">7.2. Setting up Active Directory for Synchronization</h2></div></div></div><div class="para">
+ Synchronizing user accounts alone is enabled within FreeIPA, so all that is necessary is to set up a sync agreement (<a class="xref" href="managing-sync-agmt.html#Creating_Synchronization_Agreements">Section 7.4.2, “Creating Synchronization Agreements”</a>). To synchronize passwords requires that Active Directory be running in SSL and that the Password Sync Service be installed on each Active Directory domain controller. The Password Sync Service records password changes and synchronizes them, over a secure connection, to the FreeIPA entry.
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
Install the Microsoft Certificate System in Enterprise Root Mode. Active Directory will then automatically enroll to retrieve its SSL server certificate.
</div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
@@ -97,4 +97,4 @@ OID=1.3.6.1.5.5.7.3.1
The Windows machine must be rebooted. Without the rebooting, <code class="filename">PasswordHook.dll</code> is not enabled, and password synchronization will not function.
</div></div></div></li></ol></div></li></ol></div><div class="para">
The first attempt to synchronize passwords, which happened when the Password Sync application is installed, will always fail because of the SSL connection between the Directory Server and Active Directory sync peers. The tools to create the certificate and key databases is installed with the <code class="filename">.msi</code>.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="active-directory.html"><strong>Prev</strong>Chapter 8. Identity: Integrating with Microsoft A...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="password-sync.html"><strong>Next</strong>8.3. Exempting Active Directory Users from Passwo...</a></li></ul></body></html>
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="active-directory.html"><strong>Prev</strong>Chapter 7. Identity: Integrating with Microsoft A...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="password-sync.html"><strong>Next</strong>7.3. Exempting Active Directory Users from Passwo...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_IPA_Replicas.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_IPA_Replicas.html
index 9e8ce37..7052a49 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_IPA_Replicas.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Setting_up_IPA_Replicas.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.4. Setting up FreeIPA Replicas</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.4. Setting up FreeIPA Replicas</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="creating-server.html" title="2.3. Creating a FreeIPA Server Instance" /><link rel="next" href="Uninstalling_IPA_Servers.html" title="2.5. Uninstalling FreeIPA Servers and Replicas" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="creating-server.html"><strong
>Prev</strong></a></li><li class="next"><a accesskey="n" href="Uninstalling_IPA_Servers.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_up_IPA_Replicas"><div class="titlepage"><div><div><h2 class="title" id="Setting_up_IPA_Replicas">2.4. Setting up FreeIPA Replicas</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="creating-server.html" title="2.3. Creating a FreeIPA Server Instance" /><link rel="next" href="Uninstalling_IPA_Servers.html" title="2.5. Uninstalling FreeIPA Servers and Replicas" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="creating-server.html"><stron
g>Prev</strong></a></li><li class="next"><a accesskey="n" href="Uninstalling_IPA_Servers.html"><strong>Next</strong></a></li></ul><div class="section" id="Setting_up_IPA_Replicas"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Setting_up_IPA_Replicas">2.4. Setting up FreeIPA Replicas</h2></div></div></div><div class="para">
In the FreeIPA domain, there are three types of machines:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Servers, which manage all of the services used by domain members
@@ -19,7 +19,7 @@
A replica is a clone of a specific FreeIPA server. The server and replica share the same internal information about users, machines, certificates, and configured policies. These data are copied from the server to the replica in a process called <span class="emphasis"><em>replication</em></span>. The two Directory Server instances used by an FreeIPA server — the Directory Server instance used by the FreeIPA server as a data store and the Directory Server instance used by the Dogtag Certificate System to store certificate information — are replicated over to corresponding consumer Directory Server instances used by the FreeIPA replica.
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
If you are using the integrated Dogtag Certificate System instance as the CA for the FreeIPA domain, then it is possible to make a replica of a replica. It is <span class="emphasis"><em>not</em></span> possible to make a replica of a replica if you use the <code class="option">--selfsign</code> option for the original FreeIPA server.
- </div></div></div><div class="section" id="installing-replica"><div class="titlepage"><div><div><h3 class="title" id="installing-replica">2.4.1. Prepping and Installing the Replica Server</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="installing-replica"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="installing-replica">2.4.1. Prepping and Installing the Replica Server</h3></div></div></div><div class="para">
Replicas are functionally the same as FreeIPA servers, so they have the same installation requirements and packages.
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Make sure that the machine meets all of the prerequisites listed in <a class="xref" href="installing-ipa.html#Preparing_for_an_IPA_Installation">Section 2.1, “Preparing to Install the FreeIPA Server”</a>.
@@ -31,12 +31,12 @@
If there is an existing Dogtag Certificate System or Red Hat Certificate System instance on the replica machine, make sure that port <code class="systemitem">7389</code> is free. This port is used by the master FreeIPA server to communicate with the replica.
</div></li><li class="listitem"><div class="para">
Make sure the appropriate ports are open on both the server and the replica machine during and after the replica configuration. Servers and replicas connect to each other over ports 9443, 9444, 9445, and 7389 during the replica configuration. Once the replica is set up, the server and replica communicate over port 7389.
- </div></li></ul></div></div><div class="section" id="creating-the-replica"><div class="titlepage"><div><div><h3 class="title" id="creating-the-replica">2.4.2. Creating the Replica</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Make sure that the replica machine exists in the server's DNS <span class="emphasis"><em>before</em></span> beginning to configure the replica. If the server cannot contact the replica machine during the configuration process, then the replica configuration fails. If necessary, add a DNS entry, as in <a class="xref" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Section 10.10, “Adding Records to DNS Zones”</a>.
+ </div></li></ul></div></div><div class="section" id="creating-the-replica"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-the-replica">2.4.2. Creating the Replica</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Make sure that the replica machine exists in the server's DNS <span class="emphasis"><em>before</em></span> beginning to configure the replica. If the server cannot contact the replica machine during the configuration process, then the replica configuration fails. If necessary, add a DNS entry, as in <a class="xref" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Section 8.9, “Adding Records to DNS Zones”</a>.
</div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
On the master server, create a <span class="emphasis"><em>replica information file</em></span>. This contains realm and configuration information taken from the master server which will be used to configure the replica server.
</div><div class="para">
- Run the <code class="command">ipa-replica-repare</code> command <span class="emphasis"><em>on the master FreeIPA server</em></span>. The command requires the fully-qualified domain name of the <span class="emphasis"><em>replica</em></span> machine. Using the <code class="option">--ip-address</code> option automatically creates DNS entries for the replication, including the A and PTR records for the replica to the DNS.
+ Run the <code class="command">ipa-replica-prepare</code> command <span class="emphasis"><em>on the master FreeIPA server</em></span>. The command requires the fully-qualified domain name of the <span class="emphasis"><em>replica</em></span> machine. Using the <code class="option">--ip-address</code> option automatically creates DNS entries for the replication, including the A and PTR records for the replica to the DNS.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-replica-prepare ipareplica.example.com --ip-address 192.168.1.2</span><span class="perl_Comment"></span>
<span class="perl_Comment"></span>
Determining current realm name
@@ -85,7 +85,7 @@ $ ipa dnsrecord-add example.com @ --ns-rec ipareplica.example.com.</pre>
</div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
Use the fully-qualified domain name of the replica, including the final period (.), otherwise BIND will treat the hostname as relative to the domain.
- </div></div></div></li></ol></div></div><div class="section" id="troubleshooting-replica-install"><div class="titlepage"><div><div><h3 class="title" id="troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</h3></div></div></div><div class="para">
+ </div></div></div></li></ol></div></div><div class="section" id="troubleshooting-replica-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</h3></div></div></div><div class="para">
If the replica installation fails on step 3 (<span class="bold bold"><strong>[3/11]: configuring certificate server instance</strong></span>), that usually means that the required port is not available. This can be verified by checking the debug logs for the CA, <code class="filename">/var/log/pki-ca/debug</code>, which may show error messages about being unable to find certain entries. For example:
<pre class="screen">[04/Feb/2011:22:29:03][http-9445-Processor25]: DatabasePanel
comparetAndWaitEntries ou=people,o=ipaca not found, let's wait</pre>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/The_IPA_Password_Policy-Editing_the_Password_Policy.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/The_IPA_Password_Policy-Editing_the_Password_Policy.html
new file mode 100644
index 0000000..e2cac59
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/The_IPA_Password_Policy-Editing_the_Password_Policy.html
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.3. Editing the Global Password Policy</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="prev" href="viewing-the_Password_Policy.html" title="11.2. Viewing Password Policies" /><link rel="next" href="Setting_Different_Password_Policies_for_Different_User_Groups.html" title="11.4. Creating Group-Level Password Policies" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a a
ccesskey="p" href="viewing-the_Password_Policy.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Setting_Different_Password_Policies_for_Different_User_Groups.html"><strong>Next</strong></a></li></ul><div class="section" id="The_IPA_Password_Policy-Editing_the_Password_Policy"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="The_IPA_Password_Policy-Editing_the_Password_Policy">11.3. Editing the Global Password Policy</h2></div></div></div><div class="para">
+ A password policy can be selective; it may only define certain elements. A <span class="emphasis"><em>global</em></span> password policy sets defaults that are used for every user entry, unless a group policy takes priority.
+ </div><div class="para">
+ A global policy always exists, so there is no reason to add a global password policy.
+ </div><div class="section" id="edit-global-policy-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="edit-global-policy-ui">11.3.1. With the UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. The global password policy is defined by the <span class="guilabel"><strong>global_policy</strong></span> group. Click the group link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ The group policy is displayed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-global.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Change the policy fields. Leaving a field blank removes that attribute from the password policy configuration.
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max lifetime</em></span> sets the maximum amount of time, in days, that a password is valid before a user must reset it.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min lifetime</em></span> sets the minimum amount of time, in hours, that a password must remain in effect before a user is permitted to change it. This prevents a user from attempting to change a password back immediately to an older password or from cycling through the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>History size</em></span> sets how many previous passwords are stored. A user cannot re-use a password that is still in the password history.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Character classes</em></span> sets the different categories of character that must be used in the password. For example, a character class can be a number, special character, or capital; the complete list of categories is in <a class="xref" href="user-pwdpolicy.html#tab.pwpolicy-attrs">Table 11.1, “Password Policy Settings”</a>. This is part of setting the complexity requirements.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Min length</em></span> sets how many characters must be in a password. This is part of setting the complexity requirements.
+ </div></li></ul></div></li></ol></div></div><div class="section" id="edit-global-policy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="edit-global-policy-cmd">11.3.2. With the Command Line</h3></div></div></div><div class="para">
+ To edit the global password policy, use the <code class="command">pwpolicy-mod</code> command with the attributes to change:
+ </div><pre class="screen">ipa pwpolicy-mod <em class="replaceable"><code>--attribute=value</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen">ipa pwpolicy-mod --lockouttime=300 --history=5 --minlength=8</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="viewing-the_Password_Policy.html"><strong>Prev</strong>11.2. Viewing Password Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Setting_Different_Password_Policies_for_Different_User_Groups.html"><strong>Next</strong>11.4. Creating Group-Level Password Policies</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Uninstalling_IPA_Servers.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Uninstalling_IPA_Servers.html
index 98b7345..11df771 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Uninstalling_IPA_Servers.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Uninstalling_IPA_Servers.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.5. Uninstalling FreeIPA Servers and Replicas</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.5. Uninstalling FreeIPA Servers and Replicas</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="Setting_up_IPA_Replicas.html" title="2.4. Setting up FreeIPA Replicas" /><link rel="next" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_up_IPA_Replicas.html"><
strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="setting-up-clients.html"><strong>Next</strong></a></li></ul><div class="section" id="Uninstalling_IPA_Servers"><div class="titlepage"><div><div><h2 class="title" id="Uninstalling_IPA_Servers">2.5. Uninstalling FreeIPA Servers and Replicas</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="Setting_up_IPA_Replicas.html" title="2.4. Setting up FreeIPA Replicas" /><link rel="next" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_up_IPA_Replicas.html">
<strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="setting-up-clients.html"><strong>Next</strong></a></li></ul><div class="section" id="Uninstalling_IPA_Servers"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Uninstalling_IPA_Servers">2.5. Uninstalling FreeIPA Servers and Replicas</h2></div></div></div><div class="para">
To uninstall both a FreeIPA server and a FreeIPA replica, pass the <code class="option">--uninstall</code> option to the <code class="command">ipa-server-install</code> command:
<pre class="programlisting"><span class="perl_Comment"># ipa-server-install --uninstall</span></pre>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_OCSP.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_OCSP.html
index 791a73f..f4e8f35 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_OCSP.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_OCSP.html
@@ -1,21 +1,23 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.6. Configuring OCSP Responders</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.4. Configuring OCSP Responders</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="Configuring_Certificates_and_Certificate_Authorities.html" title="13.5. Configuring Alternate Certificate Authorities" /><link rel="next" href="ipa-apache.html" title="13.7. Setting a FreeIPA Server as an Apache Virtual Host" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a a
ccesskey="p" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ipa-apache.html"><strong>Next</strong></a></li></ul><div class="section" id="Using_OCSP"><div class="titlepage"><div><div><h2 class="title" id="Using_OCSP">13.6. Configuring OCSP Responders</h2></div></div></div><div class="para">
- A certificate is only valid if it is before its expiration date and if it has not been revoked. The expiration date is contained in the certificate itself, so a client can easily check that. However, a certificate can be revoked before its validity period is up. To inform clients of when a certificate has been revoked, a CA publishes a <span class="emphasis"><em>certificate revocation list</em></span> (CRL). A CRL contains a complete list of every certificate that was issued by that CA and subsequently revoked.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="Configuring_Certificates_and_Certificate_Authorities.html" title="16.3. Configuring Alternate Certificate Authorities" /><link rel="next" href="ipa-apache.html" title="16.5. Setting a FreeIPA Server as an Apache Virtual Host" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a
accesskey="p" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ipa-apache.html"><strong>Next</strong></a></li></ul><div class="section" id="Using_OCSP"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Using_OCSP">16.4. Configuring OCSP Responders</h2></div></div></div><div class="para">
+ A certificate is created with a validity period, meaning it has a point where it expires and is no longer valid. The expiration date is contained in the certificate itself, so a client always checks the validity period in the certificate to see if the certificate is still valid.
</div><div class="para">
- A client checks a CRL to verify a certificate using the online certificate status protocol (OCSP), which sends a request to an <span class="emphasis"><em>OCSP responder</em></span>. Each CA integrated with the FreeIPA server uses an internal OCSP responder. Any client which runs a validity check can check the FreeIPA CA.
+ However, a certificate can also be revoked before its validity period is up, but this information is not contained in the certificate. A CA publishes a <span class="emphasis"><em>certificate revocation list</em></span> (CRL), which contains a complete list of every certificate that was issued by that CA and subsequently revoked. A client can check the CRL to see if a certificate within its validity period has been revoked and is, therefore, invalid.
+ </div><div class="para">
+ Validity checks are performed using the online certificate status protocol (OCSP), which sends a request to an <span class="emphasis"><em>OCSP responder</em></span>. Each CA integrated with the FreeIPA server uses an internal OCSP responder, and any client which runs a validity check can check the FreeIPA CA's internal OCSP responder.
</div><div class="para">
Every certificate issued by the FreeIPA CA puts its OCSP responder service URL in the certificate. For example:
</div><pre class="screen">http://ipa.example.com:9180/ca/ocsp</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
For the FreeIPA OCSP responder to be available, port 9180 needs to be open in the firewall.
- </div></div></div><div class="section" id="ocsp-interval"><div class="titlepage"><div><div><h3 class="title" id="ocsp-interval">13.6.1. Changing the CRL Update Interval</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="ocsp-interval"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ocsp-interval">16.4.1. Changing the CRL Update Interval</h3></div></div></div><div class="para">
The CRL file is automatically generated by the Dogtag Certificate System CA every four hours. This interval can be changed by editing the Dogtag Certificate System configuration.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Stop the CA server.
@@ -27,7 +29,7 @@
Restart the CA server.
<pre class="screen">service pki-ca start</pre>
- </div></li></ol></div></div><div class="section" id="ocsp-location"><div class="titlepage"><div><div><h3 class="title" id="ocsp-location">13.6.2. Changing the OCSP Responder Location</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="ocsp-location"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ocsp-location">16.4.2. Changing the OCSP Responder Location</h3></div></div></div><div class="para">
Each FreeIPA server generates its own CRL. Likewise, each FreeIPA server uses its own OCSP responder, with its own OCSP responder URL in the certificates it issues.
</div><div class="para">
A DNS CNAME can be used by FreeIPA clients, and then from there be redirected to the appropriate FreeIPA server OCSP responder.
@@ -41,4 +43,4 @@
</div></li></ol></div><div class="para">
That change must be made on every FreeIPA server, with the <em class="parameter"><code>crlDistPointsPointName_0</code></em> parameter set to the same hostname.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Prev</strong>13.5. Configuring Alternate Certificate Authoriti...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="ipa-apache.html"><strong>Next</strong>13.7. Setting a FreeIPA Server as an Apache Virtu...</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Prev</strong>16.3. Configuring Alternate Certificate Authoriti...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="ipa-apache.html"><strong>Next</strong>16.5. Setting a FreeIPA Server as an Apache Virtu...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_SSH_for_Password_Authentication.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_SSH_for_Password_Authentication.html
new file mode 100644
index 0000000..19a63d2
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Using_SSH_for_Password_Authentication.html
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.7. Enabling a Password Change Dialog</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="prev" href="Setting_Account-lockout_Policies.html" title="11.6. Setting Account Lockout Policies" /><link rel="next" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_Account-l
ockout_Policies.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="kerberos.html"><strong>Next</strong></a></li></ul><div class="section" id="Using_SSH_for_Password_Authentication"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Using_SSH_for_Password_Authentication">11.7. Enabling a Password Change Dialog</h2></div></div></div><div class="para">
+ To use password authentication with new users rather than Kerberos tickets and GSS-API, enable <span class="emphasis"><em>challenge-response</em></span> authentication. Using challenge-response authentication enables FreeIPA to open a password change dialog box. This is not enabled by default because some SSL clients may not support challenge-response authentication, and it is needed only if the password has expired.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <code class="filename">/etc/ssh/sshd_config</code> file.
+ </div></li><li class="listitem"><div class="para">
+ Set <em class="parameter"><code>ChallengeResponseAuthentication</code></em> to <code class="literal">yes</code>.
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_Account-lockout_Policies.html"><strong>Prev</strong>11.6. Setting Account Lockout Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="kerberos.html"><strong>Next</strong>Chapter 12. Policy: Managing the Kerberos Domain</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_DNS.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_DNS.html
index f9b095d..e875c92 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_DNS.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_DNS.html
@@ -1,15 +1,15 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 10. Identity: Managing DNS</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 8. Identity: Managing DNS</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="migrating-from-nis.html" title="9.4. Migrating from NIS to FreeIPA" /><link rel="next" href="enabling-dns.html" title="10.2. Configuring DNS in FreeIPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="migrating-from-nis.html"><strong>Prev</strong></a></li><li class="next"
><a accesskey="n" href="enabling-dns.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="Working_with_DNS" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 10. Identity: Managing DNS</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="Working_with_DNS.html#about-dns">10.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="enabling-dns.html">10.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="bind-dyndb-ldap-config.html">10.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="changing-forwarder.html">10.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="finding-dns-zones.html">10.5. Finding and Displaying DNS Zones</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html">10.6. Adding DNS Zones</a></span></dt><dt><span class
="section"><a href="modifying-dns-zones.html">10.7. Modifying DNS Zones</a></span></dt><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html">10.8. Enabling Dynamic DNS Updates</a></span></dt><dt><span class="section"><a href="enabling-zones.html">10.9. Enabling and Disabling Zones</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">10.10. Adding Records to DNS Zones</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">10.11. Deleting Records from DNS Zones</a></span></dt><dt><span class="section"><a href="dns-resolve.html">10.12. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Configuring_Microsoft_Windows.html" title="7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm" /><link rel="next" href="enabling-dns.html" title="8.2. Configuring DNS in FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Microsoft_Win
dows.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="enabling-dns.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="Working_with_DNS" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 8. Identity: Managing DNS</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="Working_with_DNS.html#about-dns">8.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="enabling-dns.html">8.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="bind-dyndb-ldap-config.html">8.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="changing-forwarder.html">8.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html">8.5. Adding DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zone
s.html#Managing_DNS_Zones-Adding_DNS_Zones-ui">8.5.1. Adding DNS Zones from the Web UI</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html#Managing_DNS_Zones-Adding_DNS_Zones-cmd">8.5.2. Adding DNS Zones from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="modifying-dns-zones.html">8.6. Modifying DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="modifying-dns-zones.html#editing-dns-zone-ui">8.6.1. Editing the Zone Configuration in the Web UI</a></span></dt><dt><span class="section"><a href="modifying-dns-zones.html#editing-dns-zone-cmd">8.6.2. Editing the Zone Configuration in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html">8.7. Enabling Dynamic DNS Updates</a></span></dt><dd><dl><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">8.7.1.
Enabling Dynamic DNS Updates in the Web UI</a></span></dt><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd">8.7.2. Enabling Dynamic DNS Updates in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="enabling-zones.html">8.8. Enabling and Disabling Zones</a></span></dt><dd><dl><dt><span class="section"><a href="enabling-zones.html#enabling-zones-ui">8.8.1. Disabling Zones in the Web UI</a></span></dt><dt><span class="section"><a href="enabling-zones.html#enabling-zones-cmd">8.8.2. Disabling Zones in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">8.9. Adding Records to DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-ui">8.9.1. Adding DNS Resource Records from the Web UI</a></span></dt><dt><span class=
"section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">8.9.2. Adding DNS Resource Records from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">8.10. Deleting Records from DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui">8.10.1. Deleting Records with the Web UI</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd">8.10.2. Deleting Records with the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="dns-resolve.html">8.11. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></div><div class="para">
If the FreeIPA server was installed with DNS configured, then all of the DNS entries for the domain — host entries, locations, records — can be managed using the FreeIPA tools.
- </div><div class="section" id="about-dns"><div class="titlepage"><div><div><h2 class="title" id="about-dns">10.1. About DNS in FreeIPA</h2></div></div></div><div class="para">
+ </div><div class="section" id="about-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-dns">8.1. About DNS in FreeIPA</h2></div></div></div><div class="para">
DNS is one of the services that can be configured and maintained by the FreeIPA domain. DNS is critical to the performance of the FreeIPA domain; DNS is used for the Kerberos services and SSL connections for all servers and clients and for connections to domain services like LDAP.
</div><div class="para">
While FreeIPA can use an external DNS service, there is a lot more flexibility and control over FreeIPA — DNS interactions when the DNS service is configured within the domain. For example, DNS records and zones can be managed within the domain using FreeIPA tools, and clients can update their own DNS records dynamically. When a host is added to FreeIPA, a DNS record is automatically created in FreeIPA's DNS service for that host machine.
@@ -23,14 +23,14 @@ arecord: 10.0.0.3
aaaarecord: fc00::1
objectclass: top
objectclass: idnsrecord</pre><div class="para">
- The schema used to define the the DNS entries is in the <code class="filename">/usr/share/ipa/60basev2.ldif</code> schema file.
- </div><a id="id3282955" class="indexterm"></a><a id="id3286522" class="indexterm"></a><div class="para">
- The BIND service communicates with the Directory Server using the system <code class="filename">bind-dyndb-ldap</code> plug-in. When FreeIPA is configured to manage DNS (<a class="xref" href="enabling-dns.html">Section 10.2, “Configuring DNS in FreeIPA”</a>), FreeIPA creates a <code class="command">dynamic-db</code> configuration section in the <code class="filename">/etc/named.conf</code> file for the BIND service. This configures the <code class="filename">bind-dyndb-ldap</code> plug-in for the BIND (<code class="systemitem">named</code>) service.
+ The schema used to define the DNS entries is in the <code class="filename">/usr/share/ipa/60basev2.ldif</code> schema file.
+ </div><a id="id651505" class="indexterm"></a><a id="id573228" class="indexterm"></a><div class="para">
+ The BIND service communicates with the Directory Server using the system <code class="filename">bind-dyndb-ldap</code> plug-in. When FreeIPA is configured to manage DNS (<a class="xref" href="enabling-dns.html">Section 8.2, “Configuring DNS in FreeIPA”</a>), FreeIPA creates a <code class="command">dynamic-db</code> configuration section in the <code class="filename">/etc/named.conf</code> file for the BIND service. This configures the <code class="filename">bind-dyndb-ldap</code> plug-in for the BIND (<code class="systemitem">named</code>) service.
</div><div class="para">
When this plug-in is properly configured, it delivers the DNS records from the Directory Server to the <code class="systemitem">named</code> service. The configuration can be changed to adapt the behavior of the plug-in and, therefore, the LDAP-BIND interactions.
</div><div class="para">
The <code class="command">ipa</code> command has several subcommands to manage the DNS service.
- </div><div class="table" id="tab.sns-tools"><h6>Table 10.1. DNS Management Tools</h6><div class="table-contents"><table summary="DNS Management Tools" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="table" id="tab.sns-tools"><h6>Table 8.1. DNS Management Tools</h6><div class="table-contents"><table summary="DNS Management Tools" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Command
</th><th>
Description
@@ -58,4 +58,4 @@ objectclass: idnsrecord</pre><div class="para">
dnszone-find and dnszone-show
</td><td>
Finds and displays DNS zone configuration.
- </td></tr></tbody></table></div></div><br class="table-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="migrating-from-nis.html"><strong>Prev</strong>9.4. Migrating from NIS to FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="enabling-dns.html"><strong>Next</strong>10.2. Configuring DNS in FreeIPA</a></li></ul></body></html>
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Microsoft_Windows.html"><strong>Prev</strong>7.5. Configuring a Microsoft Windows System to Jo...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="enabling-dns.html"><strong>Next</strong>8.2. Configuring DNS in FreeIPA</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_certmonger-Using_certmonger_with_NSS.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_certmonger-Using_certmonger_with_NSS.html
new file mode 100644
index 0000000..0657b6d
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/Working_with_certmonger-Using_certmonger_with_NSS.html
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>18.2. Storing Certificates in NSS Databases</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="certmongerX.html" title="Chapter 18. Working with certmonger" /><link rel="prev" href="certmongerX.html" title="Chapter 18. Working with certmonger" /><link rel="next" href="certmonger-tracking-certs.html" title="18.3. Tracking Certificates with certmonger" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="certmongerX.html"><strong>Prev</strong></a>
</li><li class="next"><a accesskey="n" href="certmonger-tracking-certs.html"><strong>Next</strong></a></li></ul><div class="section" id="Working_with_certmonger-Using_certmonger_with_NSS"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Working_with_certmonger-Using_certmonger_with_NSS">18.2. Storing Certificates in NSS Databases</h2></div></div></div><div class="para">
+ By default, <code class="command">certmonger</code> uses plaintext files to store the key and the certificate, but these keys and certificates can also be stored in NSS databases. This is done using the <code class="option">-d</code> option to set the security database location and <code class="option">-n</code> to give the certificate nickname which is used for the certificate in the database. These options are used instead of the PEM files given in the <code class="option">-f</code> and <code class="option">-k</code> options.
+ </div><div class="para">
+ For example:
+<pre class="screen"># ipa-getcert request <strong class="userinput"><code>-d /export/alias -n ServerCert</code></strong> ...</pre>
+
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="certmongerX.html"><strong>Prev</strong>Chapter 18. Working with certmonger</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="certmonger-tracking-certs.html"><strong>Next</strong>18.3. Tracking Certificates with certmonger</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/active-directory.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/active-directory.html
index 030388c..fef7926 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/active-directory.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/active-directory.html
@@ -1,23 +1,23 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 8. Identity: Integrating with Microsoft Active Directory</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 7. Identity: Integrating with Microsoft Active Directory</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="configuring-maps.html" title="7.4. Configuring Maps" /><link rel="next" href="Setting_up_Active_Directory.html" title="8.2. Setting up Active Directory for Synchronization" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-maps.html"><strong>Prev</strong></a></l
i><li class="next"><a accesskey="n" href="Setting_up_Active_Directory.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="active-directory" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 8. Identity: Integrating with Microsoft Active Directory</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="active-directory.html#about-active-directory">8.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="active-directory.html#about-sync">8.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="active-directory.html#about-sync-schema">8.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="active-directory.html#Windows_Sync-Schema_Differences-users">8.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><
a href="Setting_up_Active_Directory.html">8.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="password-sync.html">8.3. Exempting Active Directory Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html">8.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="managing-sync-agmt.html#exporting-ad-cert">8.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Creating_Synchronization_Agreements">8.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Modifying_Synchronization_Agreements">8.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#changing-subtree">8.4.4. Changing the Synchronized Windows Subtree</a></span></dt
><dt><span class="section"><a href="managing-sync-agmt.html#Deleting_Synchronization_Agreements">8.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">8.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Microsoft_Windows.html">8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="host-groups.html" title="6.10. Managing Host Groups" /><link rel="next" href="Setting_up_Active_Directory.html" title="7.2. Setting up Active Directory for Synchronization" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="host-groups.html"><strong>Prev</strong></a></li><l
i class="next"><a accesskey="n" href="Setting_up_Active_Directory.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="active-directory" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 7. Identity: Integrating with Microsoft Active Directory</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="active-directory.html#about-active-directory">7.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="active-directory.html#about-sync">7.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="active-directory.html#about-sync-schema">7.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="active-directory.html#Windows_Sync-Schema_Differences-users">7.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a hr
ef="Setting_up_Active_Directory.html">7.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="password-sync.html">7.3. Exempting Active Directory Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html">7.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="managing-sync-agmt.html#exporting-ad-cert">7.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Creating_Synchronization_Agreements">7.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Modifying_Synchronization_Agreements">7.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#changing-subtree">7.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt
><span class="section"><a href="managing-sync-agmt.html#Deleting_Synchronization_Agreements">7.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">7.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Microsoft_Windows.html">7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></div><div class="para">
FreeIPA uses active <span class="emphasis"><em>synchronization</em></span> to integrate user data stored in an Active Directory domain and the user data stored in the FreeIPA domain. Critical user attributes, including passwords, are synchronized between the services.
</div><div class="para">
- The capability to sync Active Directory and FreeIPA domains is inherent when a FreeIPA server is first installed. The sycnhronization process is configured by creating <span class="emphasis"><em>agreements</em></span> between the FreeIPA server and the Active Directory domain controller.
+ The capability to sync Active Directory and FreeIPA domains is inherent when a FreeIPA server is first installed. The synchronization process is configured by creating <span class="emphasis"><em>agreements</em></span> between the FreeIPA server and the Active Directory domain controller.
</div><div class="para">
This chapter describes how to configure synchronization, how to configure Active Directory for integration with FreeIPA, and how to configure Windows systems within the Active Directory domain to be aware of the FreeIPA domain.
- </div><div class="section" id="about-active-directory"><div class="titlepage"><div><div><h2 class="title" id="about-active-directory">8.1. About Active Directory, FreeIPA, and Identity Management</h2></div></div></div><div class="para">
- Within the FreeIPA domain, information is shared among servers and replicas by copying that information, reliably and predictibly, between the data masters (servers) and other data masters or read-only hub servers. This process is <span class="emphasis"><em>replication</em></span>.
+ </div><div class="section" id="about-active-directory"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-active-directory">7.1. About Active Directory, FreeIPA, and Identity Management</h2></div></div></div><div class="para">
+ Within the FreeIPA domain, information is shared among servers and replicas by copying that information, reliably and predictably, between the data masters (servers) and other data masters or read-only hub servers. This process is <span class="emphasis"><em>replication</em></span>.
</div><div class="para">
A similar process can be used to share data between the FreeIPA domain and a Microsoft Active Directory domain. This is <span class="emphasis"><em>synchronization</em></span>.
- </div><div class="section" id="about-sync"><div class="titlepage"><div><div><h3 class="title" id="about-sync">8.1.1. About Active Directory Synchronization</h3></div></div></div><div class="para">
+ </div><div class="section" id="about-sync"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-sync">7.1.1. About Active Directory Synchronization</h3></div></div></div><div class="para">
Synchronization is the process of copying data back and forth between Active Directory and FreeIPA.
</div><div class="para">
Synchronization is defined in an <span class="emphasis"><em>agreement</em></span> between a FreeIPA server and an Active Directory domain controller. The sync agreement defines all of the information required to identify sync-able user entries (like the subtree to synchronize and requisite object classes in the user entries) as well as defining how account attributes are handled. The sync agreements are created with default values which can be tweaked to meet the needs of a specific domain. When two servers are involved in synchronization, they are called <span class="emphasis"><em>peers</em></span>.
@@ -44,17 +44,17 @@
</div></li><li class="listitem"><div class="para">
Password synchronization changes take effect immediately.
</div></li></ul></div><div class="para">
- When Active Directory users are synchronized over to FreeIPA, certain attributes (including Kerberos and Posix attributs) will have IPA attributes are automatically added to the user entries. These attributes are used by FreeIPA within its domain. They are not synchronized back over the the corresponding Active Directory user entry.
+ When Active Directory users are synchronized over to FreeIPA, certain attributes (including Kerberos and POSIX attributes) will have IPA attributes are automatically added to the user entries. These attributes are used by FreeIPA within its domain. They are not synchronized back over the the corresponding Active Directory user entry.
</div><div class="para">
- Some of the data in synchronization can be modified as part of the synchronization process. For examples, certain attributes can be automatically added to Active Directory user accounts when they are synced over to the FreeIPA domain. These attribute changes are defined as part of the synchronization agreement and are described in <a class="xref" href="managing-sync-agmt.html#Modifying_Synchronization_Agreements">Section 8.4.3, “Changing the Behavior for Syncing User Account Attributes”</a>.
- </div></div><div class="section" id="about-sync-schema"><div class="titlepage"><div><div><h3 class="title" id="about-sync-schema">8.1.2. Attributes Which Are Synchronized</h3></div></div></div><div class="para">
+ Some of the data in synchronization can be modified as part of the synchronization process. For examples, certain attributes can be automatically added to Active Directory user accounts when they are synced over to the FreeIPA domain. These attribute changes are defined as part of the synchronization agreement and are described in <a class="xref" href="managing-sync-agmt.html#Modifying_Synchronization_Agreements">Section 7.4.3, “Changing the Behavior for Syncing User Account Attributes”</a>.
+ </div></div><div class="section" id="about-sync-schema"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-sync-schema">7.1.2. Attributes Which Are Synchronized</h3></div></div></div><div class="para">
FreeIPA synchronizes a subset of user attributes between FreeIPA and Active Directory user entries. Any other attributes present in the entry, either in FreeIPA or in Active Directory, are ignored by synchronization.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Most POSIX attributes are not synchronized.
</div></div></div><div class="para">
Although there are significant schema differences between the Active Directory LDAP schema and the 389 Directory Server LDAP schema used by FreeIPA, there are many attributes that are the same. These attributes are simply synchronized between the Active Directory and FreeIPA user entries, with no changes to the attribute name or value format.
- </div><div class="table" id="Synchronizing_Users-User_Schema_That_Are_the_Same"><h6>Table 8.1. User Schema That Are the Same in FreeIPA and Windows Servers</h6><div class="table-contents"><table summary="User Schema That Are the Same in FreeIPA and Windows Servers" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><tbody><tr><td>
- cn<sup>[<a id="id3404855" href="#ftn.id3404855" class="footnote">a</a>]</sup>
+ </div><div class="table" id="Synchronizing_Users-User_Schema_That_Are_the_Same"><h6>Table 7.1. User Schema That Are the Same in FreeIPA and Windows Servers</h6><div class="table-contents"><table summary="User Schema That Are the Same in FreeIPA and Windows Servers" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><tbody><tr><td>
+ cn<sup>[<a id="id855825" href="#ftn.id855825" class="footnote">a</a>]</sup>
</td><td>
physicalDeliveryOfficeName
</td></tr><tr><td>
@@ -109,16 +109,16 @@
pager
</td><td>
x121Address
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><p><sup>[<a id="ftn.id3404855" href="#id3404855" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><div class="para"><sup>[<a id="ftn.id855825" href="#id855825" class="para">a</a>] </sup>
The <em class="parameter"><code>cn</code></em> is treated differently than other synced attributes. It is mapped directly (<em class="parameter"><code>cn</code></em> to <em class="parameter"><code>cn</code></em>) when syncing from FreeIPA to Active Directory. When syncing from Active Directory to FreeIPA, however, <em class="parameter"><code>cn</code></em> is mapped from the <em class="parameter"><code>name</code></em> attribute on Windows to the <em class="parameter"><code>cn</code></em> attribute in FreeIPA.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
Some attributes have different names but still have direct parity between FreeIPA (which uses 389 Directory Server) and Active Directory. These attributes are <span class="emphasis"><em>mapped</em></span> by the synchronization process.
- </div><div class="table" id="Synchronizing_Users-User_Schema_Mapped"><h6>Table 8.2. User Schema Mapped between FreeIPA and Active Directory</h6><div class="table-contents"><table summary="User Schema Mapped between FreeIPA and Active Directory" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="table" id="Synchronizing_Users-User_Schema_Mapped"><h6>Table 7.2. User Schema Mapped between FreeIPA and Active Directory</h6><div class="table-contents"><table summary="User Schema Mapped between FreeIPA and Active Directory" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
FreeIPA
</th><th>
Active Directory
</th></tr></thead><tbody><tr><td>
- cn<sup>[<a id="id3231793" href="#ftn.id3231793" class="footnote">a</a>]</sup>
+ cn<sup>[<a id="id925235" href="#ftn.id925235" class="footnote">a</a>]</sup>
</td><td>
name
</td></tr><tr><td>
@@ -173,19 +173,19 @@
ntUserWorkstations
</td><td>
userWorkstations
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><p><sup>[<a id="ftn.id3231793" href="#id3231793" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><div class="para"><sup>[<a id="ftn.id925235" href="#id925235" class="para">a</a>] </sup>
The <em class="parameter"><code>cn</code></em> is is mapped directly (<em class="parameter"><code>cn</code></em> to <em class="parameter"><code>cn</code></em>) when syncing from FreeIPA to Active Directory. When syncing from Active Directory <em class="parameter"><code>cn</code></em> is mapped from the <em class="parameter"><code>name</code></em> attribute in Active Directory to the <em class="parameter"><code>cn</code></em> attribute in FreeIPA.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Windows_Sync-Schema_Differences-users"><div class="titlepage"><div><div><h3 class="title" id="Windows_Sync-Schema_Differences-users">8.1.3. User Schema Differences between FreeIPA and Active Directory</h3></div></div></div><a id="id3161832" class="indexterm"></a><a id="id3161844" class="indexterm"></a><div class="para">
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Windows_Sync-Schema_Differences-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Windows_Sync-Schema_Differences-users">7.1.3. User Schema Differences between FreeIPA and Active Directory</h3></div></div></div><a id="id945352" class="indexterm"></a><a id="id945364" class="indexterm"></a><div class="para">
Even though attributes may be successfully synced between Active Directory and FreeIPA, there may still be differences in how Active Directory and FreeIPA define the underlying X.500 object classes. This could lead to differences in how the data are handled in the different LDAP services.
</div><div class="para">
This section describes the differences in how Active Directory and FreeIPA handle some of the attributes which can be synchronized between the two domains.
- </div><div class="section" id="Schema_Differences-cn"><div class="titlepage"><div><div><h4 class="title" id="Schema_Differences-cn">8.1.3.1. Values for cn Attributes</h4></div></div></div><a id="id3161880" class="indexterm"></a><div class="para">
+ </div><div class="section" id="Schema_Differences-cn"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Schema_Differences-cn">7.1.3.1. Values for cn Attributes</h4></div></div></div><a id="id932165" class="indexterm"></a><div class="para">
In 389 Directory Server, the <em class="parameter"><code>cn</code></em> attribute can be multi-valued, while in Active Directory this attribute must have only a single value. When the FreeIPA <em class="parameter"><code>cn</code></em> attribute is synchronized, then, only one value is sent to the Active Directory peer.
</div><div class="para">
What this means for synchronization is that,potentially, if a <em class="parameter"><code>cn</code></em> value is added to an Active Directory entry and that value is not one of the values for <em class="parameter"><code>cn</code></em> in FreeIPA, then all of the FreeIPA <em class="parameter"><code>cn</code></em> values are overwritten with the single Active Directory value.
</div><div class="para">
One other important difference is that Active Directory uses the <em class="parameter"><code>cn</code></em> attribute attribute as its naming attribute, where FreeIPA uses <em class="parameter"><code>uid</code></em>. This means that there is the potential to rename the entry entirely (and accidentally) if the <em class="parameter"><code>cn</code></em> attribute is edited in the FreeIPA. If that <em class="parameter"><code>cn</code></em> change is written over to the Active Directory entry, then the entry is renamed, and the new named entry is written back over to FreeIPA.
- </div></div><div class="section" id="Schema_Differences-street"><div class="titlepage"><div><div><h4 class="title" id="Schema_Differences-street">8.1.3.2. Values for street and streetAddress</h4></div></div></div><a id="id3120048" class="indexterm"></a><div class="para">
+ </div></div><div class="section" id="Schema_Differences-street"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Schema_Differences-street">7.1.3.2. Values for street and streetAddress</h4></div></div></div><a id="id932240" class="indexterm"></a><div class="para">
Active Directory uses the attribute <em class="parameter"><code>streetAddress</code></em> for a user or group's postal address; this is the way that 389 Directory Server uses the <em class="parameter"><code>street</code></em> attribute. There are two important differences in the way that Active Directory and FreeIPA use the <em class="parameter"><code>streetAddress</code></em> and <em class="parameter"><code>street</code></em> attributes, respectively:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
In 389 Directory Server, <em class="parameter"><code>streetAddress</code></em> is an alias for <em class="parameter"><code>street</code></em>. Active Directory also has the <em class="parameter"><code>street</code></em> attribute, but it is a separate attribute that can hold an independent value, not an alias for <em class="parameter"><code>streetAddress</code></em>.
@@ -197,6 +197,6 @@
The synchronization process maps <em class="parameter"><code>streetAddress</code></em> in the Active Directory entry to <em class="parameter"><code>street</code></em> in FreeIPA. To avoid conflicts, the <em class="parameter"><code>street</code></em> attribute should not be used in Active Directory.
</div></li><li class="listitem"><div class="para">
Only one FreeIPA <em class="parameter"><code>street</code></em> attribute value is synced to Active Directory. If the <em class="parameter"><code>streetAddress</code></em> attribute is changed in Active Directory and the new value does not already exist in FreeIPA, then all <em class="parameter"><code>street</code></em> attribute values in FreeIPA are replaced with the new, single Active Directory value.
- </div></li></ul></div></div><div class="section" id="Schema_Diferences-initials"><div class="titlepage"><div><div><h4 class="title" id="Schema_Diferences-initials">8.1.3.3. Constraints on the initials Attribute</h4></div></div></div><a id="id3024610" class="indexterm"></a><div class="para">
+ </div></li></ul></div></div><div class="section" id="Schema_Diferences-initials"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Schema_Diferences-initials">7.1.3.3. Constraints on the initials Attribute</h4></div></div></div><a id="id880505" class="indexterm"></a><div class="para">
For the <em class="parameter"><code>initials</code></em> attribute, Active Directory imposes a maximum length constraint of six characters, but 389 Directory Server does not have a length limit. If an <em class="parameter"><code>initials</code></em> attribute longer than six characters is added to FreeIPA, the value is trimmed when it is synchronized with the Active Directory entry.
- </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-maps.html"><strong>Prev</strong>7.4. Configuring Maps</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Setting_up_Active_Directory.html"><strong>Next</strong>8.2. Setting up Active Directory for Synchronizat...</a></li></ul></body></html>
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="host-groups.html"><strong>Prev</strong>6.10. Managing Host Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Setting_up_Active_Directory.html"><strong>Next</strong>7.2. Setting up Active Directory for Synchronizat...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-host-entry.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-host-entry.html
index 288f591..416e81a 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-host-entry.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-host-entry.html
@@ -1,22 +1,36 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.2. Adding Host Entries</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.2. Adding Host Entries</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="prev" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="next" href="managing-services.html" title="11.3. Managing Services" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="host
s.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="managing-services.html"><strong>Next</strong></a></li></ul><div class="section" id="adding-host-entry"><div class="titlepage"><div><div><h2 class="title" id="adding-host-entry">11.2. Adding Host Entries</h2></div></div></div><div class="para">
- A host entry is always created when a client is configured. On Fedora systems, this is done automatically with the <code class="command">ipa-client-install</code> script. On other platforms — and in alternative enrollment scenarios, as in <a class="xref" href="enrolling-machines.html">Section 14.2, “Enrolling Clients Manually”</a> — the host entry is created manually.
- </div><div class="para">
- Host entries are created using the <code class="command">host-add</code> command. This commands adds the host entry to the FreeIPA Directory Server. The full list of options with <code class="command">host-add</code> are listed in <a class="xref" href="ipa-command-host.html">Section B.4, “ipa Host Commands”</a>. At its most basic, an add operation only requires the client hostname to add the client to the Kerberos realm and to create an entry in the FreeIPA LDAP server:
- </div><pre class="screen">$ ipa host-add client1.example.com</pre><div class="para">
- If the FreeIPA server is configured to manage DNS, then the host can also be added to the DNS resource records using the <code class="option">--ip-address</code> and <code class="option">--force</code> options.
- </div><div class="example" id="ex.host-dns"><h6>Example 11.1. Creating Host Entries with Static IP Addresses</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force --ip-address=192.168.166.31 client1.example.com</pre></div></div><br class="example-break" /><a id="id3236198" class="indexterm"></a><a id="id3236175" class="indexterm"></a><a id="id3236168" class="indexterm"></a><div class="para">
- Commonly, hosts may not have a static IP address or the IP address may not be known at the time the client is configured. For example, laptops may be preconfigured as FreeIPA clients, but they do not have IP addresses at the time they're configured. Hosts which use DHCP can still be configured with a DNS entry by using <code class="option">--force</code>. This essentially creates a placeholder entry in the FreeIPA DNS service. When the DNS service dynamically updates its records, the host's current IP address is detected and its DNS record is updated.
- </div><div class="example" id="ex.host-dns-dhcp"><h6>Example 11.2. Creating Host Entries with DHCP</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force client1.example.com</pre></div></div><br class="example-break" /><div class="para">
- Host records are deleted using the <code class="command">host-del</code> command. If the FreeIPA domain uses DNS, then the <code class="option">--updatedns</code> option also removes the associated records of any kind for the host from the DNS.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="next" href="enrolling-machines.html" title="6.3. Enrolling Clients Manually" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="hosts.html"><strong>Prev</strong></a></li><li cl
ass="next"><a accesskey="n" href="enrolling-machines.html"><strong>Next</strong></a></li></ul><div class="section" id="adding-host-entry"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="adding-host-entry">6.2. Adding Host Entries</h2></div></div></div><div class="para">
+ A host entry is always created when a client is configured. On Fedora systems, this is done automatically with the <code class="command">ipa-client-install</code> script. On other platforms — and in alternative enrollment scenarios, as in <a class="xref" href="enrolling-machines.html">Section 6.3, “Enrolling Clients Manually”</a> — the host entry is created manually.
+ </div><div class="section" id="adding-host-entry-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-host-entry-ui">6.2.1. Adding Host Entries from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Hosts</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hosts-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Fill in the machine name and select the domain from the configured zones in the drop-down list. If the host has already been assigned a static IP address, then include that with the host entry so that the DNS entry is fully created.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/host-add.png" width="444" /></div></div><div class="para">
+ DNS zones can be created in FreeIPA, which is described in <a class="xref" href="Managing_DNS_Zones-Adding_DNS_Zones.html">Section 8.5, “Adding DNS Zones”</a>. If the FreeIPA server does not manage the DNS server, the zone can be entered manually in the menu area, like a regular text field.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Select the <span class="guilabel"><strong>Force</strong></span> checkbox adds the host DNS record, even if the hostname cannot be resolved.
+ </div><div class="para">
+ This is useful for hosts which use DHCP and do not have a static IP address. This essentially creates a placeholder entry in the FreeIPA DNS service. When the DNS service dynamically updates its records, the host's current IP address is detected and its DNS record is updated.
+ </div></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the expanded entry page and fill in more attribute information. Information about the host hardware and physical location can be included with the host entry.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/host-attr.png" width="444" /></div></div></li></ol></div></div><div class="section" id="adding-host-entry-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-host-entry-cmd">6.2.2. Adding Host Entries from the Command Line</h3></div></div></div><div class="para">
+ Host entries are created using the <code class="command">host-add</code> command. This commands adds the host entry to the FreeIPA Directory Server. The full list of options with <code class="command">host-add</code> are listed in <a class="xref" href="ipa-command-host.html">Section B.4, “ipa Host Commands”</a>. At its most basic, an add operation only requires the client hostname to add the client to the Kerberos realm and to create an entry in the FreeIPA LDAP server:
+ </div><pre class="screen">$ ipa host-add client1.example.com</pre><div class="para">
+ If the FreeIPA server is configured to manage DNS, then the host can also be added to the DNS resource records using the <code class="option">--ip-address</code> and <code class="option">--force</code> options.
+ </div><div class="example" id="ex.host-dns"><h6>Example 6.1. Creating Host Entries with Static IP Addresses</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force --ip-address=192.168.166.31 client1.example.com</pre></div></div><br class="example-break" /><a id="id836217" class="indexterm"></a><a id="id836233" class="indexterm"></a><a id="id889744" class="indexterm"></a><div class="para">
+ Commonly, hosts may not have a static IP address or the IP address may not be known at the time the client is configured. For example, laptops may be preconfigured as FreeIPA clients, but they do not have IP addresses at the time they're configured. Hosts which use DHCP can still be configured with a DNS entry by using <code class="option">--force</code>. This essentially creates a placeholder entry in the FreeIPA DNS service. When the DNS service dynamically updates its records, the host's current IP address is detected and its DNS record is updated.
+ </div><div class="example" id="ex.host-dns-dhcp"><h6>Example 6.2. Creating Host Entries with DHCP</h6><div class="example-contents"><pre class="screen">$ ipa host-add --force client1.example.com</pre></div></div><br class="example-break" /><div class="para">
+ Host records are deleted using the <code class="command">host-del</code> command. If the FreeIPA domain uses DNS, then the <code class="option">--updatedns</code> option also removes the associated records of any kind for the host from the DNS.
<pre class="screen">$ ipa host-del --updatedns client1.example.com</pre>
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="hosts.html"><strong>Prev</strong>Chapter 11. Policy: Managing Hosts, Services, and...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-services.html"><strong>Next</strong>11.3. Managing Services</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="hosts.html"><strong>Prev</strong>Chapter 6. Identity: Managing Hosts and Services</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="enrolling-machines.html"><strong>Next</strong>6.3. Enrolling Clients Manually</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-locations.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-locations.html
index f2fc183..eb4b432 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-locations.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-locations.html
@@ -1,28 +1,38 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.3. Configuring Locations</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9.3. Configuring Locations</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="automount.html" title="Chapter 7. Identity: Using Automount" /><link rel="prev" href="configuring-automount.html" title="7.2. Configuring Automount" /><link rel="next" href="configuring-maps.html" title="7.4. Configuring Maps" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-automount.html"><strong>Prev</strong></a></li><li class="next"><
a accesskey="n" href="configuring-maps.html"><strong>Next</strong></a></li></ul><div class="section" id="adding-locations"><div class="titlepage"><div><div><h2 class="title" id="adding-locations">7.3. Configuring Locations</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="automount.html" title="Chapter 9. Policy: Using Automount" /><link rel="prev" href="configuring-automount.html" title="9.2. Configuring Automount" /><link rel="next" href="configuring-maps.html" title="9.4. Configuring Maps" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-automount.html"><strong>Prev</strong></a></li><li class="next"><a
accesskey="n" href="configuring-maps.html"><strong>Next</strong></a></li></ul><div class="section" id="adding-locations"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="adding-locations">9.3. Configuring Locations</h2></div></div></div><div class="para">
A location is a set of maps, which are all stored in <code class="filename">auto.master</code>, and a location can store multiple maps. The location entry only works as a container for map entries; it is not an automount configuration in and of itself.
- </div><div class="para">
- To create a map, using the <code class="command">automountlocation-add</code> and give the location name.
+ </div><div class="section" id="configuring-locations-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="configuring-locations-ui">9.3.1. Configuring Locations through the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Automount</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of automount locations.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location-list.png" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name for the new location.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go to the map configuration for the new location. Create maps, as described in <a class="xref" href="configuring-maps.html#Configuring_Direct_Maps-ui">Section 9.4.1.1, “Configuring Direct Maps from the Web UI”</a> and <a class="xref" href="configuring-maps.html#Configuring_Indirect_Maps-ui">Section 9.4.2.1, “Configuring Indirect Maps from the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="configuring-locations-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="configuring-locations-cmd">9.3.2. Configuring Locations through the Command Line</h3></div></div></div><div class="para">
+ To create a map, using the <code class="command">automountlocation-add</code> and give the location name.
<pre class="screen">$ ipa automountlocation-add <em class="replaceable"><code>location</code></em></pre>
- For example:
- </div><pre class="screen">$ ipa automountlocation-add raleigh
+ For example:
+ </div><pre class="screen">$ ipa automountlocation-add raleigh
----------------------------------
Added automount location "raleigh"
----------------------------------
Location: raleigh</pre><div class="para">
- When a new location is created, two maps are automatically created for it, <code class="filename">auto.master</code> and <code class="filename">auto.direct</code>. <code class="filename">auto.master</code> is the root map for all automount maps for the location. <code class="filename">auto.direct</code> is the default map for direct mounts and is mounted on <code class="filename">/-</code>.
- </div><div class="para">
- To view all of the maps configured for a location as if they were deployed on a filesyste, use the <code class="command">automountlocation-tofiles</code> command:
- </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
+ When a new location is created, two maps are automatically created for it, <code class="filename">auto.master</code> and <code class="filename">auto.direct</code>. <code class="filename">auto.master</code> is the root map for all automount maps for the location. <code class="filename">auto.direct</code> is the default map for direct mounts and is mounted on <code class="filename">/-</code>.
+ </div><div class="para">
+ To view all of the maps configured for a location as if they were deployed on a filesystem, use the <code class="command">automountlocation-tofiles</code> command:
+ </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
/etc/auto.master:
/- /etc/auto.direct
---------------------------
-/etc/auto.direct:</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-automount.html"><strong>Prev</strong>7.2. Configuring Automount</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="configuring-maps.html"><strong>Next</strong>7.4. Configuring Maps</a></li></ul></body></html>
+/etc/auto.direct:</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-automount.html"><strong>Prev</strong>9.2. Configuring Automount</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="configuring-maps.html"><strong>Next</strong>9.4. Configuring Maps</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-netgroups.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-netgroups.html
index b17a52b..6deea9f 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-netgroups.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/adding-netgroups.html
@@ -1,18 +1,58 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9.2. Adding Netgroups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.2. Creating Netgroups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="nis.html" title="Chapter 9. Identity: Integrating with NIS Domains and Netgroups" /><link rel="prev" href="nis.html" title="Chapter 9. Identity: Integrating with NIS Domains and Netgroups" /><link rel="next" href="Exposing_Automount_Maps_to_NIS_Clients.html" title="9.3. Exposing Automount Maps to NIS Clients" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="
p" href="nis.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Next</strong></a></li></ul><div class="section" id="adding-netgroups"><div class="titlepage"><div><div><h2 class="title" id="adding-netgroups">9.2. Adding Netgroups</h2></div></div></div><div class="para">
- New netgroups are added using the <code class="command">netgroup-add</code> command. This adds only the group; members are added separately. Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them. There is also an option to set the NIS domain name to use for the group; this defaults to the FreeIPA domain, but it can be set to something different, depending on the network configuration.
- </div><pre class="screen">$ ipa netgroup-add --desc="<em class="replaceable"><code>description</code></em>" [--nisdomain=<em class="replaceable"><code>domainName</code></em>] <em class="replaceable"><code>groupName</code></em></pre><div class="para">
- For example:
- </div><pre class="screen"># ipa netgroup-add --desc="my new netgroup" --nisdomain=exampledomain example-group</pre><div class="para">
- Once the group is configured, then begin adding netgroup members with the <code class="command">netgroup-add-member</code> command. Users, groups, hosts, host groups, and other netgroups can all be added to the netgroup entry. The entry name of the NIS group being edited usually comes at the end of the command:
- </div><pre class="screen"># ipa netgroup-add-member --users=<em class="replaceable"><code>users</code></em> --groups=<em class="replaceable"><code>groups</code></em> --hosts=<em class="replaceable"><code>hosts</code></em> --hostgroups=<em class="replaceable"><code>hostGroups</code></em> --netgroups=<em class="replaceable"><code>netgroups</code></em> <em class="replaceable"><code>groupName</code></em></pre><div class="para">
- To set more than one member, use a comma-separated list with the option. For example, this sets two users and two hosts with the other configuration:
- </div><pre class="screen"># ipa netgroup-add-member --users=jsmith,bjensen --groups=ITadmin --hosts=host1.example.com,host2.example.com --hostgroups=EngDev --netgroups=nisgroup2 example-group</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="nis.html"><strong>Prev</strong>Chapter 9. Identity: Integrating with NIS Domains...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Next</strong>9.3. Exposing Automount Maps to NIS Clients</a></li></ul></body></html>
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="nis.html" title="Chapter 10. Policy: Integrating with NIS Domains and Netgroups" /><link rel="prev" href="nis.html" title="Chapter 10. Policy: Integrating with NIS Domains and Netgroups" /><link rel="next" href="Exposing_Automount_Maps_to_NIS_Clients.html" title="10.3. Exposing Automount Maps to NIS Clients" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="
p" href="nis.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Next</strong></a></li></ul><div class="section" id="adding-netgroups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="adding-netgroups">10.2. Creating Netgroups</h2></div></div></div><div class="para">
+ All netgroups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
+ </div><div class="para">
+ Netgroups are added in two steps: the group itself is created, and then members are added to it.
+ </div><div class="section" id="add-netgroup"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="add-netgroup">10.2.1. Adding Netgroups</h3></div></div></div><div class="section" id="add-netgroup-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-ui">10.2.1.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Netgroups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the netgroups list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter both a unique name and a description for the netgroup. Both the name and description are required.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-add.png" width="444" /></div></div><div class="para">
+ The group name is the identifier used for the netgroup in the FreeIPA domain, and it cannot be changed after it is created. The name cannot contain spaces, but other separators like an underscore (_) are allowed.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go immediately to the netgroup's edit pages.
+ </div></li><li class="listitem"><div class="para">
+ Optionally, set the NIS domain for the netgroup. This defaults to the FreeIPA domain, but it can be changed.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Enter the name of the alternate NIS domain in the <span class="guilabel"><strong>NIS domain name</strong></span> field.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-domain.png" width="444" /></div></div></li></ol></div></li><li class="listitem"><div class="para">
+ Add members, as described in <a class="xref" href="adding-netgroups.html#add-netgroup-members-ui">Section 10.2.2.1, “With the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="add-netgroup-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-cmd">10.2.1.2. With the Command Line</h4></div></div></div><div class="para">
+ New netgroups are added using the <code class="command">netgroup-add</code> command. This adds only the group; members are added separately. Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them. There is also an option to set the NIS domain name to use for the group; this defaults to the FreeIPA domain, but it can be set to something different, depending on the network configuration.
+ </div><pre class="screen">$ ipa netgroup-add --desc="<em class="replaceable"><code>description</code></em>" [--nisdomain=<em class="replaceable"><code>domainName</code></em>] <em class="replaceable"><code>groupName</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen"># ipa netgroup-add --desc="my new netgroup" --nisdomain=exampledomain example-group</pre></div></div><div class="section" id="add-netgroup-members"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="add-netgroup-members">10.2.2. Adding Netgroup Members</h3></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Netgroups can contain user groups, host groups, and other netgroups as their members. These are <span class="emphasis"><em>nested</em></span> groups.
+ </div><div class="para">
+ It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div><div class="para">
+ When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
+ </div></div></div><div class="section" id="add-netgroup-members-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-members-ui">10.2.2.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Netgroups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the netgroup to which to add members.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the tab for the type of netgroup member to add. Netgroups can have users, user groups, hosts, host groups, and other netgroups as members.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/netgroups-menu.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the users to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the names to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/nis-members.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="add-netgroup-members-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="add-netgroup-members-cmd">10.2.2.2. With the Command Line</h4></div></div></div><div class="para">
+ Once the group is configured, begin adding netgroup members with the <code class="command">netgroup-add-member</code> command. Users, groups, hosts, host groups, and other netgroups can all be added to the netgroup entry. The entry name of the NIS group being edited usually comes at the end of the command:
+ </div><pre class="screen"># ipa netgroup-add-member --users=<em class="replaceable"><code>users</code></em> --groups=<em class="replaceable"><code>groups</code></em> --hosts=<em class="replaceable"><code>hosts</code></em> --hostgroups=<em class="replaceable"><code>hostGroups</code></em> --netgroups=<em class="replaceable"><code>netgroups</code></em> <em class="replaceable"><code>groupName</code></em></pre><div class="para">
+ To set more than one member, use a comma-separated list with the option. For example, this sets two users and two hosts with the other configuration:
+ </div><pre class="screen"># ipa netgroup-add-member --users=jsmith,bjensen --groups=ITadmin --hosts=host1.example.com,host2.example.com --hostgroups=EngDev --netgroups=nisgroup2 example-group</pre></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="nis.html"><strong>Prev</strong>Chapter 10. Policy: Integrating with NIS Domains ...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Next</strong>10.3. Exposing Automount Maps to NIS Clients</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/automount.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/automount.html
index 3c00611..57a7f94 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/automount.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/automount.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 7. Identity: Using Automount</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 9. Policy: Using Automount</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Kerberos_Errors.html" title="6.6. Troubleshooting Kerberos Errors" /><link rel="next" href="configuring-automount.html" title="7.2. Configuring Automount" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Kerberos_Errors.html"><strong>Prev</strong></a></li><li class="next">
<a accesskey="n" href="configuring-automount.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="automount" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 7. Identity: Using Automount</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="automount.html#about-automount">7.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="configuring-automount.html">7.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Configuring_autofs_on_Linux">7.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Solaris_automount">7.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="adding-locations.html">7.3. Configuring Locations</a></span></dt><dt><span class="section"><a href="configuri
ng-maps.html">7.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-maps.html#Configuring_Direct_Maps">7.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#Configuring_Indirect_Maps">7.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#importing-maps">7.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="dns-resolve.html" title="8.11. Resolving Hostnames in the FreeIPA Domain" /><link rel="next" href="configuring-automount.html" title="9.2. Configuring Automount" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-resolve.html"><strong>Prev</strong></a></li><li class="ne
xt"><a accesskey="n" href="configuring-automount.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="automount" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 9. Policy: Using Automount</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="automount.html#about-automount">9.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="configuring-automount.html">9.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Configuring_autofs_on_Linux">9.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Solaris_automount">9.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="adding-locations.html">9.3. Configuring Locations</a></span></dt><dd><dl><dt><span class="section"><a href=
"adding-locations.html#configuring-locations-ui">9.3.1. Configuring Locations through the Web UI</a></span></dt><dt><span class="section"><a href="adding-locations.html#configuring-locations-cmd">9.3.2. Configuring Locations through the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="configuring-maps.html">9.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-maps.html#Configuring_Direct_Maps">9.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#Configuring_Indirect_Maps">9.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#importing-maps">9.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></div><div class="para">
Automount is a way of making directories on different servers available, automatically, when requested by a user. This works exceptionally well within an FreeIPA domain since it allows directories on clients within the domain to be shared easily. This is especially important with user home directories (<a class="xref" href="users.html#home-directories">Section 5.1, “Setting up User Home Directories”</a>).
</div><div class="para">
In FreeIPA, automount works with the internal LDAP directory and, if it is configured, DNS services.
- </div><div class="section" id="about-automount"><div class="titlepage"><div><div><h2 class="title" id="about-automount">7.1. About Automount and FreeIPA</h2></div></div></div><div class="para">
+ </div><div class="section" id="about-automount"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-automount">9.1. About Automount and FreeIPA</h2></div></div></div><div class="para">
Automount is a way to manage, organize, and access directories across multiple systems. Automount automatically mounts a directory whenever that resource is requested. Automount also provides a coherent structure to the way that this directories are organized. Every single directory, or <span class="emphasis"><em>mount point</em></span> is called a <span class="emphasis"><em>key</em></span>. Multiple keys that are grouped together are a <span class="emphasis"><em>map</em></span>, and maps are associated according to their physical or conceptual <span class="emphasis"><em>location</em></span>.
</div><div class="para">
The base configuration file for autofs is the <code class="filename">auto.master</code> file in the <code class="filename">/etc/</code> directory. There can be multiple <code class="filename">auto.master</code> configuration files in separate server locations, if necessary.
@@ -34,4 +34,4 @@ automountMapName: auto.master</pre><div class="para">
Solaris uses a different schema for autofs configuration than the schema used by FreeIPA. FreeIPA uses the 2307bis-style automount schema which is defined for 389 Directory Server.
</div></div></div><div class="para">
For automount to work within the FreeIPA domain, the NFS server must be configured as a FreeIPA client. Configuring NFS itself is covered in the <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/Storage_Administration_Guide/ch-nfs.html">Red Hat Enterprise Linux Storage Administration Guide</a>.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Kerberos_Errors.html"><strong>Prev</strong>6.6. Troubleshooting Kerberos Errors</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="configuring-automount.html"><strong>Next</strong>7.2. Configuring Automount</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-resolve.html"><strong>Prev</strong>8.11. Resolving Hostnames in the FreeIPA Domain</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="configuring-automount.html"><strong>Next</strong>9.2. Configuring Automount</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/basic-usage.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/basic-usage.html
index ff7f9b9..8f3f343 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/basic-usage.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/basic-usage.html
@@ -1,14 +1,125 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 4. Basic Usage</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 4. Basic Usage</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="uninstalling-clients.html" title="3.8. Uninstalling a FreeIPA Client" /><link rel="next" href="logging-in.html" title="4.2. Logging into FreeIPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="uninstalling-clients.html"><strong>Prev</strong></a></li><li class="next"><a a
ccesskey="n" href="logging-in.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="basic-usage" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 4. Basic Usage</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="basic-usage.html#running-scripts">4.1. Running FreeIPA Tools</a></span></dt><dt><span class="section"><a href="logging-in.html">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="logging-in.html#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="logging-in.html#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="logging-in.html#checking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="logging-in.html#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></d
t></dl></dd><dt><span class="section"><a href="opening-the-web-ui.html">4.3. Opening the FreeIPA Web UI</a></span></dt><dt><span class="section"><a href="config-browser.html">4.4. Configuring the Browser</a></span></dt><dt><span class="section"><a href="Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System.html">4.5. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="Enabling_UsernamePassword_Authentication_in_Your_Browser.html">4.6. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="Troubleshooting-UI.html">4.7. Troubleshooting UI Connection Problems</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="uninstalling-clients.html" title="3.8. Uninstalling a FreeIPA Client" /><link rel="next" href="logging-in.html" title="4.2. Logging into FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="uninstalling-clients.html"><strong>Prev</strong></a></li><li class="next"><a
accesskey="n" href="logging-in.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="basic-usage" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 4. Basic Usage</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="basic-usage.html#about-client-tools">4.1. About the FreeIPA Client Tools</a></span></dt><dd><dl><dt><span class="section"><a href="basic-usage.html#about-cli-tools">4.1.1. About the FreeIPA Command-Line Tools</a></span></dt><dt><span class="section"><a href="basic-usage.html#ipa-ui">4.1.2. Looking at the FreeIPA UI</a></span></dt></dl></dd><dt><span class="section"><a href="logging-in.html">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="logging-in.html#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="logging-in.html#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User
</a></span></dt><dt><span class="section"><a href="logging-in.html#checking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="logging-in.html#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="using-the-ui.html">4.3. Using the FreeIPA Web UI</a></span></dt><dd><dl><dt><span class="section"><a href="using-the-ui.html#opening-the-web-ui">4.3.1. Opening the FreeIPA Web UI</a></span></dt><dt><span class="section"><a href="using-the-ui.html#config-browser">4.3.2. Configuring the Browser</a></span></dt><dt><span class="section"><a href="using-the-ui.html#Using_a_Browser_on_Another_System">4.3.3. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="using-the-ui.html#Enabling_UsernamePassword_Authentication_in_Your_Browser">4.3.4. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a hr
ef="using-the-ui.html#Troubleshooting-UI">4.3.5. Troubleshooting UI Connection Problems</a></span></dt></dl></dd></dl></div><div class="para">
All of the access to FreeIPA, both through the web UI and through the command line, is done by a user authenticating to the FreeIPA domain. This chapter covers the basics of setting up browsers to handle Kerberos authentication, logging into FreeIPA, and troubleshooting some common connection issues.
- </div><div class="section" id="running-scripts"><div class="titlepage"><div><div><h2 class="title" id="running-scripts">4.1. Running FreeIPA Tools</h2></div></div></div><div class="para">
- The FreeIPA command-line tools are run as any other utilities in a shell. If there are special characters in the command — such as angle brackets (> and <), ampersands (&), asterisks (*), and pipes (|) — the characters must be escaped. Otherwise, the command fails because the shell cannot properly parse the unescaped characters.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="uninstalling-clients.html"><strong>Prev</strong>3.8. Uninstalling a FreeIPA Client</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="logging-in.html"><strong>Next</strong>4.2. Logging into FreeIPA</a></li></ul></body></html>
+ </div><div class="section" id="about-client-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-client-tools">4.1. About the FreeIPA Client Tools</h2></div></div></div><div class="para">
+ FreeIPA creates a domain of recognized services, host machines, and users with universally-applied authentication sources and common policies. From the perspective of a client machine and a FreeIPA user, the domain itself is fairly transparent after the initial configuration. All users need to do is log into the domain using Kerberos, and that's it.
+ </div><div class="para">
+ However, an administrator has two ongoing tasks: add principals to the FreeIPA Kerberos domain and set the domain policies and server configuration that govern domain interactions. FreeIPA has both command-line and web-based interfaces for administrators to use to manage the domain, services, and FreeIPA entries.
+ </div><div class="section" id="about-cli-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-cli-tools">4.1.1. About the FreeIPA Command-Line Tools</h3></div></div></div><div class="para">
+ The most common method to maintain the domain is using the command-line tools. FreeIPA has an incredibly broad set of scripts and commands that are available to administrators. The command-line scripts offer a number of benefits:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The scripts allow management tasks to be automated and performed repeatedly in a consistent way without manual intervention.
+ </div></li><li class="listitem"><div class="para">
+ Entries can be added with all possible attributes configured (or a desired subset of attributes) in a single step. The web UI frequently requires two steps to fully configure an entry: the first to create the entry and the next to add optional attributes.
+ </div></li><li class="listitem"><div class="para">
+ The command-line scripts support adding additional attributes which may not be available in the UI or even custom attributes to entries, if the schema is configured.
+ </div></li></ul></div><div class="para">
+ The potential disadvantage to the command-line scripts is that they are complex, which makes them difficult to use.
+ </div><div class="section" id="ipa-tool"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-tool">4.1.1.1. ipa and Other Command-Line Scripts</h4></div></div></div><div class="para">
+ There are two basic categories of command-line scripts that FreeIPA has available.
+ </div><div class="para">
+ The first is a selection of independent configuration scripts which are used to set up machines that operate within the domain. Most commonly, these are scripts to add machines to the domain (including <code class="command">ipa-server-install</code>, <code class="command">ipa-client-install</code>, and <code class="command">ipa-replica-install</code>). Some scripts are also available to enable services within the FreeIPA server. The domain server has a large number of different installation options and services — such as DNS, certificate services, and NIS management. All of these can be enabled at the time the server is set up, but none of those services are required. If a server is configured without a service like DNS, that service can be enabled later using a specific installation script, such as <code class="command">ipa-dns-install</code>.
+ </div><div class="para">
+ The real management functions of the domain are carried out with a single script: <code class="command">ipa</code>. The <code class="command">ipa</code> command is essentially a big plug-in container, and it supports dozens of plug-ins which it executes as subcommands. For example, adding a user is done using the <code class="command">user-add</code> plug-in, which is run like a <code class="command">user-add</code> subcommand:
+ </div><pre class="screen">ipa user-add <em class="replaceable"><code>options</code></em></pre><div class="para">
+ Related subcommands are grouped together into <span class="emphasis"><em>plug-in modules</em></span>. Commands for managing DNS entries like <code class="command">dnszone-add</code> and <code class="command">dnsrecord-add</code> all belong to the <span class="emphasis"><em>dns</em></span> module or <span class="emphasis"><em>topic</em></span>. All of the information for managing a specific area, with all of the supported commands and examples for each, are available by viewing the help for that topic:
+ </div><pre class="screen">ipa help <em class="replaceable"><code>topic</code></em></pre></div><div class="section" id="running-scripts"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="running-scripts">4.1.1.2. Tips for Running FreeIPA Tools</h4></div></div></div><div class="para">
+ The FreeIPA command-line tools are run as any other utilities in a shell. If there are special characters in the command — such as angle brackets (> and <), ampersands (&), asterisks (*), and pipes (|) — the characters must be escaped. Otherwise, the command fails because the shell cannot properly parse the unescaped characters.
+ </div></div></div><div class="section" id="ipa-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-ui">4.1.2. Looking at the FreeIPA UI</h3></div></div></div><div class="para">
+ The FreeIPA web UI is designed for simplicity. This was the primary design goal, and this means that the web UI offers benefits that make using FreeIPA simpler and clearer:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ It shows instant, visual relationships between entries (such as a user and all the groups, sudo rules, netgroups, and policies which are associated with that user).
+ </div></li><li class="listitem"><div class="para">
+ All entries are listed immediately without having to run a search. This makes it possible to browse entries. The UI also has a simple search box which quickly filters the list of entries.
+ </div></li><li class="listitem"><div class="para">
+ The interface is intuitive to use, without having to learn the command-line tools.
+ </div></li><li class="listitem"><div class="para">
+ The web UI can be accessed from machines outside the FreeIPA domain, so the domain can be managed from anywhere.
+ </div></li></ul></div><div class="section" id="ui-layout"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ui-layout">4.1.2.1. The UI Layout</h4></div></div></div><div class="para">
+ The web UI has three major functional areas which correspond to each of the major functions of FreeIPA: identity management, policy management, and domain configuration.
+ </div><div class="table" id="tab.ui-tasks"><h6>Table 4.1. Configuration Areas Per Tab</h6><div class="table-contents"><table summary="Configuration Areas Per Tab" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Main Menu Tab
+ </th><th>
+ Configuration Areas
+ </th></tr></thead><tbody><tr><td>
+ Identity
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ User entries
+ </div></li><li class="listitem"><div class="para">
+ User groups entries
+ </div></li><li class="listitem"><div class="para">
+ Host/client entries
+ </div></li><li class="listitem"><div class="para">
+ Host group entries
+ </div></li><li class="listitem"><div class="para">
+ Netgroups entries
+ </div></li><li class="listitem"><div class="para">
+ Domain services entries
+ </div></li><li class="listitem"><div class="para">
+ DNS (if configured)
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ Policy
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Host-based access control
+ </div></li><li class="listitem"><div class="para">
+ Sudo rules
+ </div></li><li class="listitem"><div class="para">
+ Automount locations
+ </div></li><li class="listitem"><div class="para">
+ User password policies
+ </div></li><li class="listitem"><div class="para">
+ Kerberos ticket policies
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ Configuration
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Role-based access control (permissions based on group membership)
+ </div></li><li class="listitem"><div class="para">
+ Self permissions
+ </div></li><li class="listitem"><div class="para">
+ Delegations (user access control over other users)
+ </div></li><li class="listitem"><div class="para">
+ Server-wide configuration
+ </div></li></ul></div>
+
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
+ The <span class="emphasis"><em>main menu</em></span> at the top of every page has three tabs which correspond to the functional areas listed in <a class="xref" href="basic-usage.html#tab.ui-tasks">Table 4.1, “Configuration Areas Per Tab”</a>. When a tab is selected, there is a submenu of the different configuration areas. Some configuration areas may have multiple possible entries; for example, role-based access controls define user roles/groups, the areas that access can be granted or denied (privileges), and then the permissions granted to those areas. Each separate configuration entry has its own task area beneath the primary configuration area.
+ </div><div class="figure" id="fig.ui-tabs"><div class="figure-contents"><div class="mediaobject"><img src="images/ui-tabs.png" width="444" alt="The Main Menu" /></div></div><h6>Figure 4.1. The Main Menu</h6></div><br class="figure-break" /><div class="para">
+ All entries for a configuration area are listed together on the main page for that area. This page provides direct links to individual entry pages, as well as basic information (the <span class="emphasis"><em>attributes</em></span>) about the entry. (This is usually just the description, but user entries show a lot more information.)
+ </div><div class="para">
+ The page also has some tasks that can be performed on it. For a list page that shows entries, this can be creating or deleting an entry. For a list page for groups, the tasks are for establishing relationships between entities, either by adding (<span class="emphasis"><em>enrolling</em></span>) or removing an entity from that group. Both individual entries and groups can be searched for through the list page.
+ </div><div class="figure" id="fig.ui-list"><div class="figure-contents"><div class="mediaobject"><img src="images/ui-full-list.png" width="444" alt="List View" /></div></div><h6>Figure 4.2. List View</h6></div><br class="figure-break" /><div class="para">
+ Each entry page is a form which allows that entry to be edited. This is done by editing text <span class="emphasis"><em>fields</em></span> or by selecting items from drop-down menus.
+ </div><div class="figure" id="fig.ui-form"><div class="figure-contents"><div class="mediaobject"><img src="images/ui-full-form.png" width="444" alt="Form/Entry View" /></div></div><h6>Figure 4.3. Form/Entry View</h6></div><br class="figure-break" /></div><div class="section" id="page-elements"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="page-elements">4.1.2.2. Page Elements</h4></div></div></div><div class="para">
+ The web UI uses common elements on all pages.
+ </div><div class="para">
+ The most basic is that all blue text is a link to an entry or to an action.
+ </div><div class="para">
+ When a task like adding an entry or saving a change is possible, the task link it blue. When it is not possible (such as no items have been selected to be deleted) then the task is grayed out.
+ </div><div class="figure" id="fig.ui-task-links"><div class="figure-contents"><div class="mediaobject"><img src="images/update-link.png" alt="Active Task Link" /></div></div><h6>Figure 4.4. Active Task Link</h6></div><br class="figure-break" /><div class="para">
+ All list pages display direct links to entry pages. However, some entries are essentially nested. For example, in automount configuration, the primary entry is the location, and then keys, mount points, and maps are associated with that location as children entries. This hierarchy is reflected in breadcrumb navigation near the top of the page, so it is easy to identify where you are in the UI and how this entry relates to any other related entries.
+ </div><div class="figure" id="fig.ui-breadcrumbs"><div class="figure-contents"><div class="mediaobject"><img src="images/automount-breadcrumbs.png" alt="Entry Breadcrumbs" /></div></div><h6>Figure 4.5. Entry Breadcrumbs</h6></div><br class="figure-break" /><div class="para">
+ Most entries have a variety of different configuration areas. A simple user entry has account activity settings, personal information, address information, organizational information, and other contact information. Related attributes are grouped together logically in the UI. These entry form areas can be collapsed or expanded using the arrows to control the amount of information displayed on the page.
+ </div><div class="figure" id="fig.ui-arrows"><div class="figure-contents"><div class="mediaobject"><img src="images/collapse-arrows.png" alt="Collapsing and Expanding Form Elements" /></div></div><h6>Figure 4.6. Collapsing and Expanding Form Elements</h6></div><br class="figure-break" /><div class="para">
+ When entries are created, they are added with only the required attributes. Additional attributes can be added manually. Some attributes have default values added to the entry and simply need to be edited; other attributes may not exist at all in the new entry and need to be added.
+ </div><div class="figure" id="fig.ui-add-attr"><div class="figure-contents"><div class="mediaobject"><img src="images/user-addcontact.png" alt="Add an Attribute" /></div></div><h6>Figure 4.7. Add an Attribute</h6></div><br class="figure-break" /><div class="para">
+ Any changes to any attribute can be undone. A single attribute change can be undone by clicking the dynamic <span class="guibutton"><strong>undone</strong></span> button; all changes can be undone by clicking the <span class="guilabel"><strong>Reset</strong></span> link at the top of the entry details page.
+ </div><div class="figure" id="fig.ui-undo"><div class="figure-contents"><div class="mediaobject"><img src="images/undo-button.png" width="444" alt="Undo Edits" /></div></div><h6>Figure 4.8. Undo Edits</h6></div><br class="figure-break" /></div><div class="section" id="abt-members"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="abt-members">4.1.2.3. Showing and Changing Group Members</h4></div></div></div><div class="para">
+ Members can be added to a group through the group configuration. There are tabs for all the member types which can belong to the group, and an administrator picks all of the marching entries and adds them as members.
+ </div><div class="para">
+ However, it is also possible for an entity to be added to a group through its own configuration. Each entry has a list of tabs that displays group types that the entry can join. The list of all groups of that type are displayed, and the entity can be added to multiple groups at the same time.
+ </div><div class="figure" id="fig.ui-member-menu"><div class="figure-contents"><div class="mediaobject"><img src="images/groups-menu2.png" width="444" alt="Member Of..." /></div></div><h6>Figure 4.9. Member Of...</h6></div><br class="figure-break" /></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="uninstalling-clients.html"><strong>Prev</strong>3.8. Uninstalling a FreeIPA Client</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="logging-in.html"><strong>Next</strong>4.2. Logging into FreeIPA</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/bind-dyndb-ldap-config.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/bind-dyndb-ldap-config.html
index 8455873..70a657b 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/bind-dyndb-ldap-config.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/bind-dyndb-ldap-config.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.3. Configuring the bind-dyndb-ldap Plug-in</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.3. Configuring the bind-dyndb-ldap Plug-in</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="enabling-dns.html" title="10.2. Configuring DNS in FreeIPA" /><link rel="next" href="changing-forwarder.html" title="10.4. Changing Recursive Queries Against Forwarders" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-dns.html"><strong>Prev</strong></
a></li><li class="next"><a accesskey="n" href="changing-forwarder.html"><strong>Next</strong></a></li></ul><div class="section" id="bind-dyndb-ldap-config"><div class="titlepage"><div><div><h2 class="title" id="bind-dyndb-ldap-config">10.3. Configuring the bind-dyndb-ldap Plug-in</h2></div></div></div><div class="para">
- The <code class="filename">bind-dyndb-ldap</code> system plug-in contains a DNS record cache for zones and a history of successful DNS resolutions. Maintaiing the cache improves lookup performance in the Directory Server because it is not necessary to query the directory services every time there is a new DNS request.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="enabling-dns.html" title="8.2. Configuring DNS in FreeIPA" /><link rel="next" href="changing-forwarder.html" title="8.4. Changing Recursive Queries Against Forwarders" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-dns.html"><strong>Prev</strong></a>
</li><li class="next"><a accesskey="n" href="changing-forwarder.html"><strong>Next</strong></a></li></ul><div class="section" id="bind-dyndb-ldap-config"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="bind-dyndb-ldap-config">8.3. Configuring the bind-dyndb-ldap Plug-in</h2></div></div></div><div class="para">
+ The <code class="filename">bind-dyndb-ldap</code> system plug-in contains a DNS record cache for zones and a history of successful DNS resolutions. Maintaining the cache improves lookup performance in the Directory Server because it is not necessary to query the directory services every time there is a new DNS request.
</div><div class="para">
- When this plug-in is intalled and FreeIPA is configured to manage DNS, then a new configuration section is added to the plug-in configuration.
- </div><div class="example" id="ex.bind-dyndb-ldap"><h6>Example 10.1. Default dynamic-db Configuration</h6><div class="example-contents"><pre class="screen">dynamic-db "ipa" {
+ When this plug-in is installed and FreeIPA is configured to manage DNS, then a new configuration section is added to the plug-in configuration.
+ </div><div class="example" id="ex.bind-dyndb-ldap"><h6>Example 8.1. Default dynamic-db Configuration</h6><div class="example-contents"><pre class="screen">dynamic-db "ipa" {
library "ldap.so";
arg "uri ldapi://%2fvar%2frun%2fslapd-EXAMPLE-COM.socket";
arg "base cn=dns, dc=example,dc=com";
@@ -23,11 +23,11 @@
</pre></div></div><br class="example-break" /><div class="para">
This configuration uses implied default values for <span class="emphasis"><em>other</em></span> plug-in behaviors, like how long it maintains the cache. The assumed, default configuration can be changed by adding arguments to the <code class="command">dynamic-db "ipa"</code> entry.
</div><pre class="screen">arg "<em class="replaceable"><code>argument value</code></em>";</pre><div class="para">
- The additional parameters are listed in <a class="xref" href="bind-dyndb-ldap-config.html#tab.bind-dyndb-ldap-param">Table 10.2, “Additional bind-dyndb-ldap Configuration Parameters”</a>.
+ The additional parameters are listed in <a class="xref" href="bind-dyndb-ldap-config.html#tab.bind-dyndb-ldap-param">Table 8.2, “Additional bind-dyndb-ldap Configuration Parameters”</a>.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Both cache updates and new zone detection are usually done when the name service configuration is reloaded:
</div><pre class="screen"># rndc reload</pre></div></div><div class="para">
- To improve DNS performance, it may be necessary to change the cache setting. By default, DNS records are kept in cache and considered valid for 120 seconds. This means that if a DNS record changes, it will not (necessarily) be propogated to the name server for up to 120 seconds. If the Directory Server has a high traffic volume or if records do not change frequently, then the cache time can be increased to improve performance by adding the <em class="parameter"><code>cache_ttl</code></em> parameter.
+ To improve DNS performance, it may be necessary to change the cache setting. By default, DNS records are kept in cache and considered valid for 120 seconds. This means that if a DNS record changes, it will not (necessarily) be propagated to the name server for up to 120 seconds. If the Directory Server has a high traffic volume or if records do not change frequently, then the cache time can be increased to improve performance by adding the <em class="parameter"><code>cache_ttl</code></em> parameter.
</div><pre class="screen">dynamic-db "ipa" {
...
arg "cache_ttl 1800";
@@ -45,7 +45,7 @@
</div><pre class="screen">dynamic-db "ipa" {
...
arg "psearch yes";
-};</pre><div class="table" id="tab.bind-dyndb-ldap-param"><h6>Table 10.2. Additional bind-dyndb-ldap Configuration Parameters</h6><div class="table-contents"><table summary="Additional bind-dyndb-ldap Configuration Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+};</pre><div class="table" id="tab.bind-dyndb-ldap-param"><h6>Table 8.2. Additional bind-dyndb-ldap Configuration Parameters</h6><div class="table-contents"><table summary="Additional bind-dyndb-ldap Configuration Parameters" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Description
@@ -60,7 +60,7 @@
</td></tr><tr><td>
zone_refresh
</td><td>
- Checks the DNS configuration in the Directory Server for new zones.
+ Checks frequency, in seconds, that the server checks the DNS configuration in the Directory Server for new zones.
</td><td>
60 (seconds)
</td></tr><tr><td>
@@ -69,4 +69,4 @@
Enables persistent searches for the Directory Server so the BIND service immediately receives an update notification when a new DNS zone is added.
</td><td>
no
- </td></tr></tbody></table></div></div><br class="table-break" /></div><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-dns.html"><strong>Prev</strong>10.2. Configuring DNS in FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="changing-forwarder.html"><strong>Next</strong>10.4. Changing Recursive Queries Against Forwarde...</a></li></ul></body></html>
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><ul class="docnav"><li class="previous"><a accesskey="p" href="enabling-dns.html"><strong>Prev</strong>8.2. Configuring DNS in FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="changing-forwarder.html"><strong>Next</strong>8.4. Changing Recursive Queries Against Forwarders</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmonger-tracking-certs.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmonger-tracking-certs.html
new file mode 100644
index 0000000..acc0ae8
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmonger-tracking-certs.html
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>18.3. Tracking Certificates with certmonger</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="certmongerX.html" title="Chapter 18. Working with certmonger" /><link rel="prev" href="Working_with_certmonger-Using_certmonger_with_NSS.html" title="18.2. Storing Certificates in NSS Databases" /><link rel="next" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html" title="Appendix A. Frequently Asked Questions" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li
class="previous"><a accesskey="p" href="Working_with_certmonger-Using_certmonger_with_NSS.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html"><strong>Next</strong></a></li></ul><div class="section" id="certmonger-tracking-certs"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="certmonger-tracking-certs">18.3. Tracking Certificates with certmonger</h2></div></div></div><div class="para">
+ <code class="command">certmonger</code> can manage the entire certificate lifecycle. Along with generating requests, <code class="command">certmonger</code> can track a certificate and automatically renew it when it expires, at the end of its validity period.
+ </div><div class="para">
+ This is done using the <code class="command">start-tracking</code> command with the <code class="command">getcert</code> command. The <code class="option">-I</code> option creates the tracking entry, and then there are pointers to the key and certificate files, either in NSS databases (<code class="option">-d</code> and <code class="option">-n</code>) or in the PEM files (<code class="option">-f</code> and <code class="option">-k</code>). The <code class="option">-r</code> option tells <code class="command">certmonger</code> to renew the certificate.
+ </div><pre class="screen"># ipa-getcert start-tracking -I cert1-tracker -d /export/alias -n ServerCert -r</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ The <code class="option">-r</code> option can be passed with the <code class="command">request</code> command, in <a class="xref" href="certmongerX.html#ex.Using_certmonger_with_IPA">Example 18.1, “Using certmonger for a Service”</a>. In that case, the requested certificate is automatically tracked and renewed by <code class="command">certmonger</code>. Then, it is not necessary to configure tracking manually.
+ </div></div></div><div class="para">
+ A certificate can be <span class="emphasis"><em>un</em></span>tracked by <code class="command">certmonger</code> by using the <code class="command">stop-tracking</code> command.
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Working_with_certmonger-Using_certmonger_with_NSS.html"><strong>Prev</strong>18.2. Storing Certificates in NSS Databases</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html"><strong>Next</strong>Appendix A. Frequently Asked Questions</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmongerX.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmongerX.html
index 7e51eeb..83010fa 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmongerX.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/certmongerX.html
@@ -1,60 +1,46 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.6. Working with certmonger</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 18. Working with certmonger</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /><link rel="prev" href="Client_Problems.html" title="14.5. Debugging Client Connection Problems" /><link rel="next" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 15. Migrating from a Directory Server to IPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a a
ccesskey="p" href="Client_Problems.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Next</strong></a></li></ul><div class="section" id="certmongerX"><div class="titlepage"><div><div><h2 class="title" id="certmongerX">14.6. Working with certmonger</h2></div></div></div><div class="para">
- Part of managing machine authentication is managing machine certificates. The FreeIPA server can handle this through an internal certificate authority. On clients, FreeIPA manages the certificate lifecycle with the <span class="emphasis"><em>certmonger</em></span> service.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html" title="17.5. Scenario 2: Using SSSD as Part of Migration" /><link rel="next" href="Working_with_certmonger-Using_certmonger_with_NSS.html" title="18.2. Storing Certificates in NSS Databases" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="d
ocnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Working_with_certmonger-Using_certmonger_with_NSS.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="certmongerX" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 18. Working with certmonger</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="certmongerX.html#certmonger-req">18.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="Working_with_certmonger-Using_certmonger_with_NSS.html">18.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="certmonger-tracking-certs.html">18.3. Tracking Certificates with certmonger</a></span></dt></dl></div><div class="para">
+ Part of managing machine authentication is managing machine certificates. The FreeIPA server can handle this through an internal certificate authority. On clients, FreeIPA manages the certificate lifecycle with the <span class="emphasis"><em>certmonger</em></span> service.
+ </div><div class="para">
+ The <code class="systemitem">certmonger</code> daemon, and its command-line clients, simplifies the process of generating public/private key pairs, creating certificate requests, and submitting requests to a CA for signing. As part of managing certificates, the <code class="systemitem">certmonger</code> daemon monitors certificates for expiration and can renew certificates that are about to expire. The certificates that <code class="systemitem">certmonger</code> monitors is tracked in files stored in a configurable directory. The default location is <code class="filename">/var/lib/certmonger/requests</code>.
+ </div><div class="para">
+ <code class="command">certmonger</code> uses the <code class="command">getcert</code> command to manage all certificates, but there are essentially container commands that perform the certificate management tasks depending on the certificate authority type — the FreeIPA CA or self-signed. The command line tool used has different prefixes to identify the different CA types:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ ipa-getcert
+ </div></li><li class="listitem"><div class="para">
+ selfsign-getcert
+ </div></li></ul></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Because of general security issues, self-signed certificates are not typically used in production, but can be used for development and testing.
+ </div></div></div><div class="section" id="certmonger-req"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="certmonger-req">18.1. Requesting a Certificate with certmonger</h2></div></div></div><div class="para">
+ With the FreeIPA CA, <code class="command">certmonger</code> uses the <code class="command">ipa-getcert</code> command.
</div><div class="para">
- The <code class="systemitem">certmonger</code> daemon, and its command-line clients, simplifies the process of generating public/private key pairs, creating certificate reqests, and submitting requests to a CA for signing. As part of managing certificates, the <code class="systemitem">certmonger</code> daemon monitors certificates for expiration and can renew certificates that are about to expire. The certificates that <code class="systemitem">certmonger</code> monitors is tracked in files stored in a configurable directory. The default location is <code class="filename">/var/lib/certmonger/requests</code>.
+ A simple request specifies the security (usually NSS) database that will store the certificate and the certificate nickname.
+<pre class="screen"># ipa-getcert request -d /etc/pki/nssdb -n Server-Cert</pre>
+
+ </div><div class="para">
+ The <code class="filename">/etc/pki/nssdb</code> file is the global NSS database, and <code class="literal">Server-Cert</code> is the nickname of this certificate. The certificate nickname must be unique within this database.
</div><div class="para">
- <code class="command">certmonger</code> uses the <code class="command">getcert</code> command to manage all certificates, but there are essentially container commands that perform the certificate management tasks depending on the certificate authority type — the FreeIPA CA or self-signed. The command line tool used has different prefixes to identify the different CA types:
+ When requesting a certificate to be used with a FreeIPA service, the <code class="option">-K</code> option is required to specify the service principal. Otherwise, <code class="command">certmonger</code> assumes the certificate is for a host. The <code class="option">-N</code> option must specify the certificate subject DN, and the subject base DN must match the base DN for the FreeIPA server, or the request is rejected.
+ </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre><div class="example" id="ex.Using_certmonger_with_IPA"><h6>Example 18.1. Using certmonger for a Service</h6><div class="example-contents"><pre class="screen">$ ipa-getcert request -r -f /etc/httpd/conf/ssl.crt/server.crt -k /etc/httpd/conf/ssl.key/server.key -N CN=`hostname --fqdn` -D `hostname` -U id-kp-serverAuth</pre></div></div><br class="example-break" /><div class="para">
+ The options vary depending on whether you are using a self-signed certificate (<code class="command">selfsign-getcert</code>), the desired configuration for the final certificate, and other settings. In <a class="xref" href="certmongerX.html#ex.Using_certmonger_with_IPA">Example 18.1, “Using certmonger for a Service”</a>, these are common options to use:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- ipa-getcert
+ The <code class="option">-r</code> option will automatically renew the certificate if the key pair already exists. This is used by default.
</div></li><li class="listitem"><div class="para">
- selfsign-getcert
- </div></li></ul></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Because of general security issues, self-signed certificates are not typically used in production, but can be used for development and testing.
- </div></div></div><div class="section" id="certmonger-req"><div class="titlepage"><div><div><h3 class="title" id="certmonger-req">14.6.1. Requesting a Certificate with certmonger</h3></div></div></div><div class="para">
- With the FreeIPA CA, <code class="command">certmonger</code> uses the <code class="command">ipa-getcert</code> command.
- </div><div class="para">
- A simple request specifies the security (usually NSS) database that will store the certificate and the certificate nickname.
-<pre class="screen"># ipa-getcert request -d /etc/pki/nssdb -n Server-Cert</pre>
-
- </div><div class="para">
- The <code class="filename">/etc/pki/nssdb</code> file is the global NSS database, and <code class="literal">Server-Cert</code> is the nickname of this certificate. The certificate nickname must be unique within this database.
- </div><div class="para">
- When requesting a certificate to be used with a FreeIPA service, the <code class="option">-K</code> option is required to specify the service principal. Otherwise, <code class="command">certmonger</code> assumes the certificate is for a host. The <code class="option">-N</code> option must specify the certificate subject DN, and the subject base DN must match the base DN for the FreeIPA server, or the request is rejected.
- </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre><div class="example" id="ex.Using_certmonger_with_IPA"><h6>Example 14.1. Using certmonger for a Service</h6><div class="example-contents"><pre class="screen">$ ipa-getcert request -r -f /etc/httpd/conf/ssl.crt/server.crt -k /etc/httpd/conf/ssl.key/server.key -N CN=`hostname --fqdn` -D `hostname` -U id-kp-serverAuth</pre></div></div><br class="example-break" /><div class="para">
- The options vary depending on whether you are using a self-signed certificate (<code class="command">selfsign-getcert</code>), the desired configuration for the final certificate, and other settings. In <a class="xref" href="certmongerX.html#ex.Using_certmonger_with_IPA">Example 14.1, “Using certmonger for a Service”</a>, these are common options to use:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The <code class="option">-r</code> option will automatically renew the certificate if the keypair already exists. This is used by default.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-f</code> option stores the certificate in the given file.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-k</code> option either stores the key in the given file or, if the key file already exists, uses the key in the file.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-N</code> option gives the subject name.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-D</code> option gives the DNS domain name.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-U</code> option sets the extended key usage flag.
- </div></li></ul></div></div><div class="section" id="Working_with_certmonger-Using_certmonger_with_NSS"><div class="titlepage"><div><div><h3 class="title" id="Working_with_certmonger-Using_certmonger_with_NSS">14.6.2. Storing Certificates in NSS Databases</h3></div></div></div><div class="para">
- By default, <code class="command">certmonger</code> uses plaintext files to store the key and the certificate, but these keys and certificates can also be stored in NSS databases. This is done using the <code class="option">-d</code> option to set the security database location and <code class="option">-n</code> to give the certificate nickname which is used for the certificate in the database. These options are used instead of the PEM files given in the <code class="option">-f</code> and <code class="option">-k</code> options.
- </div><div class="para">
- For example:
-<pre class="screen"># ipa-getcert request <strong class="userinput"><code>-d /export/alias -n ServerCert</code></strong> ...</pre>
-
- </div></div><div class="section" id="certmonger-tracking-certs"><div class="titlepage"><div><div><h3 class="title" id="certmonger-tracking-certs">14.6.3. Tracking Certificates with certmonger</h3></div></div></div><div class="para">
- <code class="command">certmonger</code> can manage the entire certificate lifecycle. Along with generating requests, <code class="command">certmonger</code> can track a certificate and automatically renew it when it expires, at the end of its validity period.
- </div><div class="para">
- This is done using the <code class="command">start-tracking</code> command with the <code class="command">getcert</code> command. The <code class="option">-I</code> option creates the tracking entry, and then there are pointers to the key and certificate files, either in NSS databases (<code class="option">-d</code> and <code class="option">-n</code>) or in the PEM files (<code class="option">-f</code> and <code class="option">-k</code>). The <code class="option">-r</code> option tells <code class="command">certmonger</code> to renew the certificate.
- </div><pre class="screen"># ipa-getcert start-tracking -I cert1-tracker -d /export/alias -n ServerCert -r</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- The <code class="option">-r</code> option can be passed with the <code class="command">request</code> command, in <a class="xref" href="certmongerX.html#ex.Using_certmonger_with_IPA">Example 14.1, “Using certmonger for a Service”</a>. In that case, the requested certificate is automatically tracked and renewed by <code class="command">certmonger</code>. Then, it is not necessary to configure tracking manually.
- </div></div></div><div class="para">
- A certificate can be <span class="emphasis"><em>un</em></span>tracked by <code class="command">certmonger</code> by using the <code class="command">stop-tracking</code> command.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Client_Problems.html"><strong>Prev</strong>14.5. Debugging Client Connection Problems</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Next</strong>Chapter 15. Migrating from a Directory Server to ...</a></li></ul></body></html>
+ The <code class="option">-f</code> option stores the certificate in the given file.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-k</code> option either stores the key in the given file or, if the key file already exists, uses the key in the file.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-N</code> option gives the subject name.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-D</code> option gives the DNS domain name.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-U</code> option sets the extended key usage flag.
+ </div></li></ul></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Prev</strong>17.5. Scenario 2: Using SSSD as Part of Migration</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Working_with_certmonger-Using_certmonger_with_NSS.html"><strong>Next</strong>18.2. Storing Certificates in NSS Databases</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-forwarder.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-forwarder.html
index acce8af..02f7085 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-forwarder.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-forwarder.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.4. Changing Recursive Queries Against Forwarders</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.4. Changing Recursive Queries Against Forwarders</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="bind-dyndb-ldap-config.html" title="10.3. Configuring the bind-dyndb-ldap Plug-in" /><link rel="next" href="finding-dns-zones.html" title="10.5. Finding and Displaying DNS Zones" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="bind-dyndb-ldap-config.html"><str
ong>Prev</strong></a></li><li class="next"><a accesskey="n" href="finding-dns-zones.html"><strong>Next</strong></a></li></ul><div class="section" id="changing-forwarder"><div class="titlepage"><div><div><h2 class="title" id="changing-forwarder">10.4. Changing Recursive Queries Against Forwarders</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="bind-dyndb-ldap-config.html" title="8.3. Configuring the bind-dyndb-ldap Plug-in" /><link rel="next" href="Managing_DNS_Zones-Adding_DNS_Zones.html" title="8.5. Adding DNS Zones" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="bind-dyndb-ldap-config.html"><str
ong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Adding_DNS_Zones.html"><strong>Next</strong></a></li></ul><div class="section" id="changing-forwarder"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="changing-forwarder">8.4. Changing Recursive Queries Against Forwarders</h2></div></div></div><div class="para">
The <code class="command">ipa-client-install</code> script sets a configuration statement in the <code class="filename">/etc/named.conf</code> file that allows name resolution against hosts that are outside the FreeIPA DNS domain. (This requires that the FreeIPA server be set up with DNS configured and with forwarders configured.) What this means is that any host is permitted to issue recursive queries against configured forwarders.
</div><div class="para">
This behavior can be changed by changed the <code class="command">allow-recursion</code> statement.
@@ -21,4 +21,4 @@
Restart the <code class="command">named</code> service.
</div><pre class="screen">service named restart</pre></li></ol></div><div class="para">
The name server documentation has more details on editing configuration statements.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="bind-dyndb-ldap-config.html"><strong>Prev</strong>10.3. Configuring the bind-dyndb-ldap Plug-in</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="finding-dns-zones.html"><strong>Next</strong>10.5. Finding and Displaying DNS Zones</a></li></ul></body></html>
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="bind-dyndb-ldap-config.html"><strong>Prev</strong>8.3. Configuring the bind-dyndb-ldap Plug-in</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Adding_DNS_Zones.html"><strong>Next</strong>8.5. Adding DNS Zones</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-pwds.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-pwds.html
index 9118a5e..c2fc3e1 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-pwds.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/changing-pwds.html
@@ -1,16 +1,14 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.4. Changing Passwords</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.3. Changing Passwords</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html" title="5.3. Specifying Default User Settings" /><link rel="next" href="user-pwdpolicy.html" title="5.5. Defining Password Policies" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_I
PA_Users-Specifying_Default_User_Settings.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="user-pwdpolicy.html"><strong>Next</strong></a></li></ul><div class="section" id="changing-pwds"><div class="titlepage"><div><div><h2 class="title" id="changing-pwds">5.4. Changing Passwords</h2></div></div></div><div class="para">
- Changing a password — your own or another user's — is done using the <code class="command">user-mod</code> command, as with other user account changes.
- </div><pre class="screen">$ ipa user-mod jsmith --password</pre><div class="para">
- Password policies (<a class="xref" href="user-pwdpolicy.html">Section 5.5, “Defining Password Policies”</a>) and minimal access restrictions can be applied to a password change operation:
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="managing-users.html" title="5.2. Managing User Accounts" /><link rel="next" href="Managing-Unique_UID_and_GID_Attributes.html" title="5.4. Managing Unique UID and GID Number Assignments" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-users.htm
l"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing-Unique_UID_and_GID_Attributes.html"><strong>Next</strong></a></li></ul><div class="section" id="changing-pwds"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="changing-pwds">5.3. Changing Passwords</h2></div></div></div><div class="para">
+ Password policies (<a class="xref" href="user-pwdpolicy.html">Chapter 11, <em>Policy: Defining Password Policies</em></a>) and minimal access restrictions can be applied to a password change operation:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Regular, non-administrative users can change only their personal passwords, and all passwords are constrained by the FreeIPA password policies.
</div><div class="para">
@@ -19,4 +17,16 @@
Changing a password as the FreeIPA admin user overrides any FreeIPA password policies, but the password expires immediately. This requires the user to change the password at the next login. Similarly, any user who has password change rights can change a password and no password policies are applied, but the other user must reset the password at the next log in.
</div></li><li class="listitem"><div class="para">
Changing a password as the LDAP Directory Manager user, <span class="emphasis"><em>using LDAP tools</em></span>, overrides any FreeIPA password policies.
- </div></li></ul></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Prev</strong>5.3. Specifying Default User Settings</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="user-pwdpolicy.html"><strong>Next</strong>5.5. Defining Password Policies</a></li></ul></body></html>
+ </div></li></ul></div><div class="section" id="pwd-reset-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="pwd-reset-ui">5.3.1. From the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user for whom to reset the password. All users can change their own password; only administrators or users with delegated permissions can change other user's passwords.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Account Settings</strong></span> area.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Reset Password</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-reset1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the pop-up box, enter and confirm the new password.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-reset2.png" width="444" /></div></div></li></ol></div></div><div class="section" id="pwd-reset-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="pwd-reset-cmd">5.3.2. From the Command Line</h3></div></div></div><div class="para">
+ Changing a password — your own or another user's — is done using the <code class="command">user-mod</code> command, as with other user account changes.
+ </div><pre class="screen">$ ipa user-mod jsmith --password</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-users.html"><strong>Prev</strong>5.2. Managing User Accounts</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing-Unique_UID_and_GID_Attributes.html"><strong>Next</strong>5.4. Managing Unique UID and GID Number Assignmen...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html
index f6a7cf1..ad9efd1 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html
@@ -1,50 +1,50 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Appendix A. Frequently Asked Questions</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Appendix A. Frequently Asked Questions</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html" title="15.4. Performing a Client-based Migration" /><link rel="next" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href=
"Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="tools-reference.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="appendix" id="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Frequently Asked Questions</h1></div></div></div><div class="qandaset"><dl><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id3021302">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="certmonger-tracking-certs.html" title="18.3. Tracking Certificates with certmonger" /><link rel="next" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="certmonger-tracking-certs.html"><strong>Prev</s
trong></a></li><li class="next"><a accesskey="n" href="tools-reference.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="appendix" id="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions" lang="en-US"><div class="titlepage"><div><div><h1 class="title">Frequently Asked Questions</h1></div></div></div><div class="qandaset"><dl><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id805673">
Is it possible to change the IP address of the master server?
- </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id3227516">
+ </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id786797">
Why are there restrictions on the length of user and group names? How can I change this?
- </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id3352224">
+ </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id666472">
What is the difference between a replica and a master server?
- </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id3159706">
+ </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id916913">
Can I promote a replica to function as the master?
- </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id3110008">
+ </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id778954">
Why does the ipa-client-install script fail to find the IPA server on a network that uses Active Directory DNS?
- </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id3377244">
+ </a></dt><dt>Q: <a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html#id696873">
Can an administrator who is connected to "Server B" revoke a certificate issued by "Server A"?
- </a></dt></dl><div class="qandaset"><div id="id3021302" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </a></dt></dl><div class="qandaset"><div id="id805673" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Is it possible to change the IP address of the master server?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
Yes. If you are only changing the IP address, it is sufficient to update the <code class="filename">/etc/hosts</code> file, the system configuration, and the DNS entry.
- </div></div></div></div><div id="id3227516" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div></div></div></div><div id="id786797" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Why are there restrictions on the length of user and group names? How can I change this?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
User and group name lengths are specified in the policy. The default maximum username length is 32 characters. The maximum configurable length for user or group names is 255 characters. This complements some supported client operating systems which limit the length of usernames.
</div><div class="para">
The default settings can be changed in the FreeIPA UI or using the <code class="command">ipa config-mod</code> command. For example:
- </div><pre class="screen">4 ipa config-mod --maxusername=50</pre></div></div></div><div id="id3352224" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div><pre class="screen">4 ipa config-mod --maxusername=50</pre></div></div></div><div id="id666472" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
What is the difference between a replica and a master server?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
A master server maintains a certificate authority. A replica server has its certificate issued by the master CA.
- </div></div></div></div><div id="id3159706" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div></div></div></div><div id="id916913" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Can I promote a replica to function as the master?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
- Yes. This is described in <a class="xref" href="promoting-replica.html">Section 13.11, “Promoting a Read-Only Replica to a FreeIPA Server”</a>.
- </div></div></div></div><div id="id3110008" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ Yes. This is described in <a class="xref" href="promoting-replica.html">Section 16.7, “Promoting a Read-Only Replica to a FreeIPA Server”</a>.
+ </div></div></div></div><div id="id778954" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Why does the <code class="command">ipa-client-install</code> script fail to find the IPA server on a network that uses Active Directory DNS?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
Active Directory has its own SRV records for Kerberos and LDAP. The <code class="command">ipa-client-install</code> script can retrieve those records instead of any that have been added for the FreeIPA domain.
</div><div class="para">
When running <code class="command">ipa-client-install</code>, manually enter the server information to ensure that the script uses the FreeIPA SRV records instead of Active Directory records. The <code class="command">ipa-client-install</code> options are listed in <a class="xref" href="client-tools.html#ipa-client-install">Section B.6.1, “ipa-client-install”</a>.
- </div></div></div></div><div id="id3377244" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
+ </div></div></div></div><div id="id696873" class="qandaentry"><div class="question"><label>Q:</label><div class="data"><div class="para">
Can an administrator who is connected to "Server B" revoke a certificate issued by "Server A"?
</div></div></div><div class="answer"><label>A:</label><div class="data"><div class="para">
Yes, assuming that Servers A and B contain non-cloned CAs which have their database information replicated to share revocation information only.
- </div></div></div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html"><strong>Prev</strong>15.4. Performing a Client-based Migration</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="tools-reference.html"><strong>Next</strong>Appendix B. FreeIPA Tools Reference</a></li></ul></body></html>
+ </div></div></div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="certmonger-tracking-certs.html"><strong>Prev</strong>18.3. Tracking Certificates with certmonger</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="tools-reference.html"><strong>Next</strong>Appendix B. FreeIPA Tools Reference</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/client-tools.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/client-tools.html
index 099690f..dee4f41 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/client-tools.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/client-tools.html
@@ -1,21 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.6. Client Scripts</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.6. Client Scripts</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="server-tools.html" title="B.5. Server Scripts" /><link rel="next" href="Glossary.html" title="Glossary" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="server-tools.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Glossary.html"><stro
ng>Next</strong></a></li></ul><div class="section" id="client-tools"><div class="titlepage"><div><div><h2 class="title" id="client-tools">B.6. Client Scripts</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="server-tools.html" title="B.5. Server Scripts" /><link rel="next" href="Glossary.html" title="Glossary" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="server-tools.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Glossary.html"><str
ong>Next</strong></a></li></ul><div class="section" id="client-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="client-tools">B.6. Client Scripts</h2></div></div></div><div class="para">
These tools are used to manage client machines.
- </div><div class="section" id="ipa-client-install"><div class="titlepage"><div><div><h3 class="title" id="ipa-client-install">B.6.1. ipa-client-install</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-client-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-client-install">B.6.1. ipa-client-install</h3></div></div></div><div class="para">
Configures a client machine. This script uses the local SSSD service to connect to the FreeIPA server during the setup process. It is also possible to connect to the server through PAM/NSS using LDAP.
</div><div class="para">
This script is also used to uninstall clients, which removes them from the FreeIPA domain and removes all FreeIPA-related configuration.
</div><div class="para">
This script is only available for Fedora platforms.
- </div><div class="section" id="ipa-client-install-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-client-install-location">B.6.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-client-install-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-client-install-location">B.6.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -27,7 +27,7 @@
Package
</td><td>
ipa-client
- </td></tr></tbody></table></div></div><div class="section" id="ipa-client-install-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-client-install-syntax">B.6.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-client-install</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-client-install-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-client-install-syntax">B.6.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-client-install</code> [
-d | --debug
] [
--domain=<em class="replaceable"><code>domainName</code></em>
@@ -56,14 +56,14 @@
] [
-S | --no-sssd
] [
- --server=<em class="replaceable"><code>IPA_server</code></em>
+ --server=<em class="replaceable"><code>IPA_server_fqdn</code></em>
] [
-U | --unattended
] [
--uninstall
] [
-w <em class="replaceable"><code>password</code></em> | --password=<em class="replaceable"><code>password</code></em> | -W
- ]</p></div></div><div class="section" id="ipa-client-install-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-client-install-options">B.6.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-client-install-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-client-install-options">B.6.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Alternate Parameter
@@ -148,11 +148,11 @@
</td><td>
Tells the client to use <code class="systemitem">nss_ldap</code> for authentication instead of SSSD.
</td></tr><tr><td>
- --server=<em class="replaceable"><code>IPA_server</code></em>
+ --server=<em class="replaceable"><code>IPA_server_fqdn</code></em>
</td><td>
</td><td>
- Gives the name of the FreeIPA server to connect to.
+ Gives the name of the FreeIPA server to connect to. This must be a fully-qualified domain name.
</td></tr><tr><td>
-U
</td><td>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-automount.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-automount.html
index 0384a6b..0c57a86 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-automount.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-automount.html
@@ -1,15 +1,15 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.2. Configuring Automount</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9.2. Configuring Automount</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="automount.html" title="Chapter 7. Identity: Using Automount" /><link rel="prev" href="automount.html" title="Chapter 7. Identity: Using Automount" /><link rel="next" href="adding-locations.html" title="7.3. Configuring Locations" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="automount.html"><strong>Prev</strong></a></li><li class="next"><a access
key="n" href="adding-locations.html"><strong>Next</strong></a></li></ul><div class="section" id="configuring-automount"><div class="titlepage"><div><div><h2 class="title" id="configuring-automount">7.2. Configuring Automount</h2></div></div></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="automount.html" title="Chapter 9. Policy: Using Automount" /><link rel="prev" href="automount.html" title="Chapter 9. Policy: Using Automount" /><link rel="next" href="adding-locations.html" title="9.3. Configuring Locations" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="automount.html"><strong>Prev</strong></a></li><li class="next"><a accesskey
="n" href="adding-locations.html"><strong>Next</strong></a></li></ul><div class="section" id="configuring-automount"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="configuring-automount">9.2. Configuring Automount</h2></div></div></div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
Test that the <code class="filename">/home</code> directory can be mounted from the command line successfully before changing the automount configuration. Making sure that NFS is already working properly makes it easier to troubleshoot any potential FreeIPA automount configuration errors later.
- </div></div></div><div class="section" id="Configuring_Automount-Configuring_autofs_on_Linux"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Automount-Configuring_autofs_on_Linux">7.2.1. Configuring autofs on Fedora</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></div></div><div class="section" id="Configuring_Automount-Configuring_autofs_on_Linux"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Automount-Configuring_autofs_on_Linux">9.2.1. Configuring autofs on Fedora</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Edit the <code class="filename">/etc/sysconfig/autofs</code> file to specify the schema attributes that autofs searches for:
</div><pre class="programlisting">#
# Other common LDAP naming
@@ -27,7 +27,7 @@ VALUE_ATTRIBUTE="automountInformation"
</div><pre class="programlisting">LDAP_URI="ldap://ipa.example.com"
SEARCH_BASE="cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com"
</pre><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- The default value for <span class="emphasis"><em>location</em></span> is <code class="literal">default</code>. If additional locations are added (<a class="xref" href="adding-locations.html">Section 7.3, “Configuring Locations”</a>), then the client can be pointed to use those locations, instead.
+ The default value for <span class="emphasis"><em>location</em></span> is <code class="literal">default</code>. If additional locations are added (<a class="xref" href="adding-locations.html">Section 9.3, “Configuring Locations”</a>), then the client can be pointed to use those locations, instead.
</div></div></div></li><li class="listitem"><div class="para">
Edit the <code class="filename">/etc/autofs_ldap_auth.conf</code> file so that autofs allows client authentication with the FreeIPA LDAP server. Change <em class="parameter"><code>authrequired</code></em> to yes and set the principal to the Kerberos host principal:
</div><pre class="programlisting"><span class="perl_Keyword"><autofs_ldap_sasl_conf</span>
@@ -52,7 +52,7 @@ SEARCH_BASE="cn=<em class="replaceable"><code>location</code></em>,cn=automount,
It is also simple to run automount in the foreground with debug logging on.
<pre class="screen">automount -f -d</pre>
This prints the debug log information directly, without having to cross-check the LDAP access log with automount's log.
- </div></div></div></div><div class="section" id="Configuring_Automount-Solaris_automount"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Automount-Solaris_automount">7.2.2. Configuring Automount on Solaris</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ </div></div></div></div><div class="section" id="Configuring_Automount-Solaris_automount"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Automount-Solaris_automount">9.2.2. Configuring Automount on Solaris</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
If the NFS server is running on Fedora, specify on the Solaris machine that NFSv3 is the maximum supported version. Edit the <code class="filename">/etc/default/nfs</code> file and set the following parameter:
</div><pre class="programlisting">NFS_CLIENT_VERSMAX=3
</pre></li><li class="listitem"><div class="para">
@@ -88,4 +88,4 @@ automountInformation: auto.home
<pre class="screen"># ls /home/<em class="replaceable"><code>userName</code></em></pre>
- </div></li></ol></div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="automount.html"><strong>Prev</strong>Chapter 7. Identity: Using Automount</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="adding-locations.html"><strong>Next</strong>7.3. Configuring Locations</a></li></ul></body></html>
+ </div></li></ol></div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="automount.html"><strong>Prev</strong>Chapter 9. Policy: Using Automount</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="adding-locations.html"><strong>Next</strong>9.3. Configuring Locations</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-host-access.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-host-access.html
index 59ce27b..d6e2214 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-host-access.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-host-access.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.7. Configuring Host-Based Access Control</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 14. Policy: Configuring Host-Based Access Control</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="prev" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html" title="11.6. Extending the Permissions of FreeIPA Managed Hosts" /><link rel="next" href="sudo.html" title="Chapter 12. Policy: Using sudo" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesske
y="p" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="sudo.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="section" id="configuring-host-access" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="configuring-host-access">11.7. Configuring Host-Based Access Control</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="example-configuring-sudo.html" title="13.4. An Example of Configuring sudo" /><link rel="next" href="HBAC_Service_Groups.html" title="14.2. Creating Host-Based Access Control Entries for Services and Service Groups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="example
-configuring-sudo.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="HBAC_Service_Groups.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="configuring-host-access" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 14. Policy: Configuring Host-Based Access Control</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="configuring-host-access.html#about-hbac">14.1. About Host-Based Access Control</a></span></dt><dt><span class="section"><a href="HBAC_Service_Groups.html">14.2. Creating Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dd><dl><dt><span class="section"><a href="HBAC_Service_Groups.html#adding-hbac-svc">14.2.1. Adding HBAC Services</a></span></dt><dt><span class="section"><a href="HBAC_Service_Groups.html#adding-hbac-svcgrp">14.2.2. Adding Service Groups</a></span></dt></dl></dd><dt><span class="section"><a href="hbac-rules.html
">14.3. Defining Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="hbac-rules.html#hbac-rules-ui">14.3.1. Setting Host-Based Access Control Rules in the Web UI</a></span></dt><dt><span class="section"><a href="hbac-rules.html#hbac-rules-cmd">14.3.2. Setting Host-Based Access Control Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="hbac-testing.html">14.4. Testing Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="hbac-testing.html#hbac-limits">14.4.1. The Limits of Host-Based Access Control Configuration</a></span></dt><dt><span class="section"><a href="hbac-testing.html#hbac-test-examples">14.4.2. Test Scenarios for Host-Based Access Control</a></span></dt></dl></dd></dl></div><div class="para">
FreeIPA can control access to both machines and the services on those machines within the FreeIPA domain. The rules define who can access what within the domain, not the level of access (which are defined by system or application settings). These access control rules grant access, with all other users and hosts implicitly denied.
</div><div class="para">
This is called <span class="emphasis"><em>host-based access control</em></span> because the rule defines what hosts (<span class="emphasis"><em>source</em></span>) are allowed to access other hosts (<span class="emphasis"><em>targets</em></span>) within the domain. This access can be further broken down to users and services.
@@ -15,249 +15,18 @@
While access must be explicitly granted to users and hosts within the FreeIPA domain, FreeIPA servers are configured by default with an <code class="command">allow all</code> access control rule which allows access for every host within the domain to every host within the domain.
</div><div class="para">
To create an FreeIPA server without the default <code class="command">allow all</code> rule, run <code class="command">ipa-server-install</code> with the <code class="option">--no_hbac_allow</code> option.
- </div></div></div><div class="para">
- The <span class="emphasis"><em>rule</em></span> first defines things that can be accessed, and there are two types of entities:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- <span class="emphasis"><em>Hosts</em></span>, or target hosts, within the FreeIPA domain.
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>Services</em></span> on the target hosts. Multiple services can be combined into <span class="emphasis"><em>service groups</em></span>. The service group can be modified without having to edit the access control rule itself.
- </div></li></ul></div><div class="para">
- The rule also sets <span class="emphasis"><em>who can have access</em></span> (the FreeIPA domain user) and <span class="emphasis"><em>what they can use to access the targets</em></span> (the source host).
- </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- It is possible to use categories for users, source hosts, and target hosts instead of adding each one individually to the access control rule. The only supported category is <code class="command">all</code>.
- </div></div></div><div class="para">
- The entities in host-based access control rules follow the Kerberos principal entries: users, hosts (machines), and services. Users, source hosts, and target hosts can be added directly to host-based access control rules. However, services must be flagged first and then added to the access control rules.
- </div><div class="section" id="HBAC_Service_Groups"><div class="titlepage"><div><div><h3 class="title" id="HBAC_Service_Groups">11.7.1. Defining Host-Based Access Control Entries for Services and Service Groups</h3></div></div></div><div class="para">
- Any PAM service can be identified as to the host-based access control system in FreeIPA. The service is added to the access control system using the <code class="command">hbacsvc-add</code> command, specifying the service by the name that PAM uses to evaluate the service.
- </div><div class="para">
- For example, this adds the <code class="systemitem">tftp</code> service:
- </div><pre class="screen"># ipa hbacsvc-add --desc="TFTP service" tftp
--------------------------
-Added HBAC service "tftp"
--------------------------</pre><div class="para">
- Once the invididual service is added, it can be added to the access control rule. However, if there a large number of services, then it can require frequent updates to the access control rules as services change. FreeIPA also allows groups of services to added to access control rules. This makes it much easier to manage access control, because the members of the service group can be changed without having to edit the rule itself.
- </div><div class="para">
- First create the service group entry, then create the service, and then add that service to the service group as a member. For example:
- </div><pre class="screen">$ ipa hbacsvcgroup-add --desc="login services" login
---------------------------------
-Added HBAC service group "login"
---------------------------------
- Service group name: login
- Description: login services
-
-
-$ ipa hbacsvc-add --desc="SSHD service" sshd
--------------------------
-Added HBAC service "sshd"
--------------------------
-
-$ ipa hbacsvcgroup-add-member --hbacsvcs=sshd login
- Service group name: login
- Description: login services
--------------------------
-Number of members added 1
--------------------------</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA defines one default service group, <code class="systemitem">SUDO</code>, for sudo services.
- </div></div></div></div><div class="section" id="hbac-rules"><div class="titlepage"><div><div><h3 class="title" id="hbac-rules">11.7.2. Setting Host-Based Access Control Rules</h3></div></div></div><div class="para">
- Access controls, at a high level, define <span class="emphasis"><em>who</em></span> has access to <span class="emphasis"><em>what</em></span>. The <span class="emphasis"><em>who</em></span> can be either a user or a host (the source host), and the <span class="emphasis"><em>what</em></span> can be either a host (target host), service, or service group.
- </div><div class="para">
- Access control rules are created using the <code class="command">hbacrule-*</code> commands (listed in <a class="xref" href="configuring-host-access.html#tab.hbac-commands">Table 11.1, “Host-Based Access Control Command and Options”</a>). The first step is to create a container entry; from there, users, hosts, and services can be added to the access control entry.
- </div><div class="para">
- The basic outline of all the access control commands is:
- </div><pre class="screen">$ ipa hbacrule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- To set every user, every host as a source host, or every host as a target, use the category options.
- </div></div></div><div class="example" id="ex.hbac-all"><h6>Example 11.3. Granting All Access to One Host</h6><div class="example-contents"><div class="para">
- One simple rule is to grant every user and every source host access to a single server. The first command creates the entry and uses the category options to apply every user and every host as a source host.
- </div><pre class="screen">$ ipa hbacrule-add --usercat=all --srchostcat=all allGroup
---------------------------
-Added HBAC rule "allGroup"
---------------------------
- Rule name: allGroup
- User category: all
- Source host category: all
- Enabled: TRUE</pre><div class="para">
- The second rule adds the target host, using the <code class="command">hbacrule-add-host</code> command:
- </div><pre class="screen">$ ipa hbacrule-add-host --hosts=server.example.com allGroup
- Rule name: allGroup
- User category: all
- Source host category: all
- Enabled: TRUE
- Successful hosts/hostgroups:
- member host: server.example.com
--------------------------
-Number of members added 1
--------------------------
-</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-single-service"><h6>Example 11.4. Adding Control for a Single User to a Service</h6><div class="example-contents"><div class="para">
- Another access control method is to grant a user access to a specific service on every host in the domain. For the user to have access to the service on every machine, every host must be added as both a host and target. This can be done using the category options:
- </div><pre class="screen">$ ipa hbacrule-add --hostcat=all --srchostcat=all sshd-jsmith</pre><div class="para">
- Since the access control rule applies to a specific user, the user is added to the rule using the <code class="command">hbacrule-add-user</code> command:
- </div><pre class="screen">$ ipa hbacrule-add-user --users=jsmith sshd-jsmith</pre><div class="para">
- Then, the service is added to the access control rule. (The service should have already been added to the access control system using the <code class="command">hbacsvc-add</code> command.)
- </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcs=sshd sshd-jsmith</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-srvcgroups"><h6>Example 11.5. Adding a Service Group to the Rule</h6><div class="example-contents"><div class="para">
- While a single service can be added to a rule, it is also possible to add an entire service group. Like a single service, this uses the <code class="command">hbacrule-add-service</code> command, only with the <code class="option">--hbacsvcgroups</code> option that specifies the group name.
- </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcgroups=login loginRule</pre></div></div><br class="example-break" /><div class="table" id="tab.hbac-commands"><h6>Table 11.1. Host-Based Access Control Command and Options</h6><div class="table-contents"><table summary="Host-Based Access Control Command and Options" border="1"><colgroup><col width="25%" /><col width="25%" /><col width="25%" /><col width="25%" /></colgroup><thead><tr><th>
- Command
- </th><th>
- Description
- </th><th>
- Arguments
- </th><th>
- Source or Target Entry
- </th></tr></thead><tbody><tr><td>
- hbacrule-add
- </td><td>
- Adds a new host-based access control rule.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --usercat=all, which applies the rule to every user
- </div></li><li class="listitem"><div class="para">
- --hostcat=all, which sets every host as an allowed target server
- </div></li><li class="listitem"><div class="para">
- --srchostcat=all, which sets every host as an allowed source server
- </div></li><li class="listitem"><div class="para">
- --servicecat=all, which sets every configured service as an allowed target service
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the required unique identifier for the new rule
- </div></li></ul></div>
-
- </td><td>
-
- </td></tr><tr><td>
- hbacrule-add-host
- </td><td>
- Adds a target host to the access control rule. A target host can be accessed <span class="emphasis"><em>by</em></span> other servers and users in the domain.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --hosts, which adds an individual server or command-separated list of servers as an allowed target server
- </div></li><li class="listitem"><div class="para">
- --hostgroups, which adds a host group to the rule and every host within the host group is an allowed target server
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target server
- </div></li></ul></div>
-
- </td><td>
- Target
- </td></tr><tr><td>
- hbacrule-add-service
- </td><td>
- Adds a service type to the rule.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --hbacsvcs, which adds an individual service type or a comma-separated list of service type as an allowed target service
- </div></li><li class="listitem"><div class="para">
- --hbacsvcgroups, which adds a service group to the rule and every service within the service group is an allowed target service
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target service
- </div></li></ul></div>
-
- </td><td>
- Target
- </td></tr><tr><td>
- hbacrule-add-sourcehost
- </td><td>
- Adds a server to the list of servers that can be used to access domain services and target servers.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --hosts, which adds an individual server or command-separated list of servers as an allowed source server
- </div></li><li class="listitem"><div class="para">
- --hostgroups, which adds a host group to the rule and every host within the host group is an allowed source server
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the source server
- </div></li></ul></div>
-
- </td><td>
- Source
- </td></tr><tr><td>
- hbacrule-add-user
- </td><td>
- Adds a user to the access control rule. The user is then able to access any allowed target host or service within the domain, from any configured source host.
- </td><td>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- --users, which adds an individual user or command-separated list of users to the rule
- </div></li><li class="listitem"><div class="para">
- --groups, which adds a user group to the rule and, thus, every user within the group
- </div></li><li class="listitem"><div class="para">
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the user
- </div></li></ul></div>
-
- </td><td>
- Source
- </td></tr><tr><td>
- hbacrule-disable | hbacrule-enable
- </td><td>
- Disables or enables a host-based access control rule. Rules can be disabled if their behavior needs to be evaluated (for troubleshooting or to test a new rule).
- </td><td>
- <span class="emphasis"><em>ruleName</em></span>, which is the rule to disable or enable
- </td><td>
-
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="hbac-testing"><div class="titlepage"><div><div><h3 class="title" id="hbac-testing">11.7.3. Testing Host-Based Access Control Rules</h3></div></div></div><div class="para">
- Implementing host-based access controls effectively can be tricky because it requires that all of the hosts be properly configured and the access is properly applied to users and services.
- </div><div class="para">
- The <code class="command">hbactest</code> command can test different host-based access control scenarios to make sure that the rules are working as expected.
- </div><div class="section" id="hbac-limits"><div class="titlepage"><div><div><h4 class="title" id="hbac-limits">11.7.3.1. The Limits of Host-Based Access Control Configuration</h4></div></div></div><div class="para">
- When a request is made to one of the domain services, the identifier of the source host is sent to a PAM interface for the login application (like OpenSSH, telnet, or rlogin) which is used to access SSSD on the target host machine. This identifier can be the hostname, the IP address, or even the alias of the source host.
- </div><div class="para">
- This is essentially a long chain, from the source host to the target host to the service. The access control mechanism uses the identifier that is sent to the SSSD service on the target machine to verify that the source host has proper authorization granted in an access control rule.
- </div><div class="para">
- However, if the identifier sent to SSSD cannot be traced back to the source host, then authorization fails. This can happen if any part of the host information does not match the access control rule configuration:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The source host uses an alias which is not listed in the rule.
- </div></li><li class="listitem"><div class="para">
- The client passes an IP address instead of the hostname.
- </div></li><li class="listitem"><div class="para">
- DNS is misconfigured and does not return the proper information for the DNS lookup or reverse lookup.
- </div></li><li class="listitem"><div class="para">
- The client sends a malformed string to SSSD.
- </div></li></ul></div><div class="para">
- The name that is sent by the client <span class="emphasis"><em>must</em></span> match the name in the rule, otherwise host-based access control fails.
- </div><div class="para">
- The access control configuration should always be tested before it is implemented to prevent authorization failures.
- </div></div><div class="section" id="hbac-test-examples"><div class="titlepage"><div><div><h4 class="title" id="hbac-test-examples">11.7.3.2. Test Scenarios for Host-Based Access Control</h4></div></div></div><div class="para">
- Host-based access control rules depend on a lot of interactions — between hosts, services, DNS lookups, and users. If any element is misconfigured, then the rule can behave in unexpected ways.
- </div><div class="para">
- FreeIPA includes a testing tool to verify that access control rules are behaving in the expected way by testing the access in a defined scenario. There are several situations where this testing is useful:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- A new rule needs to be tested before it is implemented.
- </div></li><li class="listitem"><div class="para">
- There are problems with the existing rules, and the testing tool can identify what rule is behaving badly.
- </div></li><li class="listitem"><div class="para">
- A subset of existing rules can be tested to see how they are performing.
- </div></li></ul></div><div class="para">
- The <code class="command">hbactest</code> command tests configured host-based access control rules in very specific situations. A test run defines:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The user to run the operation as to test the rule performance for that user (<code class="option">--user</code>)
- </div></li><li class="listitem"><div class="para">
- From the source host X (<code class="option">--srchost</code>)
- </div></li><li class="listitem"><div class="para">
- Using the login client Y (<code class="option">--service</code>)
- </div></li><li class="listitem"><div class="para">
- To target host Z (<code class="option">--host</code>)
- </div></li><li class="listitem"><div class="para">
- The rule to test (<code class="option">--rules</code>); if this is not used, then all enabled rules are tested
- </div></li></ul></div><div class="example" id="ex.hbac-test-all"><h6>Example 11.6. Testing All Active Rules</h6><div class="example-contents"><div class="para">
- The most basic command checks all active rules. It requires a specific connection scenario, so the user, login service, source host, and target host have to be given, and the testing tool checks the connection.
- </div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh
---------------------
-Access granted: True
---------------------
- notmatched: my-second-rule
- notmatched: my-third-rule
- matched: myrule
- matched: allow_all</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-test"><h6>Example 11.7. Testing a Specific Rule</h6><div class="example-contents"><div class="para">
- It is possible to check a specific rules (or several rules).
- </div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh --rules=myrule
----------------------
-Access granted: True
----------------------
- notmatched: myrule</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-enabled"><h6>Example 11.8. Testing Specific Rules Plus All Enabled</h6><div class="example-contents"><div class="para">
- The <code class="option">--rules</code> option lists specific rules to test, but it may be useful to test the specified rules against all of the enabled rules in the domain. This can be done by adding the <code class="option">--enabled</code> option, which includes the (unspecified) enabled rules along with the specified rules.
- </div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh --rules=myrule --enabled
---------------------
-Access granted: True
---------------------
- matched: my-second-rule
- notmatched: my-third-rule
- matched: myrule
- matched: allow_all</pre><div class="para">
- It is possible to run a similar comparison against <span class="emphasis"><em>disabled</em></span> rules by using the <code class="option">--disable</code> option. With the <code class="option">--rules</code> option, the specified rule plus all of the disabled rules are checked. With the <code class="option">--disabled</code> option, all disabled rules are checked.
- </div></div></div><br class="example-break" /></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Prev</strong>11.6. Extending the Permissions of FreeIPA Manage...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="sudo.html"><strong>Next</strong>Chapter 12. Policy: Using sudo</a></li></ul></body></html>
+ </div></div></div><div class="section" id="about-hbac"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-hbac">14.1. About Host-Based Access Control</h2></div></div></div><div class="para">
+ Host-based access control rules (which are described in <a class="xref" href="configuring-host-access.html">Chapter 14, <em>Policy: Configuring Host-Based Access Control</em></a>) can be applied to individual hosts. However, using host groups allows centralized, and potentially simplified, access control management because an access control rule only needs to be defined once and then it is applied immediately and consistently to all the hosts within the group.
+ </div><div class="figure" id="fig.host-hbac"><div class="figure-contents"><div class="mediaobject"><img src="images/host-hbac.png" width="444" alt="Host Groups and Host-Based Access Control" /></div></div><h6>Figure 14.1. Host Groups and Host-Based Access Control</h6></div><br class="figure-break" /><div class="para">
+ The <span class="emphasis"><em>rule</em></span> first defines things that can be accessed, and there are two types of entities:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Hosts</em></span>, or target hosts, within the FreeIPA domain.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Services</em></span> on the target hosts. Multiple services can be combined into <span class="emphasis"><em>service groups</em></span>. The service group can be modified without having to edit the access control rule itself.
+ </div></li></ul></div><div class="para">
+ The rule also sets <span class="emphasis"><em>who can have access</em></span> (the FreeIPA domain user) and <span class="emphasis"><em>what they can use to access the targets</em></span> (the source host).
+ </div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ It is possible to use categories for users, source hosts, and target hosts instead of adding each one individually to the access control rule. The only supported category is <code class="command">all</code>.
+ </div></div></div><div class="para">
+ The entities in host-based access control rules follow the Kerberos principal entries: users, hosts (machines), and services. Users, source hosts, and target hosts can be added directly to host-based access control rules. However, services must be flagged first and then added to the access control rules.
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="example-configuring-sudo.html"><strong>Prev</strong>13.4. An Example of Configuring sudo</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="HBAC_Service_Groups.html"><strong>Next</strong>14.2. Creating Host-Based Access Control Entries ...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-maps.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-maps.html
index ea2276e..8f8f96f 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-maps.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/configuring-maps.html
@@ -1,58 +1,92 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.4. Configuring Maps</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9.4. Configuring Maps</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="automount.html" title="Chapter 7. Identity: Using Automount" /><link rel="prev" href="adding-locations.html" title="7.3. Configuring Locations" /><link rel="next" href="active-directory.html" title="Chapter 8. Identity: Integrating with Microsoft Active Directory" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-locations.html"><strong>Prev</
strong></a></li><li class="next"><a accesskey="n" href="active-directory.html"><strong>Next</strong></a></li></ul><div class="section" id="configuring-maps"><div class="titlepage"><div><div><h2 class="title" id="configuring-maps">7.4. Configuring Maps</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="automount.html" title="Chapter 9. Policy: Using Automount" /><link rel="prev" href="adding-locations.html" title="9.3. Configuring Locations" /><link rel="next" href="nis.html" title="Chapter 10. Policy: Integrating with NIS Domains and Netgroups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-locations.html"><strong>Prev</strong></a></li>
<li class="next"><a accesskey="n" href="nis.html"><strong>Next</strong></a></li></ul><div class="section" id="configuring-maps"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="configuring-maps">9.4. Configuring Maps</h2></div></div></div><div class="para">
Configuring maps not only creates the maps, it associates mount points through the keys and it assigns mount options that should be used when the directory is accessed. FreeIPA supports both direct and indirect maps.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Different clients can use different map sets. Map sets use a tree structure, so maps <span class="emphasis"><em>cannot</em></span> be shared between locations.
- </div></div></div><div class="section" id="Configuring_Direct_Maps"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Direct_Maps">7.4.1. Configuring Direct Maps</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Configuring_Direct_Maps"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Direct_Maps">9.4.1. Configuring Direct Maps</h3></div></div></div><div class="para">
Direct maps define exact locations, meaning absolute paths, to the file mount. In the location entry, a direct map is identified by the preceding forward slash:
<pre class="screen">---------------------------
/etc/auto.direct:
/shared/man server.example.com:/shared/man</pre>
- </div><div class="para">
- The key defines the actual mount point (in the key name) and any options. A map is a direct or indirect map based on the format of its key.
- </div><div class="para">
- Each location is created with an <code class="systemitem">auto.direct</code> item. The simplest configuration is to define a direct mapping by adding an automount key the existing direct map entry. It is also possible to create different direct map entries.
- </div><div class="para">
- Add the key for the direct map to the location's <code class="filename">auto.direct</code> file. The <code class="option">--key</code> option identifies the mount point, and <code class="option">--info</code> gives the network location of the directory, as well as any <code class="command">mount</code> options to use. For example:
- </div><pre class="screen">$ ipa automountkey-add raleigh auto.direct --key=/share --info="-ro,soft, ipaserver.example.com:/home/share"
+ </div><div class="section" id="Configuring_Direct_Maps-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Direct_Maps-ui">9.4.1.1. Configuring Direct Maps from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Automount</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click name of the automount location to which to add the map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location-list.png" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Automount Maps</strong></span> tab, click the <span class="guilabel"><strong>+ Add</strong></span> link to create a new map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-map-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In pop-up window, select the <span class="guilabel"><strong>Direct</strong></span> radio button and enter the name of the new map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-direct1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Automount Keys</strong></span> tab, click the <span class="guilabel"><strong>+ Add</strong></span> link to create a new key for the map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-key-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the mount point. The key defines the actual mount point in the key name. The <span class="guilabel"><strong>Info</strong></span> field sets the network location of the directory, as well as any <code class="command">mount</code> options to use.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-direct2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the new key.
+ </div></li></ol></div></div><div class="section" id="Configuring_Direct_Maps-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Direct_Maps-cmd">9.4.1.2. Configuring Direct Maps from the Command Line</h4></div></div></div><div class="para">
+ The key defines the actual mount point (in the key name) and any options. A map is a direct or indirect map based on the format of its key.
+ </div><div class="para">
+ Each location is created with an <code class="systemitem">auto.direct</code> item. The simplest configuration is to define a direct mapping by adding an automount key the existing direct map entry. It is also possible to create different direct map entries.
+ </div><div class="para">
+ Add the key for the direct map to the location's <code class="filename">auto.direct</code> file. The <code class="option">--key</code> option identifies the mount point, and <code class="option">--info</code> gives the network location of the directory, as well as any <code class="command">mount</code> options to use. For example:
+ </div><pre class="screen">$ ipa automountkey-add raleigh auto.direct --key=/share --info="-ro,soft, ipaserver.example.com:/home/share"
Key: /share
Mount information: -ro,soft, ipaserver.example.com:/home/share</pre><div class="para">
- Mount options are described in the mount manpage, <a href="http://linux.die.net/man/8/mount">http://linux.die.net/man/8/mount</a>.
- </div><div class="para">
- On Solaris, add the direct map and key using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
- </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_direct:automountMapName=auto.direct,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div><div class="section" id="Configuring_Indirect_Maps"><div class="titlepage"><div><div><h3 class="title" id="Configuring_Indirect_Maps">7.4.2. Configuring Indirect Maps</h3></div></div></div><div class="para">
+ Mount options are described in the mount manpage, <a href="http://linux.die.net/man/8/mount">http://linux.die.net/man/8/mount</a>.
+ </div><div class="para">
+ On Solaris, add the direct map and key using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
+ </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_direct:automountMapName=auto.direct,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div></div><div class="section" id="Configuring_Indirect_Maps"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_Indirect_Maps">9.4.2. Configuring Indirect Maps</h3></div></div></div><div class="para">
An indirect map essentially specifies a relative path for maps. A parent entry sets the base directory for all of the indirect maps. The indirect map key sets a sub directory; whenever the indirect map location is loaded, the key is appended to that base directory. For example, if the base directory is <code class="filename">/docs</code> and the key is <code class="filename">man</code>, then the map is <code class="filename">/docs/man</code>.
- </div><div class="para">
- The primary difference between a direct map and an indirect map is that there is no forward slash in front of an indirect key.
- </div><pre class="screen">---------------------------
+ </div><div class="section" id="Configuring_Indirect_Maps-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Indirect_Maps-ui">9.4.2.1. Configuring Indirect Maps from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Automount</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click name of the automount location to which to add the map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-location-list.png" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Automount Maps</strong></span> tab, click the <span class="guilabel"><strong>+ Add</strong></span> link to create a new map.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-map-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In pop-up window, select the <span class="guilabel"><strong>Indirect</strong></span> radio button and enter the required information for the indirect map:
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/automount-indirect1.png" width="444" /></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The name of the new map
+ </div></li><li class="listitem"><div class="para">
+ The mount point. The <span class="guilabel"><strong>Mount</strong></span> field sets the base directory to use for all the indirect map keys.
+ </div></li><li class="listitem"><div class="para">
+ Optionally, a parent map. The default parent is <code class="filename">auto.master</code>, but if another map exists which should be used, that can be specified in the <span class="guilabel"><strong>Parent Map</strong></span> field.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the new key.
+ </div></li></ol></div></div><div class="section" id="Configuring_Indirect_Maps-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Indirect_Maps-cmd">9.4.2.2. Configuring Indirect Maps from the Command Line</h4></div></div></div><div class="para">
+ The primary difference between a direct map and an indirect map is that there is no forward slash in front of an indirect key.
+ </div><pre class="screen">---------------------------
/etc/auto.share:
man ipa.example.com:/docs/man
---------------------------</pre><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create an indirect map to set the base entry using the <code class="command">automountmap-add-indirect</code> command. The <code class="option">--mount</code> option sets the base directory to use for all the indirect map keys. The default parent entry is <code class="filename">auto.master</code>, but if another map exists which should be used, that can be specified using the <code class="option">--parentmap</code> option.
+ Create an indirect map to set the base entry using the <code class="command">automountmap-add-indirect</code> command. The <code class="option">--mount</code> option sets the base directory to use for all the indirect map keys. The default parent entry is <code class="filename">auto.master</code>, but if another map exists which should be used, that can be specified using the <code class="option">--parentmap</code> option.
<pre class="screen">$ ipa automountmap-add-indirect <em class="replaceable"><code>location mapName</code></em> --mount=<em class="replaceable"><code>directory</code></em> [--parentmap=<em class="replaceable"><code>mapName</code></em>]</pre>
- For example:
- </div><pre class="screen">$ ipa automountmap-add-indirect raleigh auto.share --mount=/share
+ For example:
+ </div><pre class="screen">$ ipa automountmap-add-indirect raleigh auto.share --mount=/share
--------------------------------
Added automount map "auto.share"
--------------------------------</pre></li><li class="listitem"><div class="para">
- Add the indirect key for the mount location:
- </div><pre class="screen">$ ipa automountkey-add raleigh auto.share --key=docs --info="ipa.example.com:/export/docs"
+ Add the indirect key for the mount location:
+ </div><pre class="screen">$ ipa automountkey-add raleigh auto.share --key=docs --info="ipa.example.com:/export/docs"
-------------------------
Added automount key "docs"
-------------------------
Key: docs
Mount information: ipa.example.com:/export/docs</pre></li><li class="listitem"><div class="para">
- To verify the configuration, check the location file list using <code class="command">automountlocation-tofiles</code>:
- </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
+ To verify the configuration, check the location file list using <code class="command">automountlocation-tofiles</code>:
+ </div><pre class="screen">$ ipa automountlocation-tofiles raleigh
/etc/auto.master:
/- /etc/auto.direct
/share /etc/auto.share
@@ -61,11 +95,11 @@ Added automount key "docs"
---------------------------
/etc/auto.share:
man ipa.example.com:/export/docs</pre></li></ol></div><div class="para">
- On Solaris, add the indirect map using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
- </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_share:automountMapName=auto.share,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div><div class="section" id="importing-maps"><div class="titlepage"><div><div><h3 class="title" id="importing-maps">7.4.3. Importing Automount Maps</h3></div></div></div><div class="para">
+ On Solaris, add the indirect map using the <code class="command">ldapclient</code> command to add the LDAP entry directly:
+ </div><pre class="programlisting">ldapclient -a serviceSearchDescriptor=auto_share:automountMapName=auto.share,cn=<em class="replaceable"><code>location</code></em>,cn=automount,dc=example,dc=com?one</pre></div></div><div class="section" id="importing-maps"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="importing-maps">9.4.3. Importing Automount Maps</h3></div></div></div><div class="para">
If there are existing automount maps, these can be imported into the FreeIPA automount configuration.
</div><pre class="screen">ipa automountlocation-import <em class="replaceable"><code>location map_file</code></em> [--continuous]</pre><div class="para">
- The only required information is the FreeIPA automount location and the fulle path and name of the map file. The <code class="option">--continuous</code> option tells the <code class="command">automountlocation-import</code> command to continue through the map file, even if the command encounters errors.
+ The only required information is the FreeIPA automount location and the full path and name of the map file. The <code class="option">--continuous</code> option tells the <code class="command">automountlocation-import</code> command to continue through the map file, even if the command encounters errors.
</div><div class="para">
For example:
- </div><pre class="screen">$ ipa automountlocation-import raleigh /etc/custom.map</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-locations.html"><strong>Prev</strong>7.3. Configuring Locations</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="active-directory.html"><strong>Next</strong>Chapter 8. Identity: Integrating with Microsoft A...</a></li></ul></body></html>
+ </div><pre class="screen">$ ipa automountlocation-import raleigh /etc/custom.map</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-locations.html"><strong>Prev</strong>9.3. Configuring Locations</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="nis.html"><strong>Next</strong>Chapter 10. Policy: Integrating with NIS Domains ...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/creating-server.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/creating-server.html
index 9aae8cf..329e13e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/creating-server.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/creating-server.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.3. Creating a FreeIPA Server Instance</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>2.3. Creating a FreeIPA Server Instance</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="Installing_the_IPA_Server_Packages.html" title="2.2. Installing the FreeIPA Server Packages" /><link rel="next" href="Setting_up_IPA_Replicas.html" title="2.4. Setting up FreeIPA Replicas" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Installing_the_IPA_Se
rver_Packages.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Setting_up_IPA_Replicas.html"><strong>Next</strong></a></li></ul><div class="section" id="creating-server"><div class="titlepage"><div><div><h2 class="title" id="creating-server">2.3. Creating a FreeIPA Server Instance</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /><link rel="prev" href="Installing_the_IPA_Server_Packages.html" title="2.2. Installing the FreeIPA Server Packages" /><link rel="next" href="Setting_up_IPA_Replicas.html" title="2.4. Setting up FreeIPA Replicas" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Installing_the_IPA_S
erver_Packages.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Setting_up_IPA_Replicas.html"><strong>Next</strong></a></li></ul><div class="section" id="creating-server"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="creating-server">2.3. Creating a FreeIPA Server Instance</h2></div></div></div><div class="para">
The FreeIPA setup script creates a server instance, which includes configuring all of the required services for the FreeIPA domain:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
The network time daemon (ntpd)
@@ -28,8 +28,8 @@
</div></li></ul></div><div class="para">
The FreeIPA setup process can be minimal, where the administrator only supplies some required information, or it can be very specific, with user-defined settings for many parts of the FreeIPA services. The configuration is passed using arguments with the <code class="command">ipa-install-server</code> script.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The port numbers and directory locations used by FreeIPA are all defined automatically, as defined in <a class="xref" href="installing-ipa.html#prereq-ports">Section 2.1.3.3, “System Ports”</a> and . These ports and directories <span class="emphasis"><em>cannot</em></span> be changed or customized.
- </div></div></div><div class="section" id="install-command"><div class="titlepage"><div><div><h3 class="title" id="install-command">2.3.1. About ipa-server-install</h3></div></div></div><div class="para">
+ The port numbers and directory locations used by FreeIPA are all defined automatically, as defined in <a class="xref" href="installing-ipa.html#prereq-ports">Section 2.1.3.4, “System Ports”</a> and . These ports and directories <span class="emphasis"><em>cannot</em></span> be changed or customized.
+ </div></div></div><div class="section" id="install-command"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="install-command">2.3.1. About ipa-server-install</h3></div></div></div><div class="para">
A FreeIPA server instance is created by running the <code class="command">ipa-server-install</code> script. This script can accept user-defined settings for services, like DNS and Kerberos, that are used by the FreeIPA instance, or it can supply predefined values for minimal input from the administrator.
</div><div class="para">
While <code class="command">ipa-server-install</code> can be run without any options, so that it prompts for the required information, it has numerous arguments which allow the configuration process to be easily scripted or to supply additional information which is not requested during an interactive installation.
@@ -87,8 +87,8 @@
--idstart=<span class="emphasis"><em>number</em></span>
</td><td>
Sets the lower bound (starting value) for IDs which can be assigned by the FreeIPA server. The default value is randomly selected.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="install-interactive"><div class="titlepage"><div><div><h3 class="title" id="install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</h3></div></div></div><div class="para">
- All that is required to set up a FreeIPA server is to run the <code class="command">ipa-server-install</code> script. This launchs the script interactively, which prompts for the required information to set up a server, but without more advanced configuration like DNS and CA options.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="install-interactive"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</h3></div></div></div><div class="para">
+ All that is required to set up a FreeIPA server is to run the <code class="command">ipa-server-install</code> script. This launches the script interactively, which prompts for the required information to set up a server, but without more advanced configuration like DNS and CA options.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Run the <code class="command">ipa-server-install</code> script.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install</span></pre></li><li class="listitem"><div class="para">
@@ -153,7 +153,7 @@ Restarting the web server
Sample zone <span class="perl_BString">file</span> <span class="perl_Keyword">for</span> <span class="perl_Reserved">bind</span> has been created <span class="perl_Keyword">in</span> /tmp/sample.zone.ygzij5.db
==============================================================================
Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"><div class="para">
- Restart the <code class="systemitem">SSH</code> service to retrive the Kerberos principal and to refresh the name server switch (NSS) configuration file:
+ Restart the <code class="systemitem">SSH</code> service to retrieve the Kerberos principal and to refresh the name server switch (NSS) configuration file:
<pre class="programlisting"><span class="perl_Comment"># service sshd restart</span></pre>
</div></li><li class="listitem"><div class="para">
@@ -173,9 +173,9 @@ Password <span class="perl_Keyword">for</span> admin at EXAMPLE.COM:</pre></li><li
Member of <span class="perl_BString">groups</span>: admins
----------------------------
Number of entries returned 1
- ----------------------------</pre></li></ol></div></div><div class="section" id="install-examples"><div class="titlepage"><div><div><h3 class="title" id="install-examples">2.3.3. Examples of Creating the FreeIPA Server</h3></div></div></div><div class="para">
+ ----------------------------</pre></li></ol></div></div><div class="section" id="install-examples"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="install-examples">2.3.3. Examples of Creating the FreeIPA Server</h3></div></div></div><div class="para">
The way that a FreeIPA server is installed can be different depending on the network environment, security requirements within the organization, and the desired topology. These example illustrate some common options when installing the server. These examples are not mutually exclusive; it is entirely possible to use CA options, DNS options, and FreeIPA configuration options in the same server invocation. These are called out separately simply to make it more clear what each configuration area requires.
- </div><div class="section" id="install-normal"><div class="titlepage"><div><div><h4 class="title" id="install-normal">2.3.3.1. Non-Interactive Basic Installation</h4></div></div></div><div class="para">
+ </div><div class="section" id="install-normal"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="install-normal">2.3.3.1. Non-Interactive Basic Installation</h4></div></div></div><div class="para">
As shown in <a class="xref" href="creating-server.html#install-interactive">Section 2.3.2, “Setting up a FreeIPA Server: Basic Interactive Installation”</a>, only a few pieces of information are required to configured a FreeIPA server. While the setup script can prompt for this information in interactive mode, this information can also be passed with the setup command to allow automated and unattended configuration:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Passwords for the FreeIPA administrative user and the Directory Server super user (Directory Manager)
@@ -196,8 +196,8 @@ Hostname: ipa2.server.example.com
IP address: 1.2.3.4
Domain name: example.com</pre><div class="para">
Then the script runs through the configuration progress for each FreeIPA service, as in <a class="xref" href="creating-server.html#install-interactive">Section 2.3.2, “Setting up a FreeIPA Server: Basic Interactive Installation”</a>.
- </div></div></div><br class="example-break" /></div><div class="section" id="install-ca-options"><div class="titlepage"><div><div><h4 class="title" id="install-ca-options">2.3.3.2. Using Different CAs</h4></div></div></div><div class="para">
- The default installation of FreeIPA uses an integrated Dogtag Certificate System instance as a certificate authority to issue certificates. However, this configuration is not required. FreeIPA only requires <span class="emphasis"><em>a</em></span> certificate authority. This can be an external CA like Verisign or a corporate CA inconjunction with the internal Certificate System, or it can even be the FreeIPA server itself, using a self-signed certificate.
+ </div></div></div><br class="example-break" /></div><div class="section" id="install-ca-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="install-ca-options">2.3.3.2. Using Different CAs</h4></div></div></div><div class="para">
+ The default installation of FreeIPA uses an integrated Dogtag Certificate System instance as a certificate authority to issue certificates. However, this configuration is not required. FreeIPA only requires <span class="emphasis"><em>a</em></span> certificate authority. This can be an external CA like Verisign or a corporate CA in conjunction with the internal Certificate System, or it can even be the FreeIPA server itself, using a self-signed certificate.
</div><div class="para">
For the FreeIPA server itself to work as a CA, it uses a self-signed certificate, meaning that it approved and issued its own certificate. This is done by using the <code class="option">--selfsign</code> option with the <code class="command">ipa-server-install</code> command. When the FreeIPA server uses a self-signed certificate, the setup process is exactly the same as a normal installation, except that no Dogtag Certificate System instance is created. There is still a <code class="filename">cacert.p12</code> file created that can be used by replicas and the domain functions exactly the same. The only difference is what CA issues the certificates.
</div><div class="example" id="ex.selfsigned"><h6>Example 2.2. Using a Self-Signed Certificate</h6><div class="example-contents"><pre class="programlisting"><span class="perl_Comment"># ipa-server-install -a secret12 --hostname=ipa2.server.example.com -r EXAMPLE.COM -p secret12 -n example.com -U --selfsign</span></pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
@@ -225,7 +225,7 @@ The next step is to get /root/ipa.csr signed by your CA and re-run ipa-server-in
Rerun <code class="command">ipa-server-install</code>, specifying the locations and names of the certificate and CA chain files. For example:
</div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install --external_cert_file=/tmp/servercert20110601.p12 --external_ca_file=/tmp/cacert.p12</span></pre></li><li class="listitem"><div class="para">
Complete the setup process and verify that everything is working as expected, as in <a class="xref" href="creating-server.html#install-interactive">Section 2.3.2, “Setting up a FreeIPA Server: Basic Interactive Installation”</a>.
- </div></li></ol></div></div></div><br class="example-break" /></div><div class="section" id="install-dns"><div class="titlepage"><div><div><h4 class="title" id="install-dns">2.3.3.3. Using DNS</h4></div></div></div><div class="para">
+ </div></li></ol></div></div></div><br class="example-break" /></div><div class="section" id="install-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="install-dns">2.3.3.3. Using DNS</h4></div></div></div><div class="para">
FreeIPA can be configured to manage its own DNS, use an existing DNS, or not use DNS services at all (which is the default). Running the setup script alone does not configure DNS; this requires the <code class="option">--setup-dns</code> option.
</div><div class="para">
As with a basic setup, the DNS setup can either prompt for the required information or the DNS information can be passed with the script to allow an automatic or unattended setup process.
@@ -263,7 +263,9 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
Some kind of forwarder information is required. If no external forwarders will be used with the FreeIPA DNS service, then use the <code class="option">--no-forwarders</code> option to indicate that only root servers will be used.
</div><div class="para">
The script always assumes that reverse DNS is configured along with DNS, so it is not necessary to use any options to <span class="emphasis"><em>enable</em></span> reverse DNS. To disable reverse DNS, use the <code class="option">--no-reverse</code> option.
- </div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install ... --setup-dns --no-reverse</span></pre></div></div><br class="example-break" /></div></div><div class="section" id="troubleshooting-install"><div class="titlepage"><div><div><h3 class="title" id="troubleshooting-install">2.3.4. Troubleshooting Installation Problems</h3></div></div></div><div class="formalpara"><h5 class="formalpara" id="id3371862">GSS Failures When Running IPA Commands</h5>
+ </div><pre class="programlisting"><span class="perl_Comment"># ipa-server-install ... --setup-dns --no-reverse</span></pre></div></div><br class="example-break" /></div></div><div class="section" id="troubleshooting-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="troubleshooting-install">2.3.4. Troubleshooting Installation Problems</h3></div></div></div><div class="para">
+ The server installation log is located in <code class="filename">/var/log/ipaserver-install.log</code>. The FreeIPA logs, both for the server and for FreeIPA-associated services, are covered in <a class="xref" href="server-config.html#logging">Section 16.1.3, “Checking FreeIPA Server Logs”</a>.
+ </div><div class="formalpara"><h5 class="formalpara" id="id654790">GSS Failures When Running IPA Commands</h5>
Immediately after installation, there can be Kerberos problems when trying to run an <code class="command">ipa-*</code> command. For example:
</div><pre class="programlisting">ipa: ERROR: Kerberos error: ('Unspecified GSS failure. Minor code may provide more information', 851968)/('Decrypt integrity check failed', -1765328353)</pre><div class="para">
There are two potential causes for this:
@@ -271,7 +273,7 @@ Setup <span class="perl_Reserved">complete</span></pre></li><li class="listitem"
DNS is not properly configured.
</div></li><li class="listitem"><div class="para">
Active Directory is in the same domain as the FreeIPA server.
- </div></li></ul></div><div class="formalpara"><h5 class="formalpara" id="id3371911">named Daemon Fails to Start</h5>
+ </div></li></ul></div><div class="formalpara"><h5 class="formalpara" id="id654834">named Daemon Fails to Start</h5>
If a FreeIPA server is configured to manage DNS and is set up successfully, but the <code class="systemitem">named</code> service fails to start, this can indicate that there is a package conflict. Check the <code class="filename">/var/log/messages</code> file for error messages related to the <code class="command">named</code> service and the <code class="filename">ldap.so</code> library:
</div><pre class="screen">ipaserver named[6886]: failed to dynamically load driver 'ldap.so': libldap-2.4.so.2: cannot open shared object file: No such file or directory</pre><div class="para">
This usually means that the <span class="package">bind-chroot</span> package is installed and is preventing the <code class="systemitem">named</code> service from starting. To resolve this issue, remove the <span class="package">bind-chroot</span> package and then restart the FreeIPA server.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-roles.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-roles.html
new file mode 100644
index 0000000..eb21665
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-roles.html
@@ -0,0 +1,252 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>15.4. Defining Role-Based Access Controls</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-access-controls.html" title="Chapter 15. Configuration: Defining Access Control within FreeIPA" /><link rel="prev" href="delegating-users.html" title="15.3. Delegating Permissions over Users" /><link rel="next" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="delega
ting-users.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="server-config.html"><strong>Next</strong></a></li></ul><div class="section" id="defining-roles"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="defining-roles">15.4. Defining Role-Based Access Controls</h2></div></div></div><div class="para">
+ Role-based access control grants a very different kind of authority to users compared to self-service and delegation access controls. Role-based access controls are fundamentally administrative, with the potential to add, delete, and significantly modify entries.
+ </div><div class="para">
+ There are three parts to role-based access controls:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The <span class="emphasis"><em>permission</em></span>. The permission defines a specific operation or set of operations (write, add, or delete) and the target entries within the FreeIPA LDAP directory to which those operations apply. Permissions are building blocks; they can be assigned to multiple privileges as needed.
+ </div></li><li class="listitem"><div class="para">
+ The <span class="emphasis"><em>privileges</em></span> available to a role. A privilege is essentially a group of permissions. Permissions are not applied directly to a role. Permissions are added to a privilege so that the privilege creates a coherent and complete picture of a set of access control rules. For example, a permission can be created to add, edit, and delete automount locations. Then that permission can be combined with another permission relating to managing FTP services, and they can be used to create a single privilege that relates to managing filesystems.
+ </div></li><li class="listitem"><div class="para">
+ The <span class="emphasis"><em>role</em></span>. This is the list of FreeIPA users who are able to perform the actions defined in the privileges.
+ </div></li></ul></div><div class="para">
+ It is possible to create entirely new permissions, as well as to create new privileges based on existing permissions or new permissions. A list of the default privileges and their associated permissions are in <a class="xref" href="defining-roles.html#tab.default-perms">Table 15.1, “Privileges and Permissions in FreeIPA”</a>.
+ </div><div class="table" id="tab.default-perms"><h6>Table 15.1. Privileges and Permissions in FreeIPA</h6><div class="table-contents"><table summary="Privileges and Permissions in FreeIPA" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Privilege
+ </th><th>
+ Associated Permissions
+ </th></tr></thead><tbody><tr><td>
+ Automount Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Automount_maps</td></tr><tr><td>Remove_Automount_maps</td></tr><tr><td>Add_Automount_keys</td></tr><tr><td>Remove_Automount_keys</td></tr></table>
+
+ </td></tr><tr><td>
+ Certificate Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Retrieve_Certificates_from_the_CA</td></tr><tr><td>Request_Certificate</td></tr><tr><td>Request_Certificates_from_a_different_hos</td></tr><tr><td>Get_Certificates_status_from_the_CA</td></tr><tr><td>Revoke_Certificate</td></tr><tr><td>Certificate_Remove_Hold</td></tr></table>
+
+ </td></tr><tr><td>
+ Delegation Administrator
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Roles</td></tr><tr><td>Remove_Roles</td></tr><tr><td>Modify_Roles</td></tr><tr><td>Modify_Role_membership</td></tr><tr><td>Modify_privilege_membership</td></tr></table>
+
+ </td></tr><tr><td>
+ DNS Administrators (for users)
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>add_dns_entries</td></tr><tr><td>remove_dns_entries</td></tr><tr><td>update_dns_entries</td></tr></table>
+
+ </td></tr><tr><td>
+ DNS Servers (for machines)
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>add_dns_entries</td></tr><tr><td>remove_dns_entries</td></tr><tr><td>update_dns_entries</td></tr></table>
+
+ </td></tr><tr><td>
+ Group Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Groups</td></tr><tr><td>Remove_Groups</td></tr><tr><td>Modify_Groups</td></tr><tr><td>Modify_Group_membership</td></tr></table>
+
+ </td></tr><tr><td>
+ HBAC Administrator
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_HBAC_rule</td></tr><tr><td>Delete_HBAC_rule</td></tr><tr><td>Modify_HBAC_rule</td></tr><tr><td>Manage_HBAC_rule_membership</td></tr><tr><td>Add_HBAC_services</td></tr><tr><td>Delete_HBAC_services</td></tr><tr><td>Add_HBAC_service_groups</td></tr><tr><td>Delete_HBAC_service_groups</td></tr><tr><td>Manage_HBAC_service_group_membership</td></tr></table>
+
+ </td></tr><tr><td>
+ Host Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Hosts</td></tr><tr><td>Remove_Hosts</td></tr><tr><td>Modify_Hosts</td></tr><tr><td>Manage_host_keytab</td></tr><tr><td>Enroll_a_host</td></tr><tr><td>Add_krbPrincipalName_to_a_host</td></tr></table>
+
+ </td></tr><tr><td>
+ Host Enrollment
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Manage_host_keytab</td></tr><tr><td>Enroll_a_host</td></tr><tr><td>Add_krbPrincipalName_to_a_host</td></tr></table>
+
+ </td></tr><tr><td>
+ Host Group Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Hostgroups</td></tr><tr><td>Remove_Hostgroups</td></tr><tr><td>Modify_Hostgroups</td></tr><tr><td>Modify_Hostgroup_membership</td></tr></table>
+
+ </td></tr><tr><td>
+ Modify Users and Reset Passwords
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Modify_Users</td></tr></table>
+
+ </td></tr><tr><td>
+ Netgroups Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_netgroups</td></tr><tr><td>Remove_netgroups</td></tr><tr><td>Modify_netgroups</td></tr><tr><td>Modify_netgroup_membership</td></tr></table>
+
+ </td></tr><tr><td>
+ Password Policy Administrator
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Group_Password_Policy_costemplate</td></tr><tr><td>Delete_Group_Password_Policy_costemplate</td></tr><tr><td>Modify_Group_Password_Policy_costemplate</td></tr><tr><td>Add_Group_Password_Policy</td></tr><tr><td>Delete_Group_Password_Policy</td></tr><tr><td>Modify_Group_Password_Policy</td></tr></table>
+
+ </td></tr><tr><td>
+ Read Entitlements
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Read_Entitlements</td></tr></table>
+
+ </td></tr><tr><td>
+ Register and Write Entitlements
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Register_Entitlements</td></tr><tr><td>Write_Entitlements</td></tr></table>
+
+ </td></tr><tr><td>
+ Replication Administrators<sup>[<a id="id662791" href="#ftn.id662791" class="footnote">a</a>]</sup>
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Replication_Agreements</td></tr><tr><td>Remove_Replication_Agreements</td></tr><tr><td>Modify_Replication_Agreements</td></tr></table>
+
+ </td></tr><tr><td>
+ Service Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Services</td></tr><tr><td>Remove_Services</td></tr><tr><td>Modify_Services</td></tr><tr><td>Manage_service_keytab</td></tr></table>
+
+ </td></tr><tr><td>
+ Sudo Administrator
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Add_Sudo_rule</td></tr><tr><td>Delete_Sudo_rule</td></tr><tr><td>Modify_Sudo_rule</td></tr><tr><td>Add_Sudo_command</td></tr><tr><td>Delete_Sudo_command</td></tr><tr><td>Modify_Sudo_command</td></tr><tr><td>Add_Sudo_command_group</td></tr><tr><td>Delete_Sudo_command_group</td></tr><tr><td>Manage_Sudo_command_group_membership</td></tr></table>
+
+ </td></tr><tr><td>
+ User Administrators
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Change_a_user_password</td></tr><tr><td>Add_user_to_default_group</td></tr><tr><td>Unlock_user_accounts</td></tr><tr><td>Remove_Users</td></tr><tr><td>Modify_Users</td></tr></table>
+
+ </td></tr><tr><td>
+ Write IPA
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>Write_IPA_Configuration</td></tr></table>
+
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote"><div class="para"><sup>[<a id="ftn.id662791" href="#id662791" class="para">a</a>] </sup>
+ This permission can only be granted to servers, not to users.
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="creating-roles"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-roles">15.4.1. Creating Roles</h3></div></div></div><div class="section" id="creating-roles-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-roles-ui">15.4.1.1. Creating Roles in the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Role Based Access Control</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of role-based ACIs.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the role name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to save the new role and go to the configuration page.
+ </div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Privileges</strong></span> tab in the role configuration page.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the list of privileges to add a new privilege.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-privlist.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the role name and a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-add.png" width="444" /></div></div></li></ol></div></div><div class="section" id="creating-roles-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-roles-cli">15.4.1.2. Creating Roles in the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Add the new role:
+ </div><pre class="screen"># ipa role-add --desc="User Administrator" useradmin
+ ------------------------
+ Added role "useradmin"
+ ------------------------
+ Role name: useradmin
+ Description: User Administrator</pre></li><li class="listitem"><div class="para">
+ Add the required privileges to the role:
+ </div><pre class="screen"># ipa role-add-privilege --privileges="User Administrators" useradmin
+ Role name: useradmin
+ Description: User Administrator
+ Privileges: user administrators
+ ----------------------------
+ Number of privileges added 1
+----------------------------
+</pre></li><li class="listitem"><div class="para">
+ Add the required groups to the role. In this case, we are adding only a single group, <code class="systemitem">useradmin</code>, which already exists.
+ </div><pre class="screen"># ipa role-add-member --groups=useradmins useradmin
+ Role name: useradmin
+ Description: User Administrator
+ Member groups: useradmins
+ Privileges: user administrators
+ -------------------------
+ Number of members added 1
+-------------------------
+</pre></li></ol></div></div></div><div class="section" id="creating-perms"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-perms">15.4.2. Creating New Permissions</h3></div></div></div><div class="section" id="creating-perms-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-perms-ui">15.4.2.1. Creating New Permissions from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Role Based Access Control</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Permissions</strong></span> task link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of permissions.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-permission-list.png" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name of the new permission.
+ </div></li><li class="listitem"><div class="para">
+ Select the checkboxes next to the allowed operations for this permission.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-permission-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the method to use to identify the target entries from the <span class="guilabel"><strong>Target</strong></span> drop-down menu. There are four different methods:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Type</em></span> looks for an entry type like user, host, or service and then provides a list of all possible attributes for that entry type. The attributes which will be accessible through this ACI are selected from the list.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Filter</em></span> uses an LDAP filter to identify which entries the permission applies to. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Subtree</em></span> targets every entry beneath the specified subtree entry. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Target group</em></span> specifies a user group, and all the user entries within that group are available through the ACI. All attributes within the matching entries can be modified.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Fill in the required information to identify the target entries, depending on the selected type.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add</strong></span> button to save the permission.
+ </div></li></ol></div></div><div class="section" id="creating-perms-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-perms-cli">15.4.2.2. Creating New Permissions from the Command Line</h4></div></div></div><div class="para">
+ A new permission is added using the <code class="command">permission-add</code> command. All permissions require a list of allowed actions (<code class="option">--permissions</code>), but the way that the target entries for the ACI are selected can be different. There are four options:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--type</em></span> looks for an entry type like user, host, or service and then provides a list of all possible attributes for that entry type. The attributes which will be accessible through this ACI are selected from the list.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--filter</em></span> uses an LDAP filter to identify which entries the permission applies to. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--subtree</em></span> targets every entry beneath the specified subtree entry. All attributes within the matching entries can be modified.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>--targetgroup</em></span> specifies a user group, and all the user entries within that group are available through the ACI. All attributes within the matching entries can be modified.
+ </div></li></ul></div><div class="example" id="ex.perm-filter"><h6>Example 15.1. Adding a Permission with a Filter</h6><div class="example-contents"><div class="para">
+ A filter can be any valid LDAP filter.
+ </div><pre class="screen">$ ipa permission-add "manage Windows groups" --filter="posixGroup=true"</pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="command">permission-add</code> command does not validate the given LDAP filter. Verify that the filter returns the expected results before configuring the permission.
+ </div></div></div><div class="example" id="ex.perm-subtree"><h6>Example 15.2. Adding a Permission for a Subtree</h6><div class="example-contents"><div class="para">
+ All a subtree filter requires is a DN within the directory. Since FreeIPA uses a simplified, flat directory tree structure, this can be used to target some types of entries, like automount locations, which are containers or parent entries for other configuration.
+ </div><pre class="screen">$ ipa permission-add "manage automount locations" --subtree="ldap://ldap.example.com:389/cn=automount,dc=example,dc=com"</pre></div></div><br class="example-break" /><div class="example" id="ex.perm-type"><h6>Example 15.3. Adding a Permission Based on Object Type</h6><div class="example-contents"><div class="para">
+ There seven object types that can be used to form a permission:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ user
+ </div></li><li class="listitem"><div class="para">
+ group
+ </div></li><li class="listitem"><div class="para">
+ host
+ </div></li><li class="listitem"><div class="para">
+ service
+ </div></li><li class="listitem"><div class="para">
+ hostgroup
+ </div></li><li class="listitem"><div class="para">
+ netgroup
+ </div></li><li class="listitem"><div class="para">
+ dns
+ </div></li></ul></div><div class="para">
+ Each type has its own set of allowed attributes, and the attributes which are managed by this permission are set with the <code class="option">--attrs</code> option, in a comma-separated list.
+ </div><pre class="screen">$ ipa permission-add "manage service" --permissions=all --type=service --attrs=krbprincipalkey,krbprincipalname,managedby</pre><div class="para">
+ The attributes (<code class="option">--attrs</code>) must exist and be allowed attributes for the given object type, or the permission operation fails with schema syntax errors.
+ </div></div></div><br class="example-break" /></div></div><div class="section" id="creating-priv"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-priv">15.4.3. Creating New Privileges</h3></div></div></div><div class="section" id="creating-priv-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-priv-ui">15.4.3.1. Creating New Privileges from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Role Based Access Control</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Privileges</strong></span> task link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of privileges.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name and a description of the privilege.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go to the privilege configuration page to add permissions.
+ </div></li><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Permissions</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the list of permissions to add permission to the privilege.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-addperm.png" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the permissions to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the permissions to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/role-priv-addperm2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="creating-priv-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-priv-cli">15.4.3.2. Creating New Privileges from the Command Line</h4></div></div></div><div class="para">
+ Privilege entries are created using the <code class="command">privilege-add</code> command, and then permissions are added to the privilege group using the <code class="command">privilege-add-permission</code> command.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the privilege entry.
+ </div><pre class="screen">$ ipa privilege-add "managing filesystems" --desc="for filesystems"</pre></li><li class="listitem"><div class="para">
+ Assign the desired permissions.
+ </div><pre class="screen">$ ipa privilege-add-permission "managing filesystems" --permissions="managing automount","managing ftp services"</pre></li></ol></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="delegating-users.html"><strong>Prev</strong>15.3. Delegating Permissions over Users</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="server-config.html"><strong>Next</strong>Chapter 16. Configuring the FreeIPA Server</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudocmds.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudocmds.html
index 051ac20..7315d3f 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudocmds.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudocmds.html
@@ -1,43 +1,77 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.2. Setting up sudo Commands and Command Groups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.2. Setting up sudo Commands and Command Groups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="sudo.html" title="Chapter 12. Policy: Using sudo" /><link rel="prev" href="sudo.html" title="Chapter 12. Policy: Using sudo" /><link rel="next" href="defining-sudorules.html" title="12.3. Defining sudo Rules" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="sudo.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="defining-sud
orules.html"><strong>Next</strong></a></li></ul><div class="section" id="defining-sudocmds"><div class="titlepage"><div><div><h2 class="title" id="defining-sudocmds">12.2. Setting up sudo Commands and Command Groups</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="sudo.html" title="Chapter 13. Policy: Using sudo" /><link rel="prev" href="sudo.html" title="Chapter 13. Policy: Using sudo" /><link rel="next" href="defining-sudorules.html" title="13.3. Defining sudo Rules" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="sudo.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="defining-su
dorules.html"><strong>Next</strong></a></li></ul><div class="section" id="defining-sudocmds"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="defining-sudocmds">13.2. Setting up sudo Commands and Command Groups</h2></div></div></div><div class="para">
Just as in regular <code class="command">sudo</code> configuration, any command which will be governed by <code class="command">sudo</code> access must be listed in the configuration. FreeIPA adds an extra control measure with <span class="emphasis"><em>sudo command groups</em></span>, which allow a group of commands to be defined and then applied to the <code class="command">sudo</code> configuration as one.
</div><div class="para">
Adding a command or a command group makes it available to FreeIPA to be defined in a <code class="command">sudo</code> rule; simply adding a command does not automatically include it in a <code class="command">sudo</code> rule.
- </div><div class="para">
- To add a single command, use the <code class="command">sudocmd-add</code> command. This requires the full, local path to the command executable and a description of the command:
- </div><pre class="programlisting">$ ipa sudocmd-add --desc "<em class="replaceable"><code>description</code></em>" <em class="replaceable"><code>/local/path/to/command</code></em></pre><div class="para">
- For example:
- </div><pre class="screen">$ ipa sudocmd-add --desc 'For reading log files' '/usr/bin/less'
+ </div><div class="section" id="adding-sudo-cmds"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-sudo-cmds">13.2.1. Adding sudo Commands</h3></div></div></div><div class="section" id="adding-sudo-cmds-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmds-ui">13.2.1.1. Adding sudo Commands with the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Sudo</strong></span> subtab, and then select the <span class="guilabel"><strong>Sudo Commands</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of commands.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmd-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the full system path and name of the command and, optionally, a description.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmd-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to the edit pages for the command.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Sudo Command Groups</strong></span> tab, click the <span class="guilabel"><strong>Enroll</strong></span> button to add the sudo command to a command group.
+ </div></li><li class="listitem"><div class="para">
+ Click the checkbox by the groups for the command to join, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the group to the selection box.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="adding-sudo-cmds-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmds-cmd">13.2.1.2. Adding sudo Commands with the Command Line</h4></div></div></div><div class="para">
+ To add a single command, use the <code class="command">sudocmd-add</code> command. This requires the full, local path to the command executable and a description of the command:
+ </div><pre class="programlisting">$ ipa sudocmd-add --desc "<em class="replaceable"><code>description</code></em>" <em class="replaceable"><code>/local/path/to/command</code></em></pre><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa sudocmd-add --desc 'For reading log files' '/usr/bin/less'
----------------------------------
Added sudo command "/usr/bin/less"
----------------------------------
sudo Command: /usr/bin/less
- Description: For reading log files</pre><div class="para">
- Creating a command group requires creating two entries, one for the group and one for the command itself:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create the command group using the <code class="command">sudocmdgroup-add</code> command:
- </div><pre class="screen">$ ipa sudocmdgroup-add --desc 'File editing commands' files
+ Description: For reading log files</pre></div></div><div class="section" id="adding-sudo-cmdgrp"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-sudo-cmdgrp">13.2.2. Adding sudo Command Groups</h3></div></div></div><div class="section" id="adding-sudo-cmdgrp-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmdgrp-ui">13.2.2.1. Adding sudo Command Groups with the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Sudo</strong></span> subtab, and then select the <span class="guilabel"><strong>Sudo Command Groups</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of command groups.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name and description for the new command group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to the edit pages for the group.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Sudo Commands</strong></span> tab, click the <span class="guilabel"><strong>Enroll</strong></span> button to add a sudo command to the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-svc-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Sudo Commands</strong></span> tab, click the <span class="guilabel"><strong>Enroll</strong></span> button to add a sudo command to the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-svc-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the commands to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the command to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-cmdgrp-addsvc.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="adding-sudo-cmdgrp-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-sudo-cmdgrp-cmd">13.2.2.2. Adding sudo Command Groups with the Command Line</h4></div></div></div><div class="para">
+ Creating a command group requires creating two entries, one for the group and one for the command itself:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the command group using the <code class="command">sudocmdgroup-add</code> command:
+ </div><pre class="screen">$ ipa sudocmdgroup-add --desc 'File editing commands' files
-----------------------------------
Added sudo command group "files"
-----------------------------------
sudo Command Group: files
Description: File editing commands</pre></li><li class="listitem"><div class="para">
- Create a command entry using the <code class="command">sudocmd-add</code> command:
- </div><pre class="screen">$ ipa sudocmd-add --desc 'For editing files' '/usr/bin/vim'
+ Create a command entry using the <code class="command">sudocmd-add</code> command:
+ </div><pre class="screen">$ ipa sudocmd-add --desc 'For editing files' '/usr/bin/vim'
----------------------------------
Added sudo command "/usr/bin/vim"
----------------------------------
sudo Command: /usr/bin/vim
- Description: For edting files</pre></li><li class="listitem"><div class="para">
- Add the command, using its full directory location as its name, to the command group using the <code class="command">sudocmdgroup-add-member</code> command:
+ Description: For editing files</pre></li><li class="listitem"><div class="para">
+ Add the command, using its full directory location as its name, to the command group using the <code class="command">sudocmdgroup-add-member</code> command:
<pre class="screen">$ ipa sudocmdgroup-add-member --sudocmds '/usr/bin/vim' files
sudo Command Group: files
Description: File editing commands
@@ -46,4 +80,4 @@ Added sudo command "/usr/bin/vim"
Number of members added 1
-------------------------</pre>
- </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="sudo.html"><strong>Prev</strong>Chapter 12. Policy: Using sudo</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="defining-sudorules.html"><strong>Next</strong>12.3. Defining sudo Rules</a></li></ul></body></html>
+ </div></li></ol></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="sudo.html"><strong>Prev</strong>Chapter 13. Policy: Using sudo</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="defining-sudorules.html"><strong>Next</strong>13.3. Defining sudo Rules</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudorules.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudorules.html
index 5e2e3aa..28e8185 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudorules.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/defining-sudorules.html
@@ -1,28 +1,82 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.3. Defining sudo Rules</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.3. Defining sudo Rules</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="sudo.html" title="Chapter 12. Policy: Using sudo" /><link rel="prev" href="defining-sudocmds.html" title="12.2. Setting up sudo Commands and Command Groups" /><link rel="next" href="example-configuring-sudo.html" title="12.4. An Example of Configuring sudo" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudocmds.html"><strong>Prev</strong>
</a></li><li class="next"><a accesskey="n" href="example-configuring-sudo.html"><strong>Next</strong></a></li></ul><div class="section" id="defining-sudorules"><div class="titlepage"><div><div><h2 class="title" id="defining-sudorules">12.3. Defining sudo Rules</h2></div></div></div><div class="para">
- <code class="command">sudo</code> rules are in a sense similar to access control rules: they define users who are granted access, the commands which are within the scope of the rule, and then the target hosts to which the rule applies. Each element is added to the rule command using a different command (listed in <a class="xref" href="defining-sudorules.html#tab.sudo-rules-cmds">Table 12.1, “sudo Commands”</a>).
- </div><div class="para">
- The basic outline of a <code class="command">sudo</code> rule command is:
- </div><pre class="screen">$ ipa sudorule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="example" id="ex.-sudo-basic"><h6>Example 12.1. Creating Basic sudo Rules</h6><div class="example-contents"><div class="para">
- In the most basic case, the <code class="command">sudo</code> configuration is going to grant the right to one user for one command on one host.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="sudo.html" title="Chapter 13. Policy: Using sudo" /><link rel="prev" href="defining-sudocmds.html" title="13.2. Setting up sudo Commands and Command Groups" /><link rel="next" href="example-configuring-sudo.html" title="13.4. An Example of Configuring sudo" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudocmds.html"><strong>Prev</strong
></a></li><li class="next"><a accesskey="n" href="example-configuring-sudo.html"><strong>Next</strong></a></li></ul><div class="section" id="defining-sudorules"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="defining-sudorules">13.3. Defining sudo Rules</h2></div></div></div><div class="para">
+ <code class="command">sudo</code> rules are in a sense similar to access control rules: they define users who are granted access, the commands which are within the scope of the rule, and then the target hosts to which the rule applies. In FreeIPA, additional information can be configured in the rule, such as <code class="command">sudoers</code> options and run-as settings, but the basic elements always define who, what (services), and where (hosts).
+ </div><div class="section" id="sudo-rules-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="sudo-rules-ui">13.3.1. Defining sudo Rules in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Sudo</strong></span> subtab, and then select the <span class="guilabel"><strong>Sudo Rules</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of sudo rules.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rules-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name for the rule.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to set the configuration for the rule.
+ </div><div class="para">
+ There are a number of configuration areas for the rule. The most basic elements are set in the <span class="guilabel"><strong>Who</strong></span>, <span class="guilabel"><strong>Access This Host</strong></span>, and <span class="guilabel"><strong>Run Commands</strong></span> areas; the others are optional and are used to refine the rule.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Optional.</em></span> In the <span class="guilabel"><strong>Options</strong></span> area, add any <code class="command">sudoers</code> options. The complete list of options is in the <code class="command">sudoers</code> manpage and at <a href="http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options">http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options</a>.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the options list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-opt.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the <code class="command">sudoers</code> option.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-opt-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Who</strong></span> area, select the users or user groups to which the sudo rule is applied.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-user.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the users to add to the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the users to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-user-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Access This Host</strong></span> area, select the hosts on which the sudo rule is in effect.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-host.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the hosts to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-host-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Run Commands</strong></span> area, select the commands which are included in the sudo rule. The <code class="command">sudo</code> rule can grant access or deny access to commands, and it can grant allow access to one command and also deny access to another.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Allow/Deny</strong></span> area, click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the commands list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-allow.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the commands or command groups to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the commands to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-allow-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Optional.</em></span> The sudo rule can be configured to run the given commands as a specific, non-root user.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>As Whom</strong></span> area, click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-runas.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the users to run the command as, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the users to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/sudo-rule-runas-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li></ol></div></div><div class="section" id="sudo-rules-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="sudo-rules-cmd">13.3.2. Defining sudo Rules in the Command Line</h3></div></div></div><div class="para">
+ Each element is added to the rule command using a different command (listed in <a class="xref" href="defining-sudorules.html#tab.sudo-rules-cmds">Table 13.1, “sudo Commands”</a>).
</div><div class="para">
- The first step is to add the initial rule entry.
- </div><pre class="screen">$ ipa sudorule-add files-commands
+ The basic outline of a <code class="command">sudo</code> rule command is:
+ </div><pre class="screen">$ ipa sudorule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="example" id="ex.-sudo-basic"><h6>Example 13.1. Creating Basic sudo Rules</h6><div class="example-contents"><div class="para">
+ In the most basic case, the <code class="command">sudo</code> configuration is going to grant the right to one user for one command on one host.
+ </div><div class="para">
+ The first step is to add the initial rule entry.
+ </div><pre class="screen">$ ipa sudorule-add files-commands
-----------------------------------
Added sudo rule "files-commands"
-----------------------------------
Rule name: files-commands
Enabled: TRUE
</pre><div class="para">
- Next, add the commands to <span class="emphasis"><em>grant</em></span> access to. This can be a single command, using <code class="option">--sudocmd</code>, or a group of commands, using <code class="option">--sudocmdgroups</code>.
+ Next, add the commands to <span class="emphasis"><em>grant</em></span> access to. This can be a single command, using <code class="option">--sudocmd</code>, or a group of commands, using <code class="option">--sudocmdgroups</code>.
<pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/vim" files-commands
Rule name: files-commands
Enabled: TRUE
@@ -32,9 +86,9 @@ Number of members added 1
-------------------------
</pre>
- </div><div class="para">
- Add a host or a host group to the rule.
- </div><pre class="screen">$ ipa sudorule-add-host --host server.example.com files-commands
+ </div><div class="para">
+ Add a host or a host group to the rule.
+ </div><pre class="screen">$ ipa sudorule-add-host --host server.example.com files-commands
Rule name: files-commands
Enabled: TRUE
Hosts: server.example.com
@@ -42,8 +96,8 @@ Number of members added 1
-------------------------
Number of members added 1
-------------------------</pre><div class="para">
- Last, add the user or group to the rule. This is the user who is allowed to use <code class="command">sudo</code> as defined in the rule; if no "run-as" user is given, then this user will run the <code class="command">sudo</code> commands as root.
- </div><pre class="screen">$ ipa sudorule-add-user --user jsmith files-commands
+ Last, add the user or group to the rule. This is the user who is allowed to use <code class="command">sudo</code> as defined in the rule; if no "run-as" user is given, then this user will run the <code class="command">sudo</code> commands as root.
+ </div><pre class="screen">$ ipa sudorule-add-user --user jsmith files-commands
Rule name: readonly-commands
Enabled: TRUE
Users: jsmith
@@ -52,59 +106,59 @@ Number of members added 1
-------------------------
Number of members added 1
-------------------------
-</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-allowing-denying"><h6>Example 12.2. Allowing and Denying Commands</h6><div class="example-contents"><div class="para">
- The <code class="command">sudo</code> rule can grant access or deny access to commands. For example, this rule would allow read access to files but prevent editing:
- </div><pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/less" readfiles
+</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-allowing-denying"><h6>Example 13.2. Allowing and Denying Commands</h6><div class="example-contents"><div class="para">
+ The <code class="command">sudo</code> rule can grant access or deny access to commands. For example, this rule would allow read access to files but prevent editing:
+ </div><pre class="screen">$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/less" readfiles
$ ipa sudorule-add-allow-command --sudocmd "/usr/bin/tail" readfiles
-$ ipa sudorule-add-deny-command --sudocmd "/usr/bin/vim" readfiles</pre></div></div><br class="example-break" /><div class="example" id="Ex.sudo-options"><h6>Example 12.3. Using sudoers Options</h6><div class="example-contents"><div class="para">
- The <code class="command">sudoers</code> file has a lot of potential flags that can be set to control the behavior of <code class="command">sudo</code> users, like requiring (or not requiring) passwords to offer a user to authenticate to <code class="command">sudo</code> or using fully-qualified domain names in the <code class="command">sudoers</code> file. The complete list of options is in the <code class="command">sudoers</code> manpage and at <a href="http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options">http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options</a>.
- </div><div class="para">
- Any of these options can be set for the FreeIPA <code class="command">sudo</code> rule using the <code class="command">sudorule-add-option</code> command. When the command is run, it prompts for the option to add:
- </div><pre class="screen">$ ipa sudorule-add-option readfiles
+$ ipa sudorule-add-deny-command --sudocmd "/usr/bin/vim" readfiles</pre></div></div><br class="example-break" /><div class="example" id="Ex.sudo-options"><h6>Example 13.3. Using sudoers Options</h6><div class="example-contents"><div class="para">
+ The <code class="command">sudoers</code> file has a lot of potential flags that can be set to control the behavior of <code class="command">sudo</code> users, like requiring (or not requiring) passwords to offer a user to authenticate to <code class="command">sudo</code> or using fully-qualified domain names in the <code class="command">sudoers</code> file. The complete list of options is in the <code class="command">sudoers</code> manpage and at <a href="http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options">http://www.gratisoft.us/sudo/sudoers.man.html#sudoers_options</a>.
+ </div><div class="para">
+ Any of these options can be set for the FreeIPA <code class="command">sudo</code> rule using the <code class="command">sudorule-add-option</code> command. When the command is run, it prompts for the option to add:
+ </div><pre class="screen">$ ipa sudorule-add-option readfiles
Sudo Option: !authenticate
-----------------------------------------------------
Added option "!authenticate" to Sudo rule "readfiles"
------------------------------------------------------</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-runas"><h6>Example 12.4. Running as Other Users</h6><div class="example-contents"><div class="para">
- The <code class="command">sudo</code> rule also has the option of specifying a non-root user or group to run the commands as. The initial rule has the user or group specified using the <code class="option">--sudorule-add-runasuser</code> or <code class="option">--sudorule-add-runasgroup</code> command, respectively.
- </div><pre class="screen">$ ipa sudorule-add-runasuser --users=jsmith readfiles
+-----------------------------------------------------</pre></div></div><br class="example-break" /><div class="example" id="ex.sudo-runas"><h6>Example 13.4. Running as Other Users</h6><div class="example-contents"><div class="para">
+ The <code class="command">sudo</code> rule also has the option of specifying a non-root user or group to run the commands as. The initial rule has the user or group specified using the <code class="option">--sudorule-add-runasuser</code> or <code class="option">--sudorule-add-runasgroup</code> command, respectively.
+ </div><pre class="screen">$ ipa sudorule-add-runasuser --users=jsmith readfiles
$ ipa sudorule-add-runasgroup --groups=ITadmins readfiles</pre><div class="para">
- When creating a rule, the <code class="command">sudorule-add-runasuser</code> or <code class="command">sudorule-add-runasgroup</code> command can only set <span class="emphasis"><em>specific</em></span> users or groups. However, when editing a rule, it is possible to run <code class="command">sudo</code> as all users or all groups by using the <code class="option">--runasusercat</code> or <code class="option">--runasgroupcat</code> option. For example:
- </div><pre class="screen">$ ipa sudorule-mod --runasgroupcat=all <em class="replaceable"><code>ruleName</code></em></pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- The <code class="option">--sudorule-add-runasuser</code> and <code class="option">--sudorule-add-runasgroup</code> commands do not support an <code class="command">all</code> option, only specific user or group names. Specifying all users or all groups can only be used with options with the <code class="command">sudorule-mod</code> command.
- </div></div></div><div class="table" id="tab.sudo-rules-cmds"><h6>Table 12.1. sudo Commands</h6><div class="table-contents"><table summary="sudo Commands" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
- Command
- </th><th>
- Description
- </th></tr></thead><tbody><tr><td>
- sudorule-add
- </td><td>
- Adds a sudo rule entry.
- </td></tr><tr><td>
- sudorule-add-user
- </td><td>
- Adds a user or a user group to the sudo rule. This user (or every member of the group) is then entitled to sudo any of the commands in the rule.
- </td></tr><tr><td>
- sudorule-add-host
- </td><td>
- Adds a target host for the rule. These are the hosts where the users are granted sudo permissions.
- </td></tr><tr><td>
- sudorule-add-runasgroup
- </td><td>
- Sets a group to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
- </td></tr><tr><td>
- sudorule-add-runasuser
- </td><td>
- Sets a user to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
- </td></tr><tr><td>
- sudorule-add-allow-command
- </td><td>
- Adds a command that users in the rule have sudo permission to run.
- </td></tr><tr><td>
- sudorule-add-deny-command
- </td><td>
- Adds a command that users in the rule are explicitly <span class="emphasis"><em>denied</em></span> sudo permission to run.
- </td></tr><tr><td>
- sudorule-add-option
- </td><td>
- Adds a sudoers flag to the sudo rule.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudocmds.html"><strong>Prev</strong>12.2. Setting up sudo Commands and Command Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="example-configuring-sudo.html"><strong>Next</strong>12.4. An Example of Configuring sudo</a></li></ul></body></html>
+ When creating a rule, the <code class="command">sudorule-add-runasuser</code> or <code class="command">sudorule-add-runasgroup</code> command can only set <span class="emphasis"><em>specific</em></span> users or groups. However, when editing a rule, it is possible to run <code class="command">sudo</code> as all users or all groups by using the <code class="option">--runasusercat</code> or <code class="option">--runasgroupcat</code> option. For example:
+ </div><pre class="screen">$ ipa sudorule-mod --runasgroupcat=all <em class="replaceable"><code>ruleName</code></em></pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ The <code class="option">--sudorule-add-runasuser</code> and <code class="option">--sudorule-add-runasgroup</code> commands do not support an <code class="command">all</code> option, only specific user or group names. Specifying all users or all groups can only be used with options with the <code class="command">sudorule-mod</code> command.
+ </div></div></div><div class="table" id="tab.sudo-rules-cmds"><h6>Table 13.1. sudo Commands</h6><div class="table-contents"><table summary="sudo Commands" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th>
+ Command
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td>
+ sudorule-add
+ </td><td>
+ Adds a sudo rule entry.
+ </td></tr><tr><td>
+ sudorule-add-user
+ </td><td>
+ Adds a user or a user group to the sudo rule. This user (or every member of the group) is then entitled to sudo any of the commands in the rule.
+ </td></tr><tr><td>
+ sudorule-add-host
+ </td><td>
+ Adds a target host for the rule. These are the hosts where the users are granted sudo permissions.
+ </td></tr><tr><td>
+ sudorule-add-runasgroup
+ </td><td>
+ Sets a group to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
+ </td></tr><tr><td>
+ sudorule-add-runasuser
+ </td><td>
+ Sets a user to run the sudo commands as. This must be a specific user; to specify all users, modify the rule using <code class="command">sudo-rule</code>.
+ </td></tr><tr><td>
+ sudorule-add-allow-command
+ </td><td>
+ Adds a command that users in the rule have sudo permission to run.
+ </td></tr><tr><td>
+ sudorule-add-deny-command
+ </td><td>
+ Adds a command that users in the rule are explicitly <span class="emphasis"><em>denied</em></span> sudo permission to run.
+ </td></tr><tr><td>
+ sudorule-add-option
+ </td><td>
+ Adds a sudoers flag to the sudo rule.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudocmds.html"><strong>Prev</strong>13.2. Setting up sudo Commands and Command Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="example-configuring-sudo.html"><strong>Next</strong>13.4. An Example of Configuring sudo</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/delegating-users.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/delegating-users.html
new file mode 100644
index 0000000..44822a4
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/delegating-users.html
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>15.3. Delegating Permissions over Users</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-access-controls.html" title="Chapter 15. Configuration: Defining Access Control within FreeIPA" /><link rel="prev" href="self-service.html" title="15.2. Defining Self-Service Settings" /><link rel="next" href="defining-roles.html" title="15.4. Defining Role-Based Access Controls" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="self-service.h
tml"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="defining-roles.html"><strong>Next</strong></a></li></ul><div class="section" id="delegating-users"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="delegating-users">15.3. Delegating Permissions over Users</h2></div></div></div><div class="para">
+ Delegation is very similar to roles in that one group of users is assigned permission to manage the entries for another group of users. However, the delegated authority is much more similar to self-service rules in that complete access is granted but only to specific user attributes, not to the entire entry. Also, the groups in delegated authority are existing FreeIPA user groups instead of roles specifically created for access controls.
+ </div><div class="section" id="delegating-attributes-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="delegating-attributes-ui">15.3.1. Delegating Access to User Groups in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Delegations</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of delegation ACIs.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/delegation-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Name the new delegation ACI.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>User group</strong></span> drop-down menu, select the group <span class="emphasis"><em>whose entries can be edited</em></span> by members of the delegation group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/delegation-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Member user group</strong></span> drop-down menu, select the group <span class="emphasis"><em>who is being granted permissions to</em></span> the entries of users in the user group.
+ </div></li><li class="listitem"><div class="para">
+ In the attributes box, select the checkboxes by the attributes to which the member user group is being granted permission.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new delegation ACI.
+ </div></li></ol></div></div><div class="section" id="delegating-attributes-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="delegating-attributes-cli">15.3.2. Delegating Access to User Groups in the Command Line</h3></div></div></div><div class="para">
+ A new delegation access control rule is added using the <code class="command">delegation-add</code> command. There are three required arguments:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <code class="option">--membergroup</code>, the group <span class="emphasis"><em>who is being granted permissions to</em></span> the entries of users in the user group.
+ </div></li><li class="listitem"><div class="para">
+ <code class="option">--group</code>, the group <span class="emphasis"><em>whose entries can be edited</em></span> by members of the delegation group.
+ </div></li><li class="listitem"><div class="para">
+ <code class="option">--attrs</code>, the attributes which users in the member group are allowed to edit.
+ </div></li></ul></div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa delegation-add "basic manager attrs" --attrs=manager,title,employeetype,employeenumber --membergroup=engineering_managers --group=engineering
+--------------------------------------
+Added delegation "basic manager attrs"
+--------------------------------------
+ Delegation name: basic manager attrs
+ Permissions: write
+ Attributes: manager, title, employeetype, employeenumber
+ Member user group: engineering_managers
+ User group: engineering</pre><div class="para">
+ Delegation rules are edited using the <code class="command">delegation-mod</code> command. The <code class="option">--attrs</code> option overwrites whatever the previous list of supported attributes was, so always include the complete list of attributes along with any new attributes.
+ </div><pre class="screen">$ ipa delegation-mod "basic manager attrs" --attrs=manager,title,employeetype,employeenumber,displayname
+-----------------------------------------
+Modified delegation "basic manager attrs"
+-----------------------------------------
+ Delegation name: basic manager attrs
+ Permissions: write
+ Attributes: manager, title, employeetype, employeenumber, displayname
+ Member user group: engineering_managers
+ User group: engineering</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Include all of the attributes when modifying a delegation rule, including existing ones.
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="self-service.html"><strong>Prev</strong>15.2. Defining Self-Service Settings</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="defining-roles.html"><strong>Next</strong>15.4. Defining Role-Based Access Controls</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/disabling-anon-binds.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/disabling-anon-binds.html
index d482b5f..0830edd 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/disabling-anon-binds.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/disabling-anon-binds.html
@@ -1,23 +1,25 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.3. Disabling Anonymous Binds</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.2. Disabling Anonymous Binds</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="managing-access-to-ipa.html" title="13.2. Defining Access Controls within FreeIPA" /><link rel="next" href="Managing-Unique_UID_and_GID_Attributes.html" title="13.4. Managing Unique UID and GID Number Assignments" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p"
href="managing-access-to-ipa.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing-Unique_UID_and_GID_Attributes.html"><strong>Next</strong></a></li></ul><div class="section" id="disabling-anon-binds"><div class="titlepage"><div><div><h2 class="title" id="disabling-anon-binds">13.3. Disabling Anonymous Binds</h2></div></div></div><div class="para">
- Even though the XML-RPC and WebUI always require authentication, the default FreeIPA configuration allows anonymous binds to the LDAP port by anyone in the same domain as the FreeIPA server, and consequent retrieval of a range of data, including user, group, netgroup, host, host group, and service records. This is generally considered insecure, and some RFC standards require that it be disabled to achieve compliance. With anonymous binds disabled, all connections to the directory server need to provide a valid identity.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="next" href="Configuring_Certificates_and_Certificate_Authorities.html" title="16.3. Configuring Alternate Certificate Authorities" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey=
"p" href="server-config.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Next</strong></a></li></ul><div class="section" id="disabling-anon-binds"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="disabling-anon-binds">16.2. Disabling Anonymous Binds</h2></div></div></div><div class="para">
+ Accessing domain resources and running client tools always require Kerberos authentication. However, the backend LDAP directory used by the FreeIPA server allows anonymous binds by default. This potentially opens up all of the domain configuration to unauthorized users, including information about users, machines, groups, services, netgroups, and DNS configuration.
</div><div class="para">
- To disable anonymous binds, perform this LDAP modification:
-<pre class="screen"># ldapmodify -x -D "cn=Directory Manager" -W
+ It is possible to disable anonymous binds on the 389 Directory Server instance by using LDAP tools to reset the <em class="parameter"><code>nsslapd-allow-anonymous-access</code></em> attribute.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Change the <em class="parameter"><code>nsslapd-allow-anonymous-access</code></em> attribute to off.
+ </div><pre class="screen">ldapmodify -x -D "cn=Directory Manager" -w secret -h server.example.com -p 389
+
Enter LDAP Password:
dn: cn=config
changetype: modify
replace: nsslapd-allow-anonymous-access
nsslapd-allow-anonymous-access: off
-
-# service dirsrv restart</pre>
-
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-access-to-ipa.html"><strong>Prev</strong>13.2. Defining Access Controls within FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing-Unique_UID_and_GID_Attributes.html"><strong>Next</strong>13.4. Managing Unique UID and GID Number Assignme...</a></li></ul></body></html>
+</pre></li><li class="listitem"><div class="para">
+ Restart the 389 Directory Server instance to load the new setting.
+ </div><pre class="screen">service dirsrv restart</pre></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="server-config.html"><strong>Prev</strong>Chapter 16. Configuring the FreeIPA Server</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Certificates_and_Certificate_Authorities.html"><strong>Next</strong>16.3. Configuring Alternate Certificate Authoriti...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-multihomed.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-multihomed.html
index ccd4894..1844998 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-multihomed.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-multihomed.html
@@ -1,16 +1,16 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.10. Setting DNS Entries for Multi-Homed Servers</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.6. Setting DNS Entries for Multi-Homed Servers</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="logging.html" title="13.9. Checking FreeIPA Server Logs" /><link rel="next" href="promoting-replica.html" title="13.11. Promoting a Read-Only Replica to a FreeIPA Server" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="logging.html"><strong>Prev</strong><
/a></li><li class="next"><a accesskey="n" href="promoting-replica.html"><strong>Next</strong></a></li></ul><div class="section" id="dns-multihomed"><div class="titlepage"><div><div><h2 class="title" id="dns-multihomed">13.10. Setting DNS Entries for Multi-Homed Servers</h2></div></div></div><div class="para">
- Some server machines may support multiple network interface cards (NICs). Muti-homed machines typically have multiple IPs, all assigned to the same hostname. This works fine in FreeIPA most of the time because it listens on all available interfaces, except localhost. For a server to be available through any NIC, edit the DNS zone file and add entries for each IP address. For example:
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="ipa-apache.html" title="16.5. Setting a FreeIPA Server as an Apache Virtual Host" /><link rel="next" href="promoting-replica.html" title="16.7. Promoting a Read-Only Replica to a FreeIPA Server" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-apache.
html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="promoting-replica.html"><strong>Next</strong></a></li></ul><div class="section" id="dns-multihomed"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="dns-multihomed">16.6. Setting DNS Entries for Multi-Homed Servers</h2></div></div></div><div class="para">
+ Some server machines may support multiple network interface cards (NICs). Multi-homed machines typically have multiple IPs, all assigned to the same hostname. This works fine in FreeIPA most of the time because it listens on all available interfaces, except localhost. For a server to be available through any NIC, edit the DNS zone file and add entries for each IP address. For example:
</div><pre class="screen">
ipaserver IN A 192.168.1.100
ipaserver IN A 192.168.1.101
ipaserver IN A 192.168.1.102
-</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="logging.html"><strong>Prev</strong>13.9. Checking FreeIPA Server Logs</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="promoting-replica.html"><strong>Next</strong>13.11. Promoting a Read-Only Replica to a FreeIPA...</a></li></ul></body></html>
+</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-apache.html"><strong>Prev</strong>16.5. Setting a FreeIPA Server as an Apache Virtu...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="promoting-replica.html"><strong>Next</strong>16.7. Promoting a Read-Only Replica to a FreeIPA ...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-resolve.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-resolve.html
index 744d804..f5b6442 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-resolve.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/dns-resolve.html
@@ -1,14 +1,14 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.12. Resolving Hostnames in the FreeIPA Domain</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.11. Resolving Hostnames in the FreeIPA Domain</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html" title="10.11. Deleting Records from DNS Zones" /><link rel="next" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a access
key="p" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="hosts.html"><strong>Next</strong></a></li></ul><div class="section" id="dns-resolve"><div class="titlepage"><div><div><h2 class="title" id="dns-resolve">10.12. Resolving Hostnames in the FreeIPA Domain</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html" title="8.10. Deleting Records from DNS Zones" /><link rel="next" href="automount.html" title="Chapter 9. Policy: Using Automount" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Delet
ing_Records_from_DNS_Zones.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="automount.html"><strong>Next</strong></a></li></ul><div class="section" id="dns-resolve"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="dns-resolve">8.11. Resolving Hostnames in the FreeIPA Domain</h2></div></div></div><div class="para">
It is possible to check the DNS entries for FreeIPA domain members using the <code class="command">dns-resolve</code> command. If the record exists and is properly formatted in the DNS configuration, then the command returns the DNS record. If not, the command returns an error, that the hostname is not recognized within the DNS service.
</div><pre class="screen">$ipa dns-resolve server1.example.com</pre><div class="para">
This can be helpful with troubleshooting connection problems between servers, clients, and services.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Prev</strong>10.11. Deleting Records from DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="hosts.html"><strong>Next</strong>Chapter 11. Policy: Managing Hosts, Services, and...</a></li></ul></body></html>
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html"><strong>Prev</strong>8.10. Deleting Records from DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="automount.html"><strong>Next</strong>Chapter 9. Policy: Using Automount</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/doc-history.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/doc-history.html
index f849679..e0e43c2 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/doc-history.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/doc-history.html
@@ -1,14 +1,14 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>4. Document Change History</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>4. Document Change History</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Preface.html" title="Preface" /><link rel="prev" href="feedback.html" title="3. Giving Feedback" /><link rel="next" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="feedback.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="introduction.html"><strong>Next</st
rong></a></li></ul><div xml:lang="en-US" class="section" id="doc-history" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="doc-history">4. Document Change History</h2></div></div></div><div class="para">
- <div class="revhistory"><table border="0" width="100%" summary="Revision history"><tr><th align="left" valign="top" colspan="3"><b>Revision History</b></th></tr><tr><td align="left">Revision 2.1.0-2</td><td align="left">July 22, 2011</td><td align="left"><span class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></span></td></tr><tr><td align="left" colspan="3">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Preface.html" title="Preface" /><link rel="prev" href="feedback.html" title="3. Giving Feedback" /><link rel="next" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="feedback.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="introduction.html"><strong>Next</s
trong></a></li></ul><div xml:lang="en-US" class="section" id="doc-history" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="doc-history">4. Document Change History</h2></div></div></div><div class="para">
+ <div class="revhistory"><table border="0" width="100%" summary="Revision history"><tr><th align="left" valign="top" colspan="3"><strong>Revision History</strong></th></tr><tr><td align="left">Revision 2.1.0-2</td><td align="left">July 22, 2011</td><td align="left"><span class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></span></td></tr><tr><td align="left" colspan="3">
<table border="0" summary="Simple list" class="simplelist"><tr><td>Completing first round of content revisions on the chapters for server installation, client installation, DNS, basic usage, managing clients, and the preface.</td></tr><tr><td>Beginning content revisions on the chapters for users, Kerberos, automount, and managing servers.</td></tr><tr><td>Bare initial draft of a tools appendix.</td></tr><tr><td>Bugzilla work: 646226, 646240, 646257, 646267, 68173, 693843, 701465, 709385, 714603, 715015 </td></tr><tr><td>FreeIPA.org tickets: 1183, 1359, 1449, 1058, 1335, 1107, 1355, 1430, 803, 991, 615, 969, 594, 593 </td></tr><tr><td>freeipa-guide trac tickets: 18, 19, 16, 17 </td></tr></table>
</td></tr><tr><td align="left">Revision 2.1.0-1</td><td align="left">May 10, 2011</td><td align="left"><span class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></span></td></tr><tr><td align="left" colspan="3">
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-dns.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-dns.html
index 9075c6a..7665709 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-dns.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-dns.html
@@ -1,20 +1,24 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.2. Configuring DNS in FreeIPA</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.2. Configuring DNS in FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="next" href="bind-dyndb-ldap-config.html" title="10.3. Configuring the bind-dyndb-ldap Plug-in" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Working_with_DNS.html"><strong>Prev</
strong></a></li><li class="next"><a accesskey="n" href="bind-dyndb-ldap-config.html"><strong>Next</strong></a></li></ul><div class="section" id="enabling-dns"><div class="titlepage"><div><div><h2 class="title" id="enabling-dns">10.2. Configuring DNS in FreeIPA</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="next" href="bind-dyndb-ldap-config.html" title="8.3. Configuring the bind-dyndb-ldap Plug-in" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Working_with_DNS.html"><strong>Prev</st
rong></a></li><li class="next"><a accesskey="n" href="bind-dyndb-ldap-config.html"><strong>Next</strong></a></li></ul><div class="section" id="enabling-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="enabling-dns">8.2. Configuring DNS in FreeIPA</h2></div></div></div><div class="para">
DNS can be configured as part of the FreeIPA server installation, simply by using the <code class="option">--setup-dns</code> option. If DNS is not configured then, it can be configured later using the <code class="command">ipa-dns-install</code> command. For example:
- </div><pre class="screen">ipa-dns-install -p secret --ip-address=1.2.34.56 --no-forwarders</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- <code class="option">-p</code> gives the password for the Directory Manager user in the 389 Directory Server. All of th DNS entries are stored in the LDAP directory, so this directory must be accessed to add the DNS configuration.
+ </div><pre class="screen">ipa-dns-install -p secret --ip-address=1.2.34.56 --no-forwarders --zone-notif</pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <code class="option">-p</code> gives the password for the Directory Manager user in the 389 Directory Server. All of the DNS entries are stored in the LDAP directory, so this directory must be accessed to add the DNS configuration.
</div></li><li class="listitem"><div class="para">
<code class="option">--ip-address</code> gives the IP address for the master DNS server.
</div></li><li class="listitem"><div class="para">
<code class="option">--no-forwarders</code> means that there are no forwarders used with the DNS service, only root servers. Alternatively, a comma-separated list of forwarders can be given, using the <code class="option">--forwarders</code> option.
</div></li><li class="listitem"><div class="para">
Reverse DNS is configured automatically. It is possible to disable reverse DNS by using the <code class="option">--no-reverse</code> option.
- </div></li></ul></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Working_with_DNS.html"><strong>Prev</strong>Chapter 10. Identity: Managing DNS</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="bind-dyndb-ldap-config.html"><strong>Next</strong>10.3. Configuring the bind-dyndb-ldap Plug-in</a></li></ul></body></html>
+ </div></li><li class="listitem"><div class="para">
+ The FreeIPA server can actively check to see when new DNS zones are added and to update its DNS server accordingly. This is enabled with the <code class="option">--zone-refresh</code> option, which sets the polling interval in seconds.
+ </div></li><li class="listitem"><div class="para">
+ Similar to refreshing the zones, the FreeIPA server can leave a persistent search open with its Directory Server and capture any new zone changes immediately. This is enabled with the <code class="option">--zone-notif</code> option.
+ </div></li></ul></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Working_with_DNS.html"><strong>Prev</strong>Chapter 8. Identity: Managing DNS</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="bind-dyndb-ldap-config.html"><strong>Next</strong>8.3. Configuring the bind-dyndb-ldap Plug-in</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-zones.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-zones.html
index ccb33b8..7872ac0 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-zones.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enabling-zones.html
@@ -1,18 +1,30 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.9. Enabling and Disabling Zones</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.8. Enabling and Disabling Zones</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html" title="10.8. Enabling Dynamic DNS Updates" /><link rel="next" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html" title="10.10. Adding Records to DNS Zones" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href=
"Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html"><strong>Next</strong></a></li></ul><div class="section" id="enabling-zones"><div class="titlepage"><div><div><h2 class="title" id="enabling-zones">10.9. Enabling and Disabling Zones</h2></div></div></div><a id="id3304453" class="indexterm"></a><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html" title="8.7. Enabling Dynamic DNS Updates" /><link rel="next" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html" title="8.9. Adding Records to DNS Zones" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Ad
ding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html"><strong>Next</strong></a></li></ul><div class="section" id="enabling-zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="enabling-zones">8.8. Enabling and Disabling Zones</h2></div></div></div><a id="id780372" class="indexterm"></a><div class="para">
Active zones can have clients added to them, are available for lookups, and are used by FreeIPA services like Kerberos. Deleting a DNS zone removes the zone entry and all the associated configuration.
</div><div class="para">
- There can be situations when it is necessary to remove a zone from activity without permanently removing the zone. This can be done by using the <code class="command">dnszone-disable</code> command.
- </div><div class="para">
- For example:
- </div><pre class="screen">$ ipa dnszone-disable server.example.com</pre><div class="para">
- When the zone needs to be brought back online, it can be re-enabled using the <code class="command">dnszone-enable</code> command.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Prev</strong>10.8. Enabling Dynamic DNS Updates</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html"><strong>Next</strong>10.10. Adding Records to DNS Zones</a></li></ul></body></html>
+ There can be situations when it is necessary to remove a zone from activity without permanently removing the zone. This is done by <span class="emphasis"><em>disabling</em></span> the zone.
+ </div><div class="section" id="enabling-zones-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="enabling-zones-ui">8.8.1. Disabling Zones in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Scroll down to the <span class="guilabel"><strong>Active zone</strong></span> field. To disable the zone, set the value to FALSE.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-active.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the settings page.
+ </div></li></ol></div></div><div class="section" id="enabling-zones-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="enabling-zones-cmd">8.8.2. Disabling Zones in the Command Line</h3></div></div></div><div class="para">
+ Disabling a zone is done by using the <code class="command">dnszone-disable</code> command.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa dnszone-disable server.example.com</pre><div class="para">
+ When the zone needs to be brought back online, it can be re-enabled using the <code class="command">dnszone-enable</code> command.
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Prev</strong>8.7. Enabling Dynamic DNS Updates</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html"><strong>Next</strong>8.9. Adding Records to DNS Zones</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enrolling-machines.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enrolling-machines.html
index fac8b17..409a75e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enrolling-machines.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/enrolling-machines.html
@@ -1,45 +1,42 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.2. Enrolling Clients Manually</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.3. Enrolling Clients Manually</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /><link rel="prev" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /><link rel="next" href="renaming-machines.html" title="14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="pr
evious"><a accesskey="p" href="managing-clients.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="renaming-machines.html"><strong>Next</strong></a></li></ul><div class="section" id="enrolling-machines"><div class="titlepage"><div><div><h2 class="title" id="enrolling-machines">14.2. Enrolling Clients Manually</h2></div></div></div><div class="para">
- Enrolling machines as clients in the FreeIPA domain is a two-part process. A host entry is created for the client (and stored in the 389 Directory Server isntance), and then a keytab is created to provision the client.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="adding-host-entry.html" title="6.2. Adding Host Entries" /><link rel="next" href="manually-unconfig-machines.html" title="6.4. Manually Unconfiguring Client Machines" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-host-entry.html"><strong>Prev</str
ong></a></li><li class="next"><a accesskey="n" href="manually-unconfig-machines.html"><strong>Next</strong></a></li></ul><div class="section" id="enrolling-machines"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="enrolling-machines">6.3. Enrolling Clients Manually</h2></div></div></div><div class="para">
+ Enrolling machines as clients in the FreeIPA domain is a two-part process. A host entry is created for the client (and stored in the 389 Directory Server instance), and then a keytab is created to provision the client.
</div><div class="para">
Both parts are performed automatically by the <code class="command">ipa-client-install</code> command. It also also possible to perform those steps separately; this allows for administrators to prepare machines and FreeIPA in advance of actually configuring the clients. This allows more flexible setup scenarios, including bulk deployments.
</div><div class="para">
When performing a manual enrollment, the host entry is created separately, and then enrollment is completed when the client script is run, which creates the requisite keytab.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
There are two ways to set the password. You can either supply your own or have FreeIPA generate a random one.
- </div></div></div><div class="section" id="Enrollment_with_Separation_of_Duties"><div class="titlepage"><div><div><h3 class="title" id="Enrollment_with_Separation_of_Duties">14.2.1. Performing a Split Enrollment</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Enrollment_with_Separation_of_Duties"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Enrollment_with_Separation_of_Duties">6.3.1. Performing a Split Enrollment</h3></div></div></div><div class="para">
There may be a situation where an administrator in one group is prohibited from <span class="emphasis"><em>creating</em></span> a host entry and, therefore, from simply running the <code class="command">ipa-client-install</code> command and allowing it to create the host. However, that administrator may have the right to run the command <span class="emphasis"><em>after</em></span> a host entry exists. In that case, one administrator can create the host entry manually, then the second administrator can complete the enrollment by running the <code class="command">ipa-client-install</code> command.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- An administrator creates the host entry, as described in <a class="xref" href="adding-host-entry.html">Section 11.2, “Adding Host Entries”</a>.
+ An administrator creates the host entry, as described in <a class="xref" href="adding-host-entry.html">Section 6.2, “Adding Host Entries”</a>.
</div></li><li class="listitem"><div class="para">
The second administrator installs the FreeIPA client packages on the machine, as in <a class="xref" href="Installing_the_IPA_Client_on_Linux.html">Section 3.2, “Configuring a Fedora System as a FreeIPA Client”</a>.
</div></li><li class="listitem"><div class="para">
When the second administrator runs the setup script, he must pass his Kerberos password and username (principal) with the <code class="command">ipa-client-install</code> command. For example:
</div><pre class="screen">$ ipa-client-install -w secret -p admin2</pre></li><li class="listitem"><div class="para">
The keytab is generated on the server and provisioned to the client machine, so that the client machine is not able to connect to the FreeIPA domain. The keytab is saved with <code class="systemitem">root:root</code> ownership and 0600 permissions.
- </div></li></ol></div></div><div class="section" id="bulk-enrollment"><div class="titlepage"><div><div><h3 class="title" id="bulk-enrollment">14.2.2. Performing a Bulk or Kickstart Enrollment</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="bulk-enrollment"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="bulk-enrollment">6.3.2. Performing a Bulk or Kickstart Enrollment</h3></div></div></div><div class="para">
Two variations of a split enrollment are a bulk enrollment and a kickstart enrollment. Combined, that allows automatic provisioning of multiple hosts or virtual machines. This requires pre-creating the hosts on the FreeIPA server, with a predefined password that can be used to authenticate to complete the enrollment operation.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- An administrator creates the host entry, as described in <a class="xref" href="adding-host-entry.html">Section 11.2, “Adding Host Entries”</a>. Set a password to use for the bulk or automatic enrollment. For example:
+ An administrator creates the host entry, as described in <a class="xref" href="adding-host-entry.html">Section 6.2, “Adding Host Entries”</a>. Set a password to use for the bulk or automatic enrollment. For example:
</div><pre class="screen">$ ipa host-add bulkserver.example.com --password=secret</pre><div class="para">
The password is set to expire after the first authentication attempt. After enrollment completes, the password expires and the host is authenticated using its keytab.
</div></li><li class="listitem"><div class="para">
- Run the kickstart script, using the given bulk password. The kickstart script performs all of the tasks performed manually by the second administrator in <a class="xref" href="enrolling-machines.html#Enrollment_with_Separation_of_Duties">Section 14.2.1, “Performing a Split Enrollment”</a>:
- </div><div class="para">
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Kickstart installs the FreeIPA packages.
- </div></li><li class="listitem"><div class="para">
- Kickstart runs the enrollment script, passing in the password.
- </div></li><li class="listitem"><div class="para">
- The enrollment script connects to the FreeIPA server using the provided password and a bind DN derived from the machine name. It then authenticates using a simple bind over SSL.
- </div></li></ul></div>
-
- </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-clients.html"><strong>Prev</strong>Chapter 14. Managing Client Machines in the FreeI...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="renaming-machines.html"><strong>Next</strong>14.3. Renaming Machines and Reconfiguring FreeIPA...</a></li></ul></body></html>
+ Run the kickstart script, using the given bulk password. The kickstart script performs all of the tasks performed manually by the second administrator in <a class="xref" href="enrolling-machines.html#Enrollment_with_Separation_of_Duties">Section 6.3.1, “Performing a Split Enrollment”</a>:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Kickstart installs the FreeIPA packages.
+ </div></li><li class="listitem"><div class="para">
+ Kickstart runs the enrollment script, passing in the password.
+ </div></li><li class="listitem"><div class="para">
+ The enrollment script connects to the FreeIPA server using the provided password and a bind DN derived from the machine name. It then authenticates using a simple bind over SSL.
+ </div></li></ol></div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-host-entry.html"><strong>Prev</strong>6.2. Adding Host Entries</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="manually-unconfig-machines.html"><strong>Next</strong>6.4. Manually Unconfiguring Client Machines</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/example-configuring-sudo.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/example-configuring-sudo.html
index 5a13954..cb1b776 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/example-configuring-sudo.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/example-configuring-sudo.html
@@ -1,18 +1,18 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.4. An Example of Configuring sudo</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.4. An Example of Configuring sudo</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="sudo.html" title="Chapter 12. Policy: Using sudo" /><link rel="prev" href="defining-sudorules.html" title="12.3. Defining sudo Rules" /><link rel="next" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudorules.html"><strong>Prev</strong></a></li><li class="next">
<a accesskey="n" href="server-config.html"><strong>Next</strong></a></li></ul><div class="section" id="example-configuring-sudo"><div class="titlepage"><div><div><h2 class="title" id="example-configuring-sudo">12.4. An Example of Configuring sudo</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="sudo.html" title="Chapter 13. Policy: Using sudo" /><link rel="prev" href="defining-sudorules.html" title="13.3. Defining sudo Rules" /><link rel="next" href="configuring-host-access.html" title="Chapter 14. Policy: Configuring Host-Based Access Control" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudorules.html"><strong>Prev</strong>
</a></li><li class="next"><a accesskey="n" href="configuring-host-access.html"><strong>Next</strong></a></li></ul><div class="section" id="example-configuring-sudo"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="example-configuring-sudo">13.4. An Example of Configuring sudo</h2></div></div></div><div class="para">
Implementing <code class="command">sudo</code> requires setting up the command configuration on the FreeIPA server and then configuring the local <code class="command">sudo</code> client to look for the appropriate configuration.
- </div><div class="section" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules"><div class="titlepage"><div><div><h3 class="title" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">12.4.1. Server Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Set up a host group, as described in <a class="xref" href="host-groups.html">Section 11.5, “Managing Host Groups”</a>.
+ </div><div class="section" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">13.4.1. Server Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Set up a host group, as described in <a class="xref" href="host-groups.html">Section 6.10, “Managing Host Groups”</a>.
</div></li><li class="listitem"><div class="para">
- Create a user group and add the users, as described in <a class="xref" href="user-groups.html#Configuring_IPA_Groups-Creating_IPA_Groups">Section 5.6.1, “Creating User Groups”</a>.
+ Create a user group and add the users, as described in <a class="xref" href="user-groups.html#Configuring_IPA_Groups-Creating_IPA_Groups">Section 5.5.1, “Creating User Groups”</a>.
</div></li><li class="listitem"><div class="para">
Set up a bind user by setting a password for the default FreeIPA <code class="command">sudo</code> bind user.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
@@ -23,10 +23,10 @@
New password:
Re-enter new password:
Enter LDAP Password:</pre></li></ol></div></li><li class="listitem"><div class="para">
- Set up the sudo commands and command groups, as described in <a class="xref" href="defining-sudocmds.html">Section 12.2, “Setting up sudo Commands and Command Groups”</a>.
+ Set up the sudo commands and command groups, as described in <a class="xref" href="defining-sudocmds.html">Section 13.2, “Setting up sudo Commands and Command Groups”</a>.
</div></li><li class="listitem"><div class="para">
- Set up the sudo rules, as described in <a class="xref" href="defining-sudorules.html">Section 12.3, “Defining sudo Rules”</a>.
- </div></li></ol></div></div><div class="section" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules"><div class="titlepage"><div><div><h3 class="title" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">12.4.2. Client Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Set up the sudo rules, as described in <a class="xref" href="defining-sudorules.html">Section 13.3, “Defining sudo Rules”</a>.
+ </div></li></ol></div></div><div class="section" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">13.4.2. Client Configuration for sudo Rules</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Configure <code class="command">sudo</code> to look to LDAP for the <code class="filename">sudoers</code> file.
<pre class="programlisting">vim /etc/nsswitch.conf
@@ -60,11 +60,11 @@ uri ldap://ipaserver.ipadocs.org
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
Adding the <em class="parameter"><code>sudoers_debug</code></em> parameter helps with troubleshooting. Valid values for this parameter are 0, 1, and 2. The <code class="command">sudo</code> documentation at <a href="http://www.gratisoft.us/sudo/readme_ldap.html">http://www.gratisoft.us/sudo/readme_ldap.html</a> has more information on debugging the process.
</div></div></div></li><li class="listitem"><div class="para">
- Create a symlink between the <code class="command">nss_ldap</code> module configuration file and the system LDAP configuration filke:
+ Create a symlink between the <code class="command">nss_ldap</code> module configuration file and the system LDAP configuration file:
<pre class="screen"># ln -s /etc/nss_ldap.conf /etc/ldap.conf</pre>
</div></li><li class="listitem"><div class="para">
Set up the NIS domain. <code class="command">sudo</code> uses NIS netgroups, so the NIS domain name must be set in the system configuration for <code class="command">sudo</code> to be able to find the host groups used in the FreeIPA <code class="command">sudo</code> configuration:
<pre class="screen"># nisdomainname example.com</pre>
- </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudorules.html"><strong>Prev</strong>12.3. Defining sudo Rules</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="server-config.html"><strong>Next</strong>Chapter 13. Configuring the FreeIPA Server</a></li></ul></body></html>
+ </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-sudorules.html"><strong>Prev</strong>13.3. Defining sudo Rules</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="configuring-host-access.html"><strong>Next</strong>Chapter 14. Policy: Configuring Host-Based Access...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/feedback.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/feedback.html
index 2677617..1f78f49 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/feedback.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/feedback.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3. Giving Feedback</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3. Giving Feedback</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Preface.html" title="Preface" /><link rel="prev" href="Document_Conventions.html" title="2. Examples and Formatting" /><link rel="next" href="doc-history.html" title="4. Document Change History" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Document_Conventions.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="doc-history.h
tml"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="section" id="feedback" lang="en-US"><div class="titlepage"><div><div><h2 class="title" id="feedback">3. Giving Feedback</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Preface.html" title="Preface" /><link rel="prev" href="Document_Conventions.html" title="2. Examples and Formatting" /><link rel="next" href="doc-history.html" title="4. Document Change History" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Document_Conventions.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="doc-history.
html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="section" id="feedback" lang="en-US"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="feedback">3. Giving Feedback</h2></div></div></div><div class="para">
If there is any error in this book or there is any way to improve the documentation, please let us know. Bugs can be filed against the documentation for FreeIPA through Bugzilla, <a href="http://bugzilla.redhat.com/bugzilla">http://bugzilla.redhat.com/bugzilla</a>. Make the bug report as specific as possible, so we can be more effective in correcting any issues:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Select the Other group and the freeIPA product.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hbac-rules.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hbac-rules.html
new file mode 100644
index 0000000..d03144c
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hbac-rules.html
@@ -0,0 +1,212 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.3. Defining Host-Based Access Control Rules</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="configuring-host-access.html" title="Chapter 14. Policy: Configuring Host-Based Access Control" /><link rel="prev" href="HBAC_Service_Groups.html" title="14.2. Creating Host-Based Access Control Entries for Services and Service Groups" /><link rel="next" href="hbac-testing.html" title="14.4. Testing Host-Based Access Control Rules" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="p
revious"><a accesskey="p" href="HBAC_Service_Groups.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="hbac-testing.html"><strong>Next</strong></a></li></ul><div class="section" id="hbac-rules"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="hbac-rules">14.3. Defining Host-Based Access Control Rules</h2></div></div></div><div class="para">
+ Access controls, at a high level, define <span class="emphasis"><em>who</em></span> has access to <span class="emphasis"><em>what</em></span>. The <span class="emphasis"><em>who</em></span> can be either a user or a host (the source host), and the <span class="emphasis"><em>what</em></span> can be either a host (target host), service, or service group, or a combination of the three.
+ </div><div class="section" id="hbac-rules-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-rules-ui">14.3.1. Setting Host-Based Access Control Rules in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Host-Based Access Control</strong></span> subtab, and then select the <span class="guilabel"><strong>HBAC Rules</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of host-based access control rules.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rules-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name for the rule.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go immediately to set the configuration for the rule.
+ </div><div class="para">
+ There are a number of configuration areas for the rule. The four basic elements are <span class="emphasis"><em>who</em></span> the rule applies to, what hosts users can use to access resources (the source), what hosts allow access (the target), and, optionally, what services can be accessed.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Who</strong></span> area, select the users or user groups to which the access control rule is applied.
+ </div><div class="para">
+ To apply the rule to all FreeIPA users, select the <span class="guilabel"><strong>Anyone</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of users or user groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Users and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-user-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the users to add to the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the users to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-user.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Accessing</strong></span> area, select the target hosts which can be accessed through this access control rule.
+ </div><div class="para">
+ To apply the rule to all FreeIPA hosts, select the <span class="guilabel"><strong>Any Host</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of hosts or host groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Hosts and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-target.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the hosts to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-target-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Via Service</strong></span> area, select specific services on the target hosts which the users are allowed to use to access target machines.
+ </div><div class="para">
+ To apply the rule to all FreeIPA hosts, select the <span class="guilabel"><strong>Any Service</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of hosts or host groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Services and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the commands list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-viasrv.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the services or groups to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the services to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-addservice.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>From</strong></span> area, select the source hosts, from which users can access the target hosts.
+ </div><div class="para">
+ To apply the rule to all FreeIPA hosts, select the <span class="guilabel"><strong>Any Host</strong></span> radio button.
+ </div><div class="para">
+ To apply the rule to a specific set of hosts or host groups:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Select the <span class="guilabel"><strong>Specified Hosts and Groups</strong></span> radio button.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>+ Add</strong></span> link at the right of the hosts list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-from.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the hosts to include with the rule, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hbac-rule-target-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click <span class="guibutton"><strong>Add</strong></span>.
+ </div></li></ol></div></li></ol></div></div><div class="section" id="hbac-rules-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-rules-cmd">14.3.2. Setting Host-Based Access Control Rules in the Command Line</h3></div></div></div><div class="para">
+ Access control rules are created using the <code class="command">hbacrule-*</code> commands (listed in <a class="xref" href="hbac-rules.html#tab.hbac-commands">Table 14.1, “Host-Based Access Control Command and Options”</a>). The first step is to create a container entry; from there, users, hosts, and services can be added to the access control entry.
+ </div><div class="para">
+ The basic outline of all the access control commands is:
+ </div><pre class="screen">$ ipa hbacrule-add* <em class="replaceable"><code>options ruleName</code></em></pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ To set every user, every host as a source host, or every host as a target, use the category options, such as <code class="option">--usercat=all</code>.
+ </div></div></div><div class="example" id="ex.hbac-all"><h6>Example 14.1. Granting All Access to One Host</h6><div class="example-contents"><div class="para">
+ One simple rule is to grant every user and every source host access to a single server. The first command creates the entry and uses the category options to apply every user and every host as a source host.
+ </div><pre class="screen">$ ipa hbacrule-add --usercat=all --srchostcat=all allGroup
+--------------------------
+Added HBAC rule "allGroup"
+--------------------------
+ Rule name: allGroup
+ User category: all
+ Source host category: all
+ Enabled: TRUE</pre><div class="para">
+ The second rule adds the target host, using the <code class="command">hbacrule-add-host</code> command:
+ </div><pre class="screen">$ ipa hbacrule-add-host --hosts=server.example.com allGroup
+ Rule name: allGroup
+ User category: all
+ Source host category: all
+ Enabled: TRUE
+ Successful hosts/hostgroups:
+ member host: server.example.com
+-------------------------
+Number of members added 1
+-------------------------
+</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-single-service"><h6>Example 14.2. Adding Control for a Single User to a Service</h6><div class="example-contents"><div class="para">
+ Another access control method is to specify which services users are allowed to use to access the target hosts.
+ </div><div class="para">
+ First, for the user to have access to every machine, every host must be added as both a host and target. This can be done using the category options:
+ </div><pre class="screen">$ ipa hbacrule-add --hostcat=all --srchostcat=all sshd-jsmith</pre><div class="para">
+ Since the access control rule applies to a specific user, the user is added to the rule using the <code class="command">hbacrule-add-user</code> command:
+ </div><pre class="screen">$ ipa hbacrule-add-user --users=jsmith sshd-jsmith</pre><div class="para">
+ Then, the service is added to the access control rule. (The service should have already been added to the access control system using the <code class="command">hbacsvc-add</code> command.) This is the service that the user can use to connect to the machine.
+ </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcs=sshd sshd-jsmith</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-srvcgroups"><h6>Example 14.3. Adding a Service Group to the Rule</h6><div class="example-contents"><div class="para">
+ While a single service can be added to a rule, it is also possible to add an entire service group. Like a single service, this uses the <code class="command">hbacrule-add-service</code> command, only with the <code class="option">--hbacsvcgroups</code> option that specifies the group name.
+ </div><pre class="screen">$ ipa hbacrule-add-service --hbacsvcgroups=login loginRule</pre></div></div><br class="example-break" /><div class="table" id="tab.hbac-commands"><h6>Table 14.1. Host-Based Access Control Command and Options</h6><div class="table-contents"><table summary="Host-Based Access Control Command and Options" border="1"><colgroup><col width="25%" /><col width="25%" /><col width="25%" /><col width="25%" /></colgroup><thead><tr><th>
+ Command
+ </th><th>
+ Description
+ </th><th>
+ Arguments
+ </th><th>
+ Source or Target Entry
+ </th></tr></thead><tbody><tr><td>
+ hbacrule-add
+ </td><td>
+ Adds a new host-based access control rule.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --usercat=all, which applies the rule to every user
+ </div></li><li class="listitem"><div class="para">
+ --hostcat=all, which sets every host as an allowed target server
+ </div></li><li class="listitem"><div class="para">
+ --srchostcat=all, which sets every host as an allowed source server
+ </div></li><li class="listitem"><div class="para">
+ --servicecat=all, which sets every configured service as an allowed target service
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the required unique identifier for the new rule
+ </div></li></ul></div>
+
+ </td><td>
+
+ </td></tr><tr><td>
+ hbacrule-add-host
+ </td><td>
+ Adds a target host to the access control rule. A target host can be accessed <span class="emphasis"><em>by</em></span> other servers and users in the domain.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --hosts, which adds an individual server or command-separated list of servers as an allowed target server
+ </div></li><li class="listitem"><div class="para">
+ --hostgroups, which adds a host group to the rule and every host within the host group is an allowed target server
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target server
+ </div></li></ul></div>
+
+ </td><td>
+ Target
+ </td></tr><tr><td>
+ hbacrule-add-service
+ </td><td>
+ Adds a service type to the rule.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --hbacsvcs, which adds an individual service type or a comma-separated list of service type as an allowed target service
+ </div></li><li class="listitem"><div class="para">
+ --hbacsvcgroups, which adds a service group to the rule and every service within the service group is an allowed target service
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the target service
+ </div></li></ul></div>
+
+ </td><td>
+ Target
+ </td></tr><tr><td>
+ hbacrule-add-sourcehost
+ </td><td>
+ Adds a server to the list of servers that can be used to access domain services and target servers.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --hosts, which adds an individual server or command-separated list of servers as an allowed source server
+ </div></li><li class="listitem"><div class="para">
+ --hostgroups, which adds a host group to the rule and every host within the host group is an allowed source server
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the source server
+ </div></li></ul></div>
+
+ </td><td>
+ Source
+ </td></tr><tr><td>
+ hbacrule-add-user
+ </td><td>
+ Adds a user to the access control rule. The user is then able to access any allowed target host or service within the domain, from any configured source host.
+ </td><td>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ --users, which adds an individual user or command-separated list of users to the rule
+ </div></li><li class="listitem"><div class="para">
+ --groups, which adds a user group to the rule and, thus, every user within the group
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to which to add the user
+ </div></li></ul></div>
+
+ </td><td>
+ Source
+ </td></tr><tr><td>
+ hbacrule-disable | hbacrule-enable
+ </td><td>
+ Disables or enables a host-based access control rule. Rules can be disabled if their behavior needs to be evaluated (for troubleshooting or to test a new rule).
+ </td><td>
+ <span class="emphasis"><em>ruleName</em></span>, which is the rule to disable or enable
+ </td><td>
+
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="HBAC_Service_Groups.html"><strong>Prev</strong>14.2. Creating Host-Based Access Control Entries ...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="hbac-testing.html"><strong>Next</strong>14.4. Testing Host-Based Access Control Rules</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hbac-testing.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hbac-testing.html
new file mode 100644
index 0000000..abbb022
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hbac-testing.html
@@ -0,0 +1,80 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.4. Testing Host-Based Access Control Rules</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="configuring-host-access.html" title="Chapter 14. Policy: Configuring Host-Based Access Control" /><link rel="prev" href="hbac-rules.html" title="14.3. Defining Host-Based Access Control Rules" /><link rel="next" href="server-access-controls.html" title="Chapter 15. Configuration: Defining Access Control within FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a
accesskey="p" href="hbac-rules.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="server-access-controls.html"><strong>Next</strong></a></li></ul><div class="section" id="hbac-testing"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="hbac-testing">14.4. Testing Host-Based Access Control Rules</h2></div></div></div><div class="para">
+ Implementing host-based access controls effectively can be tricky because it requires that all of the hosts be properly configured and the access is properly applied to users and services.
+ </div><div class="para">
+ The <code class="command">hbactest</code> command can test different host-based access control scenarios to make sure that the rules are working as expected.
+ </div><div class="section" id="hbac-limits"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-limits">14.4.1. The Limits of Host-Based Access Control Configuration</h3></div></div></div><div class="para">
+ When a request is made to one of the domain services, the identifier of the source host is sent to a PAM interface for the login application (like OpenSSH, telnet, or rlogin) which is used to access SSSD on the target host machine. This identifier can be the hostname, the IP address, or even the alias of the source host.
+ </div><div class="para">
+ This is essentially a long chain, from the source host to the target host to the service. The access control mechanism uses the identifier that is sent to the SSSD service on the target machine to verify that the source host has proper authorization granted in an access control rule.
+ </div><div class="para">
+ However, if the identifier sent to SSSD cannot be traced back to the source host, then authorization fails. This can happen if any part of the host information does not match the access control rule configuration:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The source host uses an alias which is not listed in the rule.
+ </div></li><li class="listitem"><div class="para">
+ The client passes an IP address instead of the hostname.
+ </div></li><li class="listitem"><div class="para">
+ DNS is misconfigured and does not return the proper information for the DNS lookup or reverse lookup.
+ </div></li><li class="listitem"><div class="para">
+ The client sends a malformed string to SSSD.
+ </div></li></ul></div><div class="para">
+ The name that is sent by the client <span class="emphasis"><em>must</em></span> match the name in the rule, otherwise host-based access control fails.
+ </div><div class="para">
+ The access control configuration should always be tested before it is implemented to prevent authorization failures.
+ </div></div><div class="section" id="hbac-test-examples"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hbac-test-examples">14.4.2. Test Scenarios for Host-Based Access Control</h3></div></div></div><div class="para">
+ Host-based access control rules depend on a lot of interactions — between hosts, services, DNS lookups, and users. If any element is misconfigured, then the rule can behave in unexpected ways.
+ </div><div class="para">
+ FreeIPA includes a testing tool to verify that access control rules are behaving in the expected way by testing the access in a defined scenario. There are several situations where this testing is useful:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A new rule needs to be tested before it is implemented.
+ </div></li><li class="listitem"><div class="para">
+ There are problems with the existing rules, and the testing tool can identify what rule is behaving badly.
+ </div></li><li class="listitem"><div class="para">
+ A subset of existing rules can be tested to see how they are performing.
+ </div></li></ul></div><div class="para">
+ The <code class="command">hbactest</code> command tests configured host-based access control rules in very specific situations. A test run defines:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The user to run the operation as to test the rule performance for that user (<code class="option">--user</code>)
+ </div></li><li class="listitem"><div class="para">
+ From the source host X (<code class="option">--srchost</code>)
+ </div></li><li class="listitem"><div class="para">
+ Using the login client Y (<code class="option">--service</code>)
+ </div></li><li class="listitem"><div class="para">
+ To target host Z (<code class="option">--host</code>)
+ </div></li><li class="listitem"><div class="para">
+ The rule to test (<code class="option">--rules</code>); if this is not used, then all enabled rules are tested
+ </div></li></ul></div><div class="example" id="ex.hbac-test-all"><h6>Example 14.4. Testing All Active Rules</h6><div class="example-contents"><div class="para">
+ The most basic command checks all active rules. It requires a specific connection scenario, so the user, login service, source host, and target host have to be given, and the testing tool checks the connection.
+ </div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh
+--------------------
+Access granted: True
+--------------------
+ notmatched: my-second-rule
+ notmatched: my-third-rule
+ matched: myrule
+ matched: allow_all</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-test"><h6>Example 14.5. Testing a Specific Rule</h6><div class="example-contents"><div class="para">
+ It is possible to check a specific rules (or several rules).
+ </div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh --rules=myrule
+---------------------
+Access granted: True
+---------------------
+ notmatched: myrule</pre></div></div><br class="example-break" /><div class="example" id="ex.hbac-rule-enabled"><h6>Example 14.6. Testing Specific Rules Plus All Enabled</h6><div class="example-contents"><div class="para">
+ The <code class="option">--rules</code> option lists specific rules to test, but it may be useful to test the specified rules against all of the enabled rules in the domain. This can be done by adding the <code class="option">--enabled</code> option, which includes the (unspecified) enabled rules along with the specified rules.
+ </div><pre class="screen">$ ipa hbactest --user=jsmith --srchost=source.example.com --host=target.example.com --service=ssh --rules=myrule --enabled
+--------------------
+Access granted: True
+--------------------
+ matched: my-second-rule
+ notmatched: my-third-rule
+ matched: myrule
+ matched: allow_all</pre><div class="para">
+ It is possible to run a similar comparison against <span class="emphasis"><em>disabled</em></span> rules by using the <code class="option">--disable</code> option. With the <code class="option">--rules</code> option, the specified rule plus all of the disabled rules are checked. With the <code class="option">--disabled</code> option, all disabled rules are checked.
+ </div></div></div><br class="example-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="hbac-rules.html"><strong>Prev</strong>14.3. Defining Host-Based Access Control Rules</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="server-access-controls.html"><strong>Next</strong>Chapter 15. Configuration: Defining Access Contro...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-disable.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-disable.html
index 65e6f28..f056c7e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-disable.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-disable.html
@@ -1,18 +1,18 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.4. Disabling Host and Service Entries</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.7. Disabling Host and Service Entries</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="prev" href="managing-services.html" title="11.3. Managing Services" /><link rel="next" href="host-groups.html" title="11.5. Managing Host Groups" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-services.html"><strong>Prev</strong></a
></li><li class="next"><a accesskey="n" href="host-groups.html"><strong>Next</strong></a></li></ul><div class="section" id="host-disable"><div class="titlepage"><div><div><h2 class="title" id="host-disable">11.4. Disabling Host and Service Entries</h2></div></div></div><a id="id3274485" class="indexterm"></a><a id="id3274471" class="indexterm"></a><div class="para">
- Active services and hosts can be accessed by other services, hosts, and users within the domain. Deleting a service or hosts remove the entry and all the associated configuration, and it removes it permanently.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="managing-services.html" title="6.6. Managing Services" /><link rel="next" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html" title="6.8. Extending Access Permissions over Other Hosts and Services" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="man
aging-services.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Next</strong></a></li></ul><div class="section" id="host-disable"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="host-disable">6.7. Disabling Host and Service Entries</h2></div></div></div><a id="id658004" class="indexterm"></a><a id="id658016" class="indexterm"></a><div class="para">
+ Active services and hosts can be accessed by other services, hosts, and users within the domain. There can be situations when it is necessary to remove a host or a service from activity. However, deleting a service or a host removes the entry and all the associated configuration, and it removes it permanently.
</div><div class="para">
- There can be situations when it is necessary to remove a host or a service from activity without permanently removing it from the domain. This can be done by using the <code class="command">host-disable</code> and <code class="command">service-disable</code> commands.
+ Disabling a host or service prevents domain users from access it without permanently removing it from the domain. This can be done by using the <code class="command">host-disable</code> and <code class="command">service-disable</code> commands.
</div><div class="para">
For example, for a host:
</div><pre class="screen">$ ipa host-disable server.example.com</pre><div class="para">
- For example, for a service, specify the principal rather than the hostname:
- </div><pre class="screen">$ ipa service-disable http/server.example.com</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-services.html"><strong>Prev</strong>11.3. Managing Services</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="host-groups.html"><strong>Next</strong>11.5. Managing Host Groups</a></li></ul></body></html>
+ For a service, specify the principal rather than the hostname:
+ </div><pre class="screen">$ ipa service-disable http/server.example.com</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="managing-services.html"><strong>Prev</strong>6.6. Managing Services</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Next</strong>6.8. Extending Access Permissions over Other Host...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-groups.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-groups.html
index a2fa94e..5774c34 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-groups.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/host-groups.html
@@ -1,29 +1,49 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.5. Managing Host Groups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.10. Managing Host Groups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="prev" href="host-disable.html" title="11.4. Disabling Host and Service Entries" /><link rel="next" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html" title="11.6. Extending the Permissions of FreeIPA Managed Hosts" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="prev
ious"><a accesskey="p" href="host-disable.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Next</strong></a></li></ul><div class="section" id="host-groups"><div class="titlepage"><div><div><h2 class="title" id="host-groups">11.5. Managing Host Groups</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="renaming-machines.html" title="6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration" /><link rel="next" href="active-directory.html" title="Chapter 7. Identity: Integrating with Microsoft Active Directory" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a acce
sskey="p" href="renaming-machines.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="active-directory.html"><strong>Next</strong></a></li></ul><div class="section" id="host-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="host-groups">6.10. Managing Host Groups</h2></div></div></div><div class="para">
Host groups are a way of centralizing control over important management tasks, particularly access control.
</div><div class="para">
All groups in FreeIPA are essentially <span class="emphasis"><em>static</em></span> groups, meaning that the members of the group are manually and explicitly added to the group. Tangentially, FreeIPA allows <span class="emphasis"><em>nested groups</em></span>, where a group is a member of another group. In that case, all of the group members of the member group automatically belong to the parent group, as well.
</div><div class="para">
Because groups are easy to create, it is possible to be very flexible in what groups to create and how they are organized. Groups can be defined around organizational divisions like departments, physical locations, or FreeIPA or infrastructure usage guidelines for access controls.
- </div><div class="section" id="creating-host-groups"><div class="titlepage"><div><div><h3 class="title" id="creating-host-groups">11.5.1. Creating Host Groups</h3></div></div></div><div class="para">
- New groups are created using the <code class="command">hostgroup-add</code> command. (This adds only the group; members are added separately.)
- </div><div class="para">
- Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
- </div><pre class="screen">$ ipa hostgroup-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>"</pre></div><div class="section" id="hg-adding-members"><div class="titlepage"><div><div><h3 class="title" id="hg-adding-members">11.5.2. Adding Group Members</h3></div></div></div><div class="para">
- Members are added to a host group using the <code class="command">hostgroup-add-member</code> command. This command can add both hosts as group members and other groups as group members.
- </div><div class="para">
- The syntax of the <code class="command">hostgroup-add-member</code> command requires only the group name and a comma-separated list of hosts to add:
- </div><pre class="screen">$ ipa hostgroup-add-member <em class="replaceable"><code>groupName</code></em> [--hosts=<em class="replaceable"><code>list</code></em>] [--hostgroups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
- For example, this adds three hosts to the <code class="command">caligroup</code> group:
- </div><pre class="screen">$ ipa hostgroup-add-member caligroup --hosts=ipaserver.example.com,client1.example.com,client2.example.com
+ </div><div class="section" id="creating-host-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-host-groups">6.10.1. Creating Host Groups</h3></div></div></div><div class="section" id="creating-host-groups-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-host-groups-ui">6.10.1.1. Creating Host Groups from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Host Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the groups list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name and a description for the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroup-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go immediately to the member selection page.
+ </div></li><li class="listitem"><div class="para">
+ Select the members, as described in <a class="xref" href="host-groups.html#hostgroup-members-ui">Section 6.10.2.1, “Adding Group Members with the Web UI”</a>.
+ </div></li></ol></div></div><div class="section" id="creating-host-groups-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="creating-host-groups-cmd">6.10.1.2. Creating Host Groups from the Command Line</h4></div></div></div><div class="para">
+ New groups are created using the <code class="command">hostgroup-add</code> command. (This adds only the group; members are added separately.)
+ </div><div class="para">
+ Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
+ </div><pre class="screen">$ ipa hostgroup-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>"</pre></div></div><div class="section" id="hg-adding-members"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="hg-adding-members">6.10.2. Adding Group Members</h3></div></div></div><div class="section" id="hostgroup-members-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="hostgroup-members-ui">6.10.2.1. Adding Group Members with the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Host Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the group to which to add members.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroup-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroups-menu.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the hosts to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the hosts to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/hostgroups-addmembers.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="hostgroup-members-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="hostgroup-members-cmd">6.10.2.2. Adding Group Members with the Web UI</h4></div></div></div><div class="para">
+ Members are added to a host group using the <code class="command">hostgroup-add-member</code> command. This command can add both hosts as group members and other groups as group members.
+ </div><div class="para">
+ The syntax of the <code class="command">hostgroup-add-member</code> command requires only the group name and a comma-separated list of hosts to add:
+ </div><pre class="screen">$ ipa hostgroup-add-member <em class="replaceable"><code>groupName</code></em> [--hosts=<em class="replaceable"><code>list</code></em>] [--hostgroups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
+ For example, this adds three hosts to the <code class="command">caligroup</code> group:
+ </div><pre class="screen">$ ipa hostgroup-add-member caligroup --hosts=ipaserver.example.com,client1.example.com,client2.example.com
Group name: caligroup
Description: for machines in california
GID: 387115842
@@ -32,8 +52,8 @@
Number of members added 3
-------------------------
</pre><div class="para">
- Likewise, other groups can be added as members, which creates nested groups:
- </div><pre class="screen">$ ipa hostgroup-add-member caligroup --groups=mountainview,sandiego
+ Likewise, other groups can be added as members, which creates nested groups:
+ </div><pre class="screen">$ ipa hostgroup-add-member caligroup --groups=mountainview,sandiego
Group name: caligroup
Description: for machines in california
GID: 387115842
@@ -41,4 +61,4 @@ Number of members added 3
-------------------------
Number of members added 2
-------------------------
-</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="host-disable.html"><strong>Prev</strong>11.4. Disabling Host and Service Entries</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Next</strong>11.6. Extending the Permissions of FreeIPA Manage...</a></li></ul></body></html>
+</pre></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="renaming-machines.html"><strong>Prev</strong>6.9. Renaming Machines and Reconfiguring FreeIPA ...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="active-directory.html"><strong>Next</strong>Chapter 7. Identity: Integrating with Microsoft A...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hosts.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hosts.html
index 5adea34..edec7a4 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hosts.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/hosts.html
@@ -1,15 +1,23 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 6. Identity: Managing Hosts and Services</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="dns-resolve.html" title="10.12. Resolving Hostnames in the FreeIPA Domain" /><link rel="next" href="adding-host-entry.html" title="11.2. Adding Host Entries" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-resolve.html"><strong>Prev</strong></a></li><li class="next"><
a accesskey="n" href="adding-host-entry.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="hosts" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="hosts.html#about-hosts">11.1. About Hosts and Services in FreeIPA</a></span></dt><dt><span class="section"><a href="adding-host-entry.html">11.2. Adding Host Entries</a></span></dt><dt><span class="section"><a href="managing-services.html">11.3. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="managing-services.html#adding-service-entry">11.3.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="managing-services.html#request-service-service">11.3.2. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="managing-servic
es.html#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">11.3.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a href="managing-services.html#Creating_an_IPA_Service-Using_NSS">11.3.4. Storing Certificates in NSS Databases</a></span></dt></dl></dd><dt><span class="section"><a href="host-disable.html">11.4. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="host-groups.html">11.5. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="host-groups.html#creating-host-groups">11.5.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="host-groups.html#hg-adding-members">11.5.2. Adding Group Members</a></span></dt></dl></dd><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html">11.6. Extending the Permissions of FreeIPA Managed Hosts</a></span></dt><dd><dl><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#
Delegating_Service_Management">11.6.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#Delegating_Host_Management">11.6.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#accessing-service">11.6.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="configuring-host-access.html">11.7. Configuring Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-host-access.html#HBAC_Service_Groups">11.7.1. Defining Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dt><span class="section"><a href="configuring-host-access.html#hbac-rules">11.7.2. Setting Host-Based Access Control Rules</a></span></dt><dt><span class="section"><a href="configuring-host-access.html#hbac-testing">11.7.3. Testing Host-Based Access Contro
l Rules</a></span></dt></dl></dd></dl></div><div class="para">
- Clients within the FreeIPA domain are simply machines (hosts) and services that are recognized by and participate in domain services. Managing hosts and services within the FreeIPA environment allows clear relationships to be established between the domain hosts and services and can be used to create a hierarchy of management (called <span class="emphasis"><em>delegation</em></span>).
- </div><div class="section" id="about-hosts"><div class="titlepage"><div><div><h2 class="title" id="about-hosts">11.1. About Hosts and Services in FreeIPA</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html" title="5.7. Specifying Default User and Group Settings" /><link rel="next" href="adding-host-entry.html" title="6.2. Adding Host Entries" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_IPA_Users-Sp
ecifying_Default_User_Settings.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="adding-host-entry.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="hosts" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 6. Identity: Managing Hosts and Services</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="hosts.html#about-hosts">6.1. About Hosts, Services, and Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="adding-host-entry.html">6.2. Adding Host Entries</a></span></dt><dd><dl><dt><span class="section"><a href="adding-host-entry.html#adding-host-entry-ui">6.2.1. Adding Host Entries from the Web UI</a></span></dt><dt><span class="section"><a href="adding-host-entry.html#adding-host-entry-cmd">6.2.2. Adding Host Entries from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="enrolling-machines.html">6.3. Enrolling
Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a href="enrolling-machines.html#Enrollment_with_Separation_of_Duties">6.3.1. Performing a Split Enrollment</a></span></dt><dt><span class="section"><a href="enrolling-machines.html#bulk-enrollment">6.3.2. Performing a Bulk or Kickstart Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="manually-unconfig-machines.html">6.4. Manually Unconfiguring Client Machines</a></span></dt><dt><span class="section"><a href="Client_Problems.html">6.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="managing-services.html">6.6. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="managing-services.html#adding-service-entry">6.6.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="managing-services.html#request-service-service">6.6.2. Adding Services and Certificates for Services</a></span></dt><dt
><span class="section"><a href="managing-services.html#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">6.6.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a href="managing-services.html#Creating_an_IPA_Service-Using_NSS">6.6.4. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="managing-services.html#ipa-cluster">6.6.5. Configuring Clustered Services</a></span></dt><dt><span class="section"><a href="managing-services.html#Using_the_Same_Service_Principal_for_Multiple_Services">6.6.6. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="host-disable.html">6.7. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html">6.8. Extending Access Permissions over Other Hosts and Services</a></span></dt><dd><dl><dt><span class="section"><a href="Extending_the_Permissions_of_IPA
_Managed_Hosts.html#Delegating_Service_Management">6.8.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#Delegating_Host_Management">6.8.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#accessing-service">6.8.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="renaming-machines.html">6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration</a></span></dt><dt><span class="section"><a href="host-groups.html">6.10. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="host-groups.html#creating-host-groups">6.10.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="host-groups.html#hg-adding-members">6.10.2. Adding Group Members</a></span></dt></dl></dd></dl></div><div class="para">
+ Both DNS and Kerberos are configured as part of the initial client configuration. This is required because these are the two services that bring the machine within the FreeIPA domain and allow it to identify the FreeIPA server it will connect with. After the initial configuration, FreeIPA has tools to manage both of these services in response to changes in the domain services, changes to the IT environment, or changes on the machines themselves which affect Kerberos, certificate, and DNS services, like changing the client hostname.
+ </div><div class="para">
+ This chapter describes how to manage identity services that relate directly to the client machine:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ DNS entries and settings
+ </div></li><li class="listitem"><div class="para">
+ Machine authentication
+ </div></li><li class="listitem"><div class="para">
+ Hostname changes (which affect domain services)
+ </div></li></ul></div><div class="section" id="about-hosts"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-hosts">6.1. About Hosts, Services, and Machine Identity and Authentication</h2></div></div></div><div class="para">
The basic function of an enrollment process is to create a <span class="emphasis"><em>host</em></span> entry for the client machine in the FreeIPA directory. This host entry is used to establish relationships between other hosts and even services within the domain. These relationships are part of <span class="emphasis"><em>delegating</em></span> authorization and control to hosts within the domain.
</div><div class="para">
A host entry contains all of the information about the client within FreeIPA:
@@ -22,9 +30,29 @@
</div></li><li class="listitem"><div class="para">
Machine information, such as its physical location and operating system
</div></li></ul></div><div class="para">
- Some services that run on a host can also belong to the FreeIPA domain. Any service that can store a Kerberos principal or an SSL certificate (or both) can be configured as an FreeIPA service. Adding a service to the FreeIPA domain allows the service to request an SSL certificate or keytab from the domain. (ONly the public key for the certificate is stored in the service record. The private key is local to the service.)
+ Some services that run on a host can also belong to the FreeIPA domain. Any service that can store a Kerberos principal or an SSL certificate (or both) can be configured as an FreeIPA service. Adding a service to the FreeIPA domain allows the service to request an SSL certificate or keytab from the domain. (Only the public key for the certificate is stored in the service record. The private key is local to the service.)
</div><div class="para">
- A FreeIPA service can be managed from any FreeIPA host, as long as that host has been granted, or <span class="emphasis"><em>delegated</em></span>, permission to access the service. Likewise, hosts can be delegated permissions to other hosts within the domain.
- </div><div class="figure" id="fig.host-service"><div class="figure-contents"><div class="mediaobject"><img src="images/host-services.png" alt="Host and Service Delegation" /></div></div><h6>Figure 11.1. Host and Service Delegation</h6></div><br class="figure-break" /><div class="para">
- Host-based access control rules (which are described in <a class="xref" href="configuring-host-access.html">Section 11.7, “Configuring Host-Based Access Control”</a>) can be applied to individual hosts. However, using host groups allows centralized, and potentially simplified, access control management because an access control rule only needs to be defined once and then it is applied immediately and consistently to all the hosts within the group.
- </div><div class="figure" id="fig.host-hbac"><div class="figure-contents"><div class="mediaobject"><img src="images/host-hbac.png" width="600" alt="Host Groups and Host-Based Access Control" /></div></div><h6>Figure 11.2. Host Groups and Host-Based Access Control</h6></div><br class="figure-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-resolve.html"><strong>Prev</strong>10.12. Resolving Hostnames in the FreeIPA Domain</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="adding-host-entry.html"><strong>Next</strong>11.2. Adding Host Entries</a></li></ul></body></html>
+ A FreeIPA domain establishes a commonality between machines, with common identity information, common policies, and shared services. Any machine which belongs to a domain functions as a client of the domain, which means it uses the services that the domain provides. A FreeIPA domain provides three main services specifically for machines:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ DNS
+ </div></li><li class="listitem"><div class="para">
+ Kerberos
+ </div></li><li class="listitem"><div class="para">
+ Certificate management
+ </div></li></ul></div><div class="para">
+ Machines are treated as another identity that is managed by FreeIPA. Clients use DNS to identify FreeIPA servers, services, and domain members — which, like user identities are stored in the 389 Directory Server instance for the FreeIPA server. Like users, machines can authenticated to the domain using Kerberos or certificates to verify the machine's identity.
+ </div><div class="para">
+ From the machine perspective, there are several tasks that can be performed that access these domain services:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Joining the DNS domain (<span class="emphasis"><em>machine enrollment</em></span>)
+ </div></li><li class="listitem"><div class="para">
+ Managing DNS entries and zones
+ </div></li><li class="listitem"><div class="para">
+ Managing machine authentication
+ </div></li></ul></div><div class="para">
+ Authentication in FreeIPA includes machines as well as users. Machine authentication is required for the FreeIPA server to trust the machine and to accept FreeIPA connections from the client software installed on that machine. After authenticating the client, the FreeIPA server can respond to its requests. FreeIPA supports two different approaches to machine authentication:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Key tables (or <em class="firstterm">keytabs</em>, a symmetric key resembling to some extent a user password) and machine certificates. Kerberos tickets are generated as part of the Kerberos services and policies defined by the server. Initially granting a Kerberos ticket, renewing the Kerberos credentials, and even destroying the Kerberos session are all handled by the FreeIPA services. Managing Kerberos is covered in <a class="xref" href="kerberos.html">Chapter 12, <em>Policy: Managing the Kerberos Domain</em></a>.
+ </div></li><li class="listitem"><div class="para">
+ Machine certificates. In this case, the machine uses an SSL certificate that is issued by the FreeIPA server's certificate authority and then stored in FreeIPA's Directory Server. The certificate is then sent to the machine to present when it authenticates to the server. On the client, certificates are managed by a service called <span class="emphasis"><em>certmonger</em></span>, which is described in <a class="xref" href="certmongerX.html">Chapter 18, <em>Working with certmonger</em></a>.
+ </div></li></ul></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Prev</strong>5.7. Specifying Default User and Group Settings</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="adding-host-entry.html"><strong>Next</strong>6.2. Adding Host Entries</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/IPA_Migration_Initial_State.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/IPA_Migration_Initial_State.png
index c0aaaf3..08d1c75 100644
Binary files a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/IPA_Migration_Initial_State.png and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/IPA_Migration_Initial_State.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-breadcrumbs.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-breadcrumbs.png
new file mode 100644
index 0000000..65ed7af
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-breadcrumbs.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-direct1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-direct1.png
new file mode 100644
index 0000000..33ebb30
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-direct1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-direct2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-direct2.png
new file mode 100644
index 0000000..08b1177
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-direct2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-indirect1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-indirect1.png
new file mode 100644
index 0000000..5407bec
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-indirect1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-key-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-key-list.png
new file mode 100644
index 0000000..51e355b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-key-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-location-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-location-list.png
new file mode 100644
index 0000000..4773ff3
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-location-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-location.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-location.png
new file mode 100644
index 0000000..a29adfb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-location.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-map-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-map-list.png
new file mode 100644
index 0000000..54560da
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/automount-map-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/browser-kinit-fedora.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/browser-kinit-fedora.png
new file mode 100644
index 0000000..4ddaeee
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/browser-kinit-fedora.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/browser-kinit-rhel.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/browser-kinit-rhel.png
new file mode 100644
index 0000000..2403f82
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/browser-kinit-rhel.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/collapse-arrows.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/collapse-arrows.png
new file mode 100644
index 0000000..b3d6114
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/collapse-arrows.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser1.png
new file mode 100644
index 0000000..7ccda65
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser2.png
new file mode 100644
index 0000000..5401fa7
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser3.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser3.png
new file mode 100644
index 0000000..d95a0d6
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/configuring-browser3.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/delegation-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/delegation-add.png
new file mode 100644
index 0000000..257623c
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/delegation-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/delegation-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/delegation-list.png
new file mode 100644
index 0000000..6e5a461
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/delegation-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-active.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-active.png
new file mode 100644
index 0000000..da9ac48
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-active.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-dynamic.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-dynamic.png
new file mode 100644
index 0000000..5ade0a4
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-dynamic.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-list.png
new file mode 100644
index 0000000..fed5c9b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-new.png
new file mode 100644
index 0000000..37cf22d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-list.png
new file mode 100644
index 0000000..5c26d2d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-new.png
new file mode 100644
index 0000000..9055771
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-types.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-types.png
new file mode 100644
index 0000000..17c5e3b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-record-types.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-settings.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-settings.png
new file mode 100644
index 0000000..89e432b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/dns-zone-settings.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-apply.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-apply.png
new file mode 100644
index 0000000..b661e5f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-apply.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-download.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-download.png
new file mode 100644
index 0000000..f5fa2bc
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-download.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-register.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-register.png
new file mode 100644
index 0000000..f33f99e
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-domain-register.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-import1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-import1.png
new file mode 100644
index 0000000..ddc315e
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-import1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-import2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-import2.png
new file mode 100644
index 0000000..ebeef08
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-import2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-reg2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-reg2.png
new file mode 100644
index 0000000..006090a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-reg2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-register.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-register.png
new file mode 100644
index 0000000..5ed4664
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ent-register.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/finalstate.svg b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/finalstate.svg
index 85be850..c5b4b7c 100755
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/finalstate.svg
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/finalstate.svg
@@ -36,8 +36,8 @@
showgrid="false"
inkscape:window-width="1274"
inkscape:window-height="996"
- inkscape:window-x="-39"
- inkscape:window-y="80"
+ inkscape:window-x="101"
+ inkscape:window-y="48"
inkscape:window-maximized="0"
fit-margin-top="0"
fit-margin-left="0"
@@ -1844,7 +1844,7 @@
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
- <dc:title></dc:title>
+ <dc:title />
</cc:Work>
</rdf:RDF>
</metadata>
@@ -2574,18 +2574,11 @@
y="335.79758"
id="text3608"
sodipodi:linespacing="107.00001%"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- sodipodi:role="line"
- id="tspan3610"
- x="285.31396"
- y="335.79758">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4746"
sodipodi:role="line"
x="283.6499"
- y="348.63757"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- id="tspan5410">using </tspan>SSSD with an LDAP backend</tspan></text>
+ y="348.63757">SSSD with an LDAP backend</tspan></text>
</g>
<g
transform="translate(169,-217.33331)"
@@ -2748,18 +2741,11 @@
x="386.11017"
style="font-size:11.23178864px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-indent:0;text-align:center;text-decoration:none;line-height:107.00000525%;letter-spacing:normal;word-spacing:normal;text-transform:none;direction:ltr;block-progression:tb;writing-mode:lr-tb;text-anchor:middle;baseline-shift:baseline;color:#000000;fill:#555753;fill-opacity:1;fill-rule:nonzero;stroke:none;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate;font-family:Droid Sans;-inkscape-font-specification:Droid Sans Bold"
xml:space="preserve"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- y="333.29758"
- x="387.77423"
- id="tspan4429"
- sodipodi:role="line">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4748"
y="346.13757"
x="386.11017"
- sodipodi:role="line"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- id="tspan5408">using </tspan>SSSD with an IPA backend</tspan></text>
+ sodipodi:role="line">SSSD with an IPA backend</tspan></text>
</g>
<text
sodipodi:linespacing="125%"
@@ -2934,18 +2920,11 @@
y="332.79758"
id="text4433"
sodipodi:linespacing="107.00001%"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- sodipodi:role="line"
- id="tspan4435"
- x="521.13611"
- y="332.79758">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4750"
sodipodi:role="line"
x="519.57751"
- y="345.63757"><tspan
- id="tspan5412"
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans">using </tspan>PAM_LDAP/NSS_LDAP</tspan></text>
+ y="345.63757">PAM_LDAP/NSS_LDAP</tspan></text>
</g>
<g
transform="translate(-112,6)"
@@ -3108,18 +3087,11 @@
x="669.04968"
style="font-size:11.23178864px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-indent:0;text-align:center;text-decoration:none;line-height:107.00000525%;letter-spacing:normal;word-spacing:normal;text-transform:none;direction:ltr;block-progression:tb;writing-mode:lr-tb;text-anchor:middle;baseline-shift:baseline;color:#000000;fill:#555753;fill-opacity:1;fill-rule:nonzero;stroke:none;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate;font-family:Droid Sans;-inkscape-font-specification:Droid Sans Bold"
xml:space="preserve"><tspan
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans"
- y="333.29758"
- x="670.60828"
- id="tspan4441"
- sodipodi:role="line">Client configuration </tspan><tspan
style="font-size:12px"
id="tspan4752"
y="346.13757"
x="669.04968"
- sodipodi:role="line"><tspan
- id="tspan5414"
- style="font-size:12px;font-weight:normal;line-height:107.00000525%;-inkscape-font-specification:Droid Sans">using </tspan>PAM_KRB5/NSS_LDAP</tspan></text>
+ sodipodi:role="line">PAM_KRB5/NSS_LDAP</tspan></text>
</g>
<g
transform="translate(539.98213,665.63497)"
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-add.png
new file mode 100644
index 0000000..df85400
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-addmembers-user.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-addmembers-user.png
new file mode 100644
index 0000000..2d8dfd1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-addmembers-user.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-config.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-config.png
new file mode 100644
index 0000000..9001ebf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-config.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-delete.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-delete.png
new file mode 100644
index 0000000..ddce2ca
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-delete.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-links.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-links.png
new file mode 100644
index 0000000..2963576
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-links.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-list.png
new file mode 100644
index 0000000..9e2104f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/group-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-addmembers.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-addmembers.png
new file mode 100644
index 0000000..3c280eb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-addmembers.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-menu.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-menu.png
new file mode 100644
index 0000000..7868145
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-menu.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-menu2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-menu2.png
new file mode 100644
index 0000000..6c88633
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/groups-menu2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-from.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-from.png
new file mode 100644
index 0000000..be5376d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-from.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-addservice.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-addservice.png
new file mode 100644
index 0000000..4d30fe0
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-addservice.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-new.png
new file mode 100644
index 0000000..8f8b424
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-target-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-target-add.png
new file mode 100644
index 0000000..30ad290
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-target-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-target.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-target.png
new file mode 100644
index 0000000..e2536a0
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-target.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-user-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-user-add.png
new file mode 100644
index 0000000..3b60665
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-user-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-user.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-user.png
new file mode 100644
index 0000000..0d23bc0
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-user.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-viasrv.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-viasrv.png
new file mode 100644
index 0000000..a0f4574
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rule-viasrv.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rules-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rules-list.png
new file mode 100644
index 0000000..6359051
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-rules-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-service-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-service-new.png
new file mode 100644
index 0000000..bde3f82
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-service-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-services-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-services-list.png
new file mode 100644
index 0000000..38bf693
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-services-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-list.png
new file mode 100644
index 0000000..2ed02c6
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-member1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-member1.png
new file mode 100644
index 0000000..f8d72e3
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-member1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-member2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-member2.png
new file mode 100644
index 0000000..fc89e08
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-member2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-new.png
new file mode 100644
index 0000000..f1f4e94
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hbac-svcgrp-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-add.png
new file mode 100644
index 0000000..52a910f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-attr.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-attr.png
new file mode 100644
index 0000000..5b81f21
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-attr.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-krbinfo.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-krbinfo.png
new file mode 100644
index 0000000..914996a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/host-krbinfo.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroup-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroup-add.png
new file mode 100644
index 0000000..feeef2c
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroup-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroup-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroup-list.png
new file mode 100644
index 0000000..471d2d1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroup-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroups-addmembers.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroups-addmembers.png
new file mode 100644
index 0000000..d000f47
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroups-addmembers.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroups-menu.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroups-menu.png
new file mode 100644
index 0000000..caaf1df
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hostgroups-menu.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hosts-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hosts-list.png
new file mode 100644
index 0000000..1ac51bf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/hosts-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/indirect-group-filters.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/indirect-group-filters.png
new file mode 100644
index 0000000..2660316
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/indirect-group-filters.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/initstate.svg b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/initstate.svg
new file mode 100644
index 0000000..25d2c92
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/initstate.svg
@@ -0,0 +1,9239 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="initstate.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\IPA_Migration_Initial_State.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="131.10439"
+ inkscape:cy="273.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ id="guide6372"
+ position="301,506"
+ orientation="1,0" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ patternTransform="matrix(0.39607708,0,0,0.42550454,617.86712,-146.57274)"
+ id="pattern23476"
+ xlink:href="#black-spots"
+ inkscape:collect="always" />
+ <marker
+ inkscape:stockid="TriangleOutM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutM"
+ style="overflow:visible">
+ <path
+ id="path18351"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ id="stop3989"
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0;" />
+ <stop
+ id="stop3991"
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1;" />
+ </linearGradient>
+ <pattern
+ patternUnits="userSpaceOnUse"
+ width="32"
+ height="32"
+ id="white-spots"
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)">
+ <g
+ inkscape:label="#g3035"
+ id="white-spot"
+ transform="translate(-484.3997,-513.505)">
+ <path
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ id="path3033"
+ style="opacity:0.25;fill:white" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ id="path4633" />
+ </mask>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1"
+ xlink:href="#linearGradient4584-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ id="path4633-8" />
+ </mask>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8"
+ xlink:href="#linearGradient4584-70"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1"
+ id="rect7731"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584"
+ id="linearGradient7733"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847">
+ <feGaussianBlur
+ id="feGaussianBlur9849"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917">
+ <feGaussianBlur
+ id="feGaussianBlur5919"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827">
+ <feGaussianBlur
+ id="feGaussianBlur9829"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668">
+ <feGaussianBlur
+ id="feGaussianBlur10670"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391">
+ <feGaussianBlur
+ id="feGaussianBlur8393"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1"
+ id="rect7572-2"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3"
+ id="linearGradient7574-6"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ id="path4633-3" />
+ </mask>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635"
+ xlink:href="#linearGradient4584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5370"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5374"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5376"
+ xlink:href="#linearGradient5557"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5378"
+ xlink:href="#linearGradient5541"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5380"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5382"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5384"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5386"
+ xlink:href="#linearGradient5813"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5388"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5390"
+ xlink:href="#linearGradient5931"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5392"
+ xlink:href="#linearGradient6398"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5394"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5396"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5398"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5400"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5402"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5404"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5406"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3-8-9" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0-3-2" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8-1-4"
+ xlink:href="#linearGradient4584-70-8-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0-9-4" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4-6-0" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1-4-2"
+ xlink:href="#linearGradient4584-7-8-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-7" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-1"
+ id="linearGradient7574-6-7"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <marker
+ style="overflow:visible"
+ id="TriangleInSQ"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSQ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9776" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS7"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS7">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9779" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSg"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSg">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9782" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSG"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSG">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9785" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSE"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSE">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9788" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSf"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSf">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9791" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSJ"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSJ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9794" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS2"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS2">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9797" />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendI"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9007"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2MstartB"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9004"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7413">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7415"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7409" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7411" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0"
+ id="radialGradient7405"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7397"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7399" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7401" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7403" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71"
+ id="linearGradient7395"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7391"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7393"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7389"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient7381"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7383" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7385" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3"
+ id="linearGradient7379"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7371"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7373" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7375" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7377" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37"
+ id="linearGradient7369"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7365"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7367"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7361">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7363"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7357" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7359" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0"
+ id="radialGradient7353"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7345"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7347" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7349" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7351" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71"
+ id="linearGradient7343"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7339"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7341"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7337"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient7329"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7331" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7333" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3"
+ id="linearGradient7327"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7319"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7321" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7323" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7325" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37"
+ id="linearGradient7317"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7313"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7315"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-9">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-33"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-4" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0"
+ id="radialGradient7254-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-7-71"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71"
+ id="linearGradient7252-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-9"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-5"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-7"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-1-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3"
+ id="linearGradient7250-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-3-37"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-2" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-50" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37"
+ id="linearGradient7248-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-4"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6929">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6931"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6925" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6927" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10"
+ id="radialGradient6921"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6913"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6915" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6917" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6919" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67"
+ id="linearGradient6911"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6907"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6909"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6905"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6897"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6899" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6901" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9"
+ id="linearGradient6895"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6887"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6889" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6891" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6893" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2"
+ id="linearGradient6885"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6881"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6883"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6877">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6879"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6873" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6875" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10"
+ id="radialGradient6869"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6861"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6863" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6865" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6867" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67"
+ id="linearGradient6859"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6855"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6857"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6853"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6845"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6847" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6849" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9"
+ id="linearGradient6843"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6835"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6837" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6839" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6841" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2"
+ id="linearGradient6833"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6829"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6831"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-0"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-82" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10"
+ id="radialGradient5846-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-67"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-2" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67"
+ id="linearGradient5844-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-1"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-2"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-6"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-9"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-28" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-50" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9"
+ id="linearGradient5842-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-2"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-9" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2"
+ id="linearGradient5840-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-4"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6383">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6385"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6379" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6381" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9"
+ id="radialGradient6375"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6367"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6369" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6371" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6373" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7"
+ id="linearGradient6365"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6361"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6363"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6359"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6351"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6353" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6355" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5"
+ id="linearGradient6349"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6341"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6343" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6345" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6347" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3"
+ id="linearGradient6339"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6335"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6337"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6331">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6333"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6327" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6329" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9"
+ id="radialGradient6323"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6315"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6317" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6319" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6321" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7"
+ id="linearGradient6313"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6309"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6311"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6307"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient6299"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6301" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6303" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5"
+ id="linearGradient6297"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6289"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6291" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6293" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6295" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3"
+ id="linearGradient6287"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6283"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6285"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-8" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9"
+ id="radialGradient5236-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-7-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-5" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7"
+ id="linearGradient5234-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-3"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-5"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-1-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5"
+ id="linearGradient5232-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-3-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-1" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3"
+ id="linearGradient5230-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-3"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-9"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5984">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5986"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5980" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5982" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8"
+ id="radialGradient5976"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5968"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5970" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5972" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5974" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6"
+ id="linearGradient5966"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5962"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5964"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5960"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient5952"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5954" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5956" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0"
+ id="linearGradient5950"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5942"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5944" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5946" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5948" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4"
+ id="linearGradient5940"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5936"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5938"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5932">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5934"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5928" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5930" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8"
+ id="radialGradient5924"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5916"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5918" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5920" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5922" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6"
+ id="linearGradient5914"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5910"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5912"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5908"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient5900"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5902" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5904" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0"
+ id="linearGradient5898"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5890"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5892" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5894" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5896" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4"
+ id="linearGradient5888"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5884"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5886"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-8">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-8" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8"
+ id="radialGradient5846-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="XMLID_419_-6"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-3" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-00" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6"
+ id="linearGradient5844-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-9"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-9"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-8"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-26" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-52" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0"
+ id="linearGradient5842-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-75" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4"
+ id="linearGradient5840-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-5"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4553">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4555"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4549" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4551" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4545"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4537"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4539" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4541" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4543" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4535"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4531"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4533"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4529"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient4521"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4523" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4525" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4519"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4511"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4513" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4515" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4517" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4509"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4505"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4507"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4501">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4503"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4497" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4499" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4493"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4485"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4487" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4489" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4491" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4483"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4479"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4481"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4477"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="linearGradient4469"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4471" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4473" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4467"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4459"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4461" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4463" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4465" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4457"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4453"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4455"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576-6"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="XMLID_419_-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3574-1"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5372-3"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7484-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3570-1"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9"
+ inkscape:collect="always" />
+ </filter>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9v"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9"
+ id="path10095"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <linearGradient
+ id="linearGradient5478"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5199"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5175"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4899"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <pattern
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)"
+ id="pattern7559"
+ xlink:href="#pattern18096" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3581" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop3583" />
+ </linearGradient>
+ <radialGradient
+ r="75"
+ id="radialGradient18146"
+ fx="55.217297"
+ fy="846.34479"
+ gradientUnits="userSpaceOnUse"
+ cy="846.42249"
+ cx="99.411484"
+ xlink:href="#linearGradient3579"
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)" />
+ <pattern
+ height="32"
+ id="black-spots"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ width="32">
+ <g
+ inkscape:label="#g3039"
+ transform="translate(-448.3997,-513.505)"
+ id="black-spot">
+ <path
+ style="opacity:0.1;fill:black"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path2961" />
+ </g>
+ </pattern>
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)"
+ id="pattern4038"
+ xlink:href="#black-spots" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)"
+ id="pattern4315"
+ xlink:href="#pattern4038" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)"
+ id="pattern4396"
+ xlink:href="#pattern4315" />
+ <pattern
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)"
+ id="pattern4704"
+ xlink:href="#pattern4396" />
+ <pattern
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)"
+ id="pattern3587"
+ xlink:href="#pattern4704" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)"
+ id="pattern6248"
+ xlink:href="#pattern3587" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)"
+ id="pattern2505"
+ xlink:href="#pattern6248" />
+ <pattern
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)"
+ id="pattern4829"
+ xlink:href="#pattern2505" />
+ <pattern
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)"
+ id="pattern18096"
+ xlink:href="#pattern4829" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ offset="0"
+ style="stop-color:#ac0000;stop-opacity:1"
+ id="stop5723" />
+ <stop
+ offset="1"
+ style="stop-color:#f50606;stop-opacity:1"
+ id="stop5725" />
+ </linearGradient>
+ <marker
+ style="overflow:visible"
+ id="TriangleInM"
+ refY="0"
+ orient="auto"
+ refX="0">
+ <path
+ transform="scale(-0.5,-0.5)"
+ style="fill:#555753"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ id="path4167" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop6077" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6079" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ offset="0"
+ style="stop-color:#000000;stop-opacity:1"
+ id="stop3520" />
+ <stop
+ offset="1"
+ style="stop-color:#000000;stop-opacity:0"
+ id="stop3522" />
+ </linearGradient>
+ <filter
+ height="1.8680604"
+ id="filter4009"
+ y="-0.43403015"
+ width="1.1872287"
+ x="-0.093614347">
+ <feGaussianBlur
+ stdDeviation="3.9786096"
+ id="feGaussianBlur4011"
+ inkscape:collect="always" />
+ </filter>
+ <pattern
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)"
+ id="pattern4156"
+ xlink:href="#pattern18092" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ id="stop3989-1" />
+ <stop
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ id="stop3991-1" />
+ </linearGradient>
+ <pattern
+ height="32"
+ id="white-spots-2"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ width="32">
+ <g
+ inkscape:label="#g3035"
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot-3">
+ <path
+ style="opacity:0.3;fill:white"
+ id="path3033-3"
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z " />
+ </g>
+ </pattern>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)"
+ id="pattern4015-1"
+ xlink:href="#white-spots-2" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)"
+ id="pattern4062-3"
+ xlink:href="#pattern4015-1" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)"
+ id="pattern6159"
+ xlink:href="#pattern4062-3" />
+ <pattern
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)"
+ id="pattern2509"
+ xlink:href="#pattern6159" />
+ <pattern
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)"
+ id="pattern2491"
+ xlink:href="#pattern2509" />
+ <pattern
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)"
+ id="pattern18092"
+ xlink:href="#pattern2491" />
+ <filter
+ height="1.5828062"
+ id="filter16947"
+ y="-0.29140311"
+ x="-0.093153283"
+ width="1.1863066">
+ <feGaussianBlur
+ stdDeviation="1.5518534"
+ id="feGaussianBlur16949"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ offset="0"
+ style="stop-color:#2e3436;stop-opacity:1"
+ id="stop3933" />
+ <stop
+ offset="1"
+ style="stop-color:#2e3436;stop-opacity:0"
+ id="stop3935" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326" />
+ </linearGradient>
+ <linearGradient
+ id="XMLID_419_"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <filter
+ height="1.3295043"
+ id="filter7696"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698"
+ inkscape:collect="always" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ style="opacity:1;fill:#2e3436"
+ id="path17037"
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z" />
+ </clipPath>
+ <linearGradient
+ id="lg1900"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7484"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <filter
+ height="1.2617458"
+ id="filter3605"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ offset="0"
+ style="stop-color:#888a85;stop-opacity:1"
+ id="stop3536" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop3538" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3337" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ id="stop3339" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7128" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7130" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16859"
+ gradientUnits="userSpaceOnUse"
+ x1="592.31"
+ x2="609.32001"
+ y1="162.60001"
+ y2="145.59">
+ <stop
+ offset="0"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ id="stop16861" />
+ <stop
+ offset="1"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ id="stop16863" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E5E5E5" />
+ </linearGradient>
+ <linearGradient
+ id="x5002_"
+ gradientUnits="userSpaceOnUse"
+ x1="601.48999"
+ x2="613.84003"
+ y1="170.16"
+ y2="170.16">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29134" />
+ <stop
+ offset="0.2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29136" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop29138" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.20"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#999999" />
+ </linearGradient>
+ <linearGradient
+ id="x5004_"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ y1="156.45"
+ x1="592.20001">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29157" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29159" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#FFFFFF" />
+ </linearGradient>
+ <radialGradient
+ r="265"
+ id="radialGradient4153"
+ fx="146.23947"
+ fy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ cy="830.26575"
+ cx="146.23947"
+ xlink:href="#linearGradient3987-4"
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)" />
+ <filter
+ height="1.2029091"
+ id="filter5126"
+ y="-0.10145455"
+ x="-0.021882353"
+ width="1.0437647">
+ <feGaussianBlur
+ stdDeviation="1.1579412"
+ id="feGaussianBlur5128"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5932"
+ gradientUnits="userSpaceOnUse"
+ y2="311.5975"
+ x2="500.71109"
+ xlink:href="#linearGradient3518"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ y1="244.95538"
+ x1="500.71109" />
+ <linearGradient
+ id="linearGradient5934"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient6596"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient2462"
+ gradientUnits="userSpaceOnUse"
+ y2="371.83398"
+ x2="257.22992"
+ xlink:href="#linearGradient6075"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ y1="371.49814"
+ x1="277.90814" />
+ <linearGradient
+ id="linearGradient2466"
+ gradientUnits="userSpaceOnUse"
+ y2="383.08859"
+ x2="246.338"
+ xlink:href="#linearGradient6075"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ y1="382.31308"
+ x1="294.08597" />
+ <linearGradient
+ id="linearGradient3570"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient3574"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient3614"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ xlink:href="#x5004_"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="156.45"
+ x1="592.20001" />
+ <linearGradient
+ id="linearGradient3616"
+ gradientUnits="userSpaceOnUse"
+ y2="170.16"
+ x2="613.84003"
+ xlink:href="#x5002_"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="170.77318"
+ x1="600.74371" />
+ <linearGradient
+ id="linearGradient3618"
+ gradientUnits="userSpaceOnUse"
+ y2="151.51437"
+ x2="605.57886"
+ xlink:href="#linearGradient16859"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="158.12231"
+ x1="599.39917" />
+ <radialGradient
+ r="20.016653"
+ id="radialGradient3620"
+ fx="29.256323"
+ fy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ cy="34.171967"
+ cx="29.256323"
+ xlink:href="#linearGradient7126"
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)" />
+ <linearGradient
+ id="linearGradient3622"
+ gradientUnits="userSpaceOnUse"
+ y2="39.879005"
+ x2="500.77838"
+ xlink:href="#linearGradient3335"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ y1="78.13385"
+ x1="500.77838" />
+ <linearGradient
+ id="linearGradient3624"
+ gradientUnits="userSpaceOnUse"
+ y2="41.366924"
+ x2="37.213612"
+ xlink:href="#linearGradient3534"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ y1="26.265114"
+ x1="37.213612" />
+ <radialGradient
+ r="24"
+ id="radialGradient3626"
+ fx="948"
+ fy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ cy="209.00021"
+ cx="948"
+ xlink:href="#linearGradient7126" />
+ <radialGradient
+ r="19.990965"
+ id="radialGradient3628"
+ fx="31.988766"
+ fy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ cy="61.259193"
+ cx="31.988766"
+ xlink:href="#linearGradient3931"
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)" />
+ <filter
+ height="1.5162802"
+ id="filter3712"
+ y="-0.25814009"
+ width="1.2335186"
+ x="-0.11675928">
+ <feGaussianBlur
+ stdDeviation="2.4864777"
+ id="feGaussianBlur3714"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3746"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <linearGradient
+ id="linearGradient3766"
+ gradientUnits="userSpaceOnUse"
+ y2="412.13812"
+ x2="252.93071"
+ xlink:href="#linearGradient6075"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ y1="411.73941"
+ x1="277.4801" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ offset="0"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ id="stop5933-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5935-4" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5799-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5801-9" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ id="stop10496-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop10498-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ offset="0"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5543-2" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ id="stop5545-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ offset="0"
+ style="stop-color:#0093d9;stop-opacity:1"
+ id="stop5559-2" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5561-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop8319" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8321" />
+ </linearGradient>
+ <filter
+ height="1.233731"
+ id="filter9827-6"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729">
+ <feGaussianBlur
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5815-2" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ id="stop5817-7" />
+ </linearGradient>
+ <filter
+ height="1.3127669"
+ id="filter5917-1"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309">
+ <feGaussianBlur
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5807-1" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5809-7" />
+ </linearGradient>
+ <filter
+ height="1.4388067"
+ id="filter9847-4"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854">
+ <feGaussianBlur
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7586-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7588-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7733-4"
+ gradientUnits="userSpaceOnUse"
+ y2="595.06226"
+ x2="20.999998"
+ xlink:href="#linearGradient7584-8"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-0">
+ <rect
+ style="fill:url(#linearGradient7733-4);fill-opacity:1"
+ id="rect7731-9"
+ width="103.35121"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ offset="0"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ id="stop10556" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop10558" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ offset="0"
+ style="stop-color:#ababab;stop-opacity:1"
+ id="stop7810" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7812" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7361" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7363" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop6480" />
+ <stop
+ offset="1"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ id="stop6482" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6416" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6418" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5687" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5689" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop10568" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop10570" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ height="1.0124482"
+ id="filter8323"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496">
+ <feGaussianBlur
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5671" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5673" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5679" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5681" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5567" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5569" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ offset="0"
+ style="stop-color:#898989;stop-opacity:1"
+ id="stop7578" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7580" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8483" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop8485" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7574"
+ gradientUnits="userSpaceOnUse"
+ y2="460.97229"
+ x2="596.48529"
+ xlink:href="#linearGradient8481"
+ gradientTransform="translate(0,-337)"
+ y1="416.72614"
+ x1="596.48529" />
+ <mask
+ id="mask7570">
+ <rect
+ style="fill:url(#linearGradient7574);fill-opacity:1"
+ id="rect7572"
+ width="86"
+ y="60.362179"
+ x="536"
+ height="111" />
+ </mask>
+ <linearGradient
+ id="linearGradient6392"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7453"
+ gradientUnits="userSpaceOnUse"
+ y2="19.512289"
+ x2="46.277946"
+ xlink:href="#linearGradient7576"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="49.1087"
+ x1="33.149971" />
+ <linearGradient
+ id="linearGradient7455"
+ gradientUnits="userSpaceOnUse"
+ y2="30.312105"
+ x2="34.585835"
+ xlink:href="#linearGradient5573"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="44.46735"
+ x1="21.322929" />
+ <linearGradient
+ id="linearGradient7457"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="51.641129"
+ x1="17.246363" />
+ <linearGradient
+ id="linearGradient7459"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7461"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7463"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7465"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7467"
+ gradientUnits="userSpaceOnUse"
+ y2="30.0221"
+ x2="42.382099"
+ xlink:href="#linearGradient5685"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ y1="42.648251"
+ x1="42.074207" />
+ <linearGradient
+ id="linearGradient7469"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6414"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7471"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7473"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6398"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7475"
+ gradientUnits="userSpaceOnUse"
+ y2="141.11491"
+ x2="603.48352"
+ xlink:href="#linearGradient6414"
+ gradientTransform="translate(0,-29.000003)"
+ y1="145.48944"
+ x1="603.48352" />
+ <linearGradient
+ id="linearGradient7477"
+ gradientUnits="userSpaceOnUse"
+ y2="35.376236"
+ x2="44.599358"
+ xlink:href="#linearGradient6478"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ y1="36.09766"
+ x1="41.126476" />
+ <linearGradient
+ id="linearGradient7479"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ y1="36.17104"
+ x1="53.072731" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7481"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7483"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7485"
+ gradientUnits="userSpaceOnUse"
+ y2="37.98819"
+ x2="17.47529"
+ xlink:href="#linearGradient7808"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="27.37009"
+ x1="37.260498" />
+ <linearGradient
+ id="linearGradient7487"
+ gradientUnits="userSpaceOnUse"
+ y2="33.722939"
+ x2="20.776503"
+ xlink:href="#linearGradient5573"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="46.597134"
+ x1="27.247866" />
+ <linearGradient
+ id="linearGradient7489"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="50.84045"
+ x1="16.030468" />
+ <linearGradient
+ id="linearGradient7491"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7493"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7495"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7497"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7499"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient10554"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.527008"
+ x1="48.126881" />
+ <linearGradient
+ id="linearGradient7501"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7503"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7505"
+ gradientUnits="userSpaceOnUse"
+ y2="144.12111"
+ x2="603.7171"
+ xlink:href="#linearGradient6414"
+ y1="140.36218"
+ x1="603.25" />
+ <linearGradient
+ id="linearGradient7507"
+ gradientUnits="userSpaceOnUse"
+ y2="36.286098"
+ x2="40.255276"
+ xlink:href="#linearGradient6478"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.187798"
+ x1="45.470558" />
+ <linearGradient
+ id="linearGradient7509"
+ gradientUnits="userSpaceOnUse"
+ y2="33.083126"
+ x2="37.686401"
+ xlink:href="#linearGradient5565"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ y1="35.072224"
+ x1="55.874207" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7511"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7513"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7515"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7517"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7519"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <linearGradient
+ id="linearGradient7521"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7523"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient8317"
+ y1="70.580994"
+ x1="802.88586" />
+ <linearGradient
+ id="linearGradient7525"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7527"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7529"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <linearGradient
+ id="linearGradient7531"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1"
+ y1="35.501328"
+ x1="-50.000641" />
+ <linearGradient
+ id="linearGradient7533"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <linearGradient
+ id="linearGradient7535"
+ gradientUnits="userSpaceOnUse"
+ y2="69.928268"
+ x2="-32.08812"
+ xlink:href="#linearGradient5813-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="73.162025"
+ x1="-31.529013" />
+ <linearGradient
+ id="linearGradient7537"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7539"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient5931-9"
+ y1="67.561554"
+ x1="806.19238" />
+ <linearGradient
+ id="linearGradient7541"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7543"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7545"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <linearGradient
+ id="linearGradient7547"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1"
+ y1="35.501328"
+ x1="-50.000641" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7549"
+ fx="-9.7009583"
+ fy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ cy="49.478912"
+ cx="-9.7009583"
+ xlink:href="#linearGradient5541-2"
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7551"
+ fx="544.67078"
+ fy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ cy="121.54527"
+ cx="544.67078"
+ xlink:href="#linearGradient10494-6"
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7553"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7555"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendZ"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5723"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5720"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Lstart"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4722"
+ transform="scale(1.1) translate(1,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4728"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow1Mend"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refX="0.0">
+ <path
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;"
+ id="path4713"
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2Mend"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;"
+ id="path4731"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="marker13197"
+ style="overflow:visible">
+ <path
+ id="path13100"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(-0.4)" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1"
+ id="rect7572-2-4"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-6"
+ id="linearGradient7574-6-8"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5-6">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2-5"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5-4">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5-9"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15362" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15364" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9-0">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0-4"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15383" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15385" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15394" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15396" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient12764-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12766-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15405" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15407" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12768-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-3" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12770-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15416" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15418" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8"
+ id="linearGradient12772-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0-8" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient12774-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop15427" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15429" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12776-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15434" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15436" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient12778-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15441" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15443" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15445">
+ <feGaussianBlur
+ id="feGaussianBlur15447"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient12780-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15452" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15454" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter15456">
+ <feGaussianBlur
+ id="feGaussianBlur15458"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12782-6"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15463" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15465" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15467">
+ <feGaussianBlur
+ id="feGaussianBlur15469"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient12784-4"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15474" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15476" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4"
+ id="linearGradient12786-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7-7" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12788-0"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15485" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15487" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15489">
+ <feGaussianBlur
+ id="feGaussianBlur15491"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient12790-5"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15496" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15498" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient12792-4"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15503" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15505" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient12794-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15510" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop15512" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient12796-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15517" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15519" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4-3">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7-8"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12798-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15526" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15528" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12800-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15533" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15535" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12802-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15540" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15542" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient12804-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15547" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15549" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ style="fill:url(#linearGradient7733-2);fill-opacity:1"
+ id="rect7731-2"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-0"
+ id="linearGradient7733-2"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-43">
+ <feGaussianBlur
+ id="feGaussianBlur9849-2"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-5">
+ <feGaussianBlur
+ id="feGaussianBlur5919-6"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-2">
+ <feGaussianBlur
+ id="feGaussianBlur9829-3"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16020" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16022" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-2">
+ <feGaussianBlur
+ id="feGaussianBlur10670-8"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-0">
+ <feGaussianBlur
+ id="feGaussianBlur8393-0"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter16044">
+ <feGaussianBlur
+ id="feGaussianBlur16046"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16051" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop16053" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter16055">
+ <feGaussianBlur
+ id="feGaussianBlur16057"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16066" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16068" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop16077" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16079" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16084" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16086" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16091" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16093" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16095">
+ <feGaussianBlur
+ id="feGaussianBlur16097"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16102" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16104" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16106">
+ <feGaussianBlur
+ id="feGaussianBlur16108"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16113" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16115" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16120" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16122" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-8">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16133" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16135" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ style="fill:url(#linearGradient7733-7);fill-opacity:1"
+ id="rect7731-0"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-00"
+ id="linearGradient7733-7"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-54" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-44">
+ <feGaussianBlur
+ id="feGaussianBlur9849-0"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-3">
+ <feGaussianBlur
+ id="feGaussianBlur5919-8"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-1">
+ <feGaussianBlur
+ id="feGaussianBlur9829-4"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17379" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17381" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-8" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-4">
+ <feGaussianBlur
+ id="feGaussianBlur10670-9"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-8">
+ <feGaussianBlur
+ id="feGaussianBlur8393-3"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter17403">
+ <feGaussianBlur
+ id="feGaussianBlur17405"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17410" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop17412" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter17414">
+ <feGaussianBlur
+ id="feGaussianBlur17416"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-71" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17425" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17427" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-52" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400-7" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17444" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17446" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17448">
+ <feGaussianBlur
+ id="feGaussianBlur17450"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17455" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17457" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17459">
+ <feGaussianBlur
+ id="feGaussianBlur17461"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop17466" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop17468" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17473" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17475" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17486" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17488" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2"
+ id="linearGradient17846"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3"
+ id="linearGradient17848"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3"
+ id="linearGradient17850"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-0"
+ id="linearGradient17852"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-7"
+ id="radialGradient17854"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9"
+ id="radialGradient17856"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6"
+ id="linearGradient17858"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2"
+ id="linearGradient17860"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-2"
+ id="linearGradient17862"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3"
+ id="linearGradient17864"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-0"
+ id="linearGradient17866"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-4"
+ id="linearGradient17868"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2"
+ id="radialGradient17870"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9"
+ id="radialGradient17872"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6"
+ id="linearGradient17874"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2"
+ id="radialGradient17876"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9"
+ id="radialGradient17878"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1"
+ id="radialGradient17880"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1"
+ id="radialGradient17882"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9"
+ id="linearGradient17958"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient17960"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient17962"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient17964"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient17966"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient17968"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient17970"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1"
+ id="linearGradient17972"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient17974"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient17976"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1"
+ id="linearGradient17978"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient17980"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutMk"
+ style="overflow:visible">
+ <path
+ id="path19935"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21675"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21677"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21679"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21681"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21683"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21685"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21687"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21689"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21691"
+ xlink:href="#linearGradient5813-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21693"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21695"
+ xlink:href="#linearGradient5931-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21697"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21699"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21701"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient21703"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21705"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21707"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21709"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient21711"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-6"
+ style="overflow:visible">
+ <path
+ id="path19935-0"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-8"
+ style="overflow:visible">
+ <path
+ id="path19935-2"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0-7" />
+ </linearGradient>
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22462"
+ xlink:href="#linearGradient7576-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22464"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22466"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22468"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22470"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22472"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22474"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22476"
+ xlink:href="#linearGradient5685-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22478"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22480"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22482"
+ xlink:href="#linearGradient6398-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22484"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22486"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22488"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22490"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22492"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22494"
+ xlink:href="#linearGradient7808-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22496"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22498"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22500"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22502"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22504"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22506"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22508"
+ xlink:href="#linearGradient10554-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22510"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22512"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22514"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22516"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22518"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22520"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22522"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22524"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22526"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22528"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22530"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22532"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22534"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22536"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22538"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22540"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22542"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22544"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22546"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22548"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22550"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22552"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22554"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22556"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22558"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22560"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22562"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22564"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22566"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22568"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22570"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22572"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22574"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22576"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22578"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22580"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22582"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22584"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22586"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22588"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22590"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22592"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22594"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22596"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22598"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22600"
+ xlink:href="#linearGradient5557"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22602"
+ xlink:href="#linearGradient5541"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22604"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22606"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22608"
+ xlink:href="#linearGradient5805"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22610"
+ xlink:href="#linearGradient5813"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22612"
+ xlink:href="#linearGradient8317-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22614"
+ xlink:href="#linearGradient5931"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22616"
+ xlink:href="#linearGradient6398"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22618"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22620"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22622"
+ xlink:href="#linearGradient5797"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22624"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22626"
+ xlink:href="#linearGradient10494"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22628"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22630"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22632"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22634"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22636"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22638"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22640"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22642"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22644"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22646"
+ xlink:href="#linearGradient5805-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22648"
+ xlink:href="#linearGradient5813-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22650"
+ xlink:href="#linearGradient8317-3-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22652"
+ xlink:href="#linearGradient5931-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22654"
+ xlink:href="#linearGradient5557-8"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22656"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22658"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22660"
+ xlink:href="#linearGradient5797-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22662"
+ xlink:href="#linearGradient5541-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22664"
+ xlink:href="#linearGradient10494-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22666"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22668"
+ xlink:href="#linearGradient7359-4-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="-130.55569"
+ x2="188"
+ y1="-130.55569"
+ x1="71"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22670"
+ xlink:href="#linearGradient5573"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="-130.55569"
+ x2="188"
+ y1="-130.55569"
+ x1="71"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22672"
+ xlink:href="#linearGradient5573-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="-130.55569"
+ x2="188"
+ y1="-130.55569"
+ x1="71"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22674"
+ xlink:href="#linearGradient5573-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22700"
+ xlink:href="#linearGradient7484-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22702"
+ xlink:href="#lg1900-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22704"
+ xlink:href="#XMLID_419_-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22706"
+ xlink:href="#linearGradient7322-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22750"
+ xlink:href="#linearGradient7484-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22752"
+ xlink:href="#lg1900-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22754"
+ xlink:href="#XMLID_419_-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22756"
+ xlink:href="#linearGradient7322-1"
+ inkscape:collect="always" />
+ <marker
+ inkscape:stockid="marker13197Y"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="marker13197Y"
+ style="overflow:visible">
+ <path
+ id="path7016"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ transform="scale(-0.4)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMkM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutMkM"
+ style="overflow:visible">
+ <path
+ id="path7019"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9"
+ transform="scale(0.4)" />
+ </marker>
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ transform="translate(-33.785574,76.85193)"
+ id="layer1"
+ inkscape:groupmode="layer"
+ inkscape:label="Layer 1">
+ <g
+ transform="translate(20.785574,15.148096)"
+ id="g1758">
+ <g
+ inkscape:label="Layer 1"
+ id="layer1-8"
+ style="display:inline"
+ transform="translate(-204.5471,-8.3623809)">
+ <g
+ id="g51234">
+ <g
+ transform="matrix(0.62176164,0,0,0.63869205,-1.43037,115.35275)"
+ id="g23480">
+ <rect
+ style="fill:url(#black-spots);fill-opacity:1;stroke:#000000;stroke-width:6.34749365;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="rect22758"
+ width="575.39099"
+ height="268.39102"
+ x="500.35156"
+ y="-315.88885" />
+ <rect
+ y="-312.49783"
+ x="502.35156"
+ height="263"
+ width="570"
+ id="rect23478"
+ style="opacity:0.61946902;fill:#ffffff;fill-opacity:1;stroke:none" />
+ </g>
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314"
+ y="5244.3931"
+ x="4432.2417"
+ ry="24.171429"
+ rx="60.428574"
+ height="24.171429"
+ width="0" />
+ <g
+ id="g8484-6"
+ transform="translate(5731.7105,647.6564)" />
+ <g
+ style="fill:#ffffff"
+ id="g6374-4"
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)" />
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-1"
+ y="672.71167"
+ x="5640.6602"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ id="g4596-3"
+ mask="url(#mask4631-8)"
+ style="opacity:0.30729232"
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)" />
+ <g
+ id="g3002-33"
+ transform="translate(5456.1995,2052.0684)" />
+ <g
+ id="g4898-8"
+ transform="translate(5291.6877,1428.7067)">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ id="g3002-4"
+ transform="translate(6200.2995,1255.4254)" />
+ <g
+ id="g4898-9"
+ transform="translate(6035.7875,632.0634)">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ x="5721.2646"
+ y="1713.0334"
+ id="text19594"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="5721.2646"
+ y="1713.0334"
+ id="tspan19596" /></text>
+ <g
+ id="g3002-3"
+ transform="translate(6137.2995,1486.4253)" />
+ <g
+ id="g4898-2"
+ transform="translate(5972.7875,863.0634)">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ id="g21694"
+ transform="translate(5002.2995,1054.4254)">
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text21702"
+ y="658.60797"
+ x="321.965"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan21704"
+ y="658.60797"
+ x="321.965" /></text>
+ </g>
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-3"
+ y="1739.5555"
+ x="6394.4658"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ transform="translate(539.98213,665.63497)"
+ id="g3002-35" />
+ <g
+ transform="translate(375.47031,42.27285)"
+ id="g4898-37">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ transform="translate(321.48515,123.56711)"
+ id="g3002-4-44" />
+ <g
+ transform="translate(156.97333,-499.79501)"
+ id="g4898-3">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ transform="translate(4.49242,441.24827)"
+ id="g9694" />
+ <g
+ transform="translate(-160.01938,-182.11385)"
+ id="g9696">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ transform="translate(531.70846,712.31515)"
+ id="g11586" />
+ <g
+ transform="translate(367.19664,88.95298)"
+ id="g11591">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ transform="translate(945.16259,126.17676)"
+ id="g13960" />
+ <g
+ transform="translate(780.65077,-497.18536)"
+ id="g13962">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ id="g6425"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ style="fill:#5c3566" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ x="902.75421"
+ y="196.70628"
+ id="text13535"><tspan
+ sodipodi:role="line"
+ id="tspan13537"
+ x="902.75421"
+ y="196.70628" /></text>
+ <g
+ id="g4113"
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)" />
+ <g
+ id="g6262"
+ transform="translate(-2126.5044,28.9977)" />
+ <g
+ style="display:inline"
+ id="g8866-7"
+ transform="matrix(-0.6631863,0,0,0.67913371,569.98149,-371.92372)">
+ <g
+ style="opacity:0.15161288"
+ id="g8868-3"
+ mask="url(#mask7729-5)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path8870-0"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path8872-2"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21675);fill-opacity:1"
+ id="path8874-5"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path8876-0"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ id="path8878-7"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path8880-0"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21677)"
+ id="path8882-2"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient21679);fill-opacity:1"
+ id="polygon8884-7"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21681);fill-opacity:1"
+ id="path8886-9"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient21683);fill-opacity:1;stroke:url(#radialGradient21685);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path8888-0"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21687);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path8890-0"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g8892-6"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path8894-4"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path8896-1"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21689);fill-opacity:1"
+ id="path8898-5"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path8900-1"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21691);fill-opacity:1"
+ id="path8902-2"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path8904-9"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21693)"
+ id="path8906-7"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient21695);fill-opacity:1"
+ id="polygon8908-0"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21697);fill-opacity:1"
+ id="path8910-6"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient21699);fill-opacity:1;stroke:url(#radialGradient21701);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path8912-3"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient21703);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path8914-6"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient21705);fill-opacity:1;stroke:url(#radialGradient21707);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ id="path8916-3"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g8918-6"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient21709);fill-opacity:1"
+ id="path8920-7"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient21711);fill-opacity:1"
+ id="path8922-6"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <g
+ id="g7496-0"
+ transform="matrix(0.23376094,0,0,0.15766672,1027.4948,-175.19334)">
+ <use
+ height="700"
+ x="0"
+ xlink:href="#g7452-5"
+ y="0"
+ transform="translate(0,73)"
+ width="1000"
+ id="use7494-5" />
+ <g
+ id="g7452-5"
+ transform="matrix(0.8937066,0,0,0.8937066,-85.24089,192.26027)">
+ <g
+ id="g7454-3"
+ transform="matrix(7.659747,0,0,7.659747,-3413.2328,-6201.7396)">
+ <g
+ id="g7456-3"
+ transform="matrix(1.0634304,0,0,1.1520362,59.093881,903.66323)">
+ <path
+ d="m 1622.8438,458.84375 c -56.3324,0 -102.0313,23.48139 -102.0313,52.46875 0,0.33975 0.019,0.69303 0.031,1.03125 l -3.5,0 0,42.96875 c -10e-5,29.96809 47.2617,54.25 105.5,54.25 58.2382,2e-5 105.4062,-24.28191 105.4062,-54.25 l 0,-42.96875 -3.5,0 c 0.013,-0.33822 0.031,-0.6915 0.031,-1.03125 10e-5,-28.98736 -45.605,-52.46875 -101.9374,-52.46875 z"
+ id="path14856-1"
+ style="fill:#000000;fill-opacity:1;filter:url(#filter3605-3)"
+ transform="matrix(0.1373667,0,0,0.1268015,-199.43287,-50.397161)"
+ inkscape:connector-curvature="0" />
+ <path
+ id="path7458-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ style="fill:url(#linearGradient22750)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 23.078104,27.161102 c 8,0 14.457158,-3.08 14.457158,-6.88 l 0,-5.446791 c -1.375602,3.076004 -8.175744,5.672238 -13.851796,7.231897 0.04822,1.262713 -8.605362,5.094894 -0.605362,5.094894 z"
+ id="path7460-5"
+ style="fill:url(#linearGradient22752);filter:url(#filter7696-0)"
+ clip-path="url(#clipPath17035-6)"
+ inkscape:connector-curvature="0" />
+ <path
+ id="path7462-7"
+ d="m 37.97,14.568887 c 0,3.8 -6.48,6.88 -14.48,6.88 -8,0 -14.49,-3.08 -14.49,-6.88 0,-3.8 6.49,-6.8800005 14.49,-6.8800005 8,0 14.48,3.0800005 14.48,6.8800005 z"
+ style="fill:url(#linearGradient22754)"
+ inkscape:connector-curvature="0" />
+ <path
+ id="path7464-2"
+ d="m 37.728925,14.725637 c 0,3.705803 -6.319369,6.709453 -14.12106,6.709453 -7.80169,0 -14.1308116,-3.00365 -14.1308116,-6.709453 0,-3.705802 6.3291216,-6.709455 14.1308116,-6.709455 7.801691,0 14.12106,3.003653 14.12106,6.709455 z"
+ style="opacity:0.68983956;fill:none;stroke:url(#radialGradient22756);stroke-width:0.57768553;stroke-miterlimit:4;stroke-opacity:1;filter:url(#filter3968-6)"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ </g>
+ <use
+ height="700"
+ x="0"
+ xlink:href="#g7452-5"
+ y="0"
+ transform="translate(0,-79.242113)"
+ width="1000"
+ id="use5130-1" />
+ </g>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text21940"
+ y="34.30666"
+ x="594.46899"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:center;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="34.30666"
+ x="594.46899"
+ id="tspan21942"
+ sodipodi:role="line">LDAP</tspan><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="48.706657"
+ x="594.46899"
+ sodipodi:role="line"
+ id="tspan8613">client</tspan></text>
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,366.88733,-374.95875)"
+ id="g4892">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729)"
+ id="g4894"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4896"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path4898"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path4900"
+ style="fill:url(#linearGradient5370);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4902"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path4904"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path4906"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path4908"
+ style="fill:url(#linearGradient5372)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon4910"
+ style="fill:url(#linearGradient5374);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path4912"
+ style="fill:url(#linearGradient5376);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path4914"
+ style="opacity:0.62254902;fill:url(#radialGradient5378);fill-opacity:1;stroke:url(#radialGradient5380);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4916"
+ style="fill:url(#linearGradient5382);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g4918">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4920"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path4922"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path4924"
+ style="fill:url(#linearGradient5384);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4926"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path4928"
+ style="fill:url(#linearGradient5386);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path4930"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path4932"
+ style="fill:url(#linearGradient5388)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon4934"
+ style="fill:url(#linearGradient5390);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path4936"
+ style="fill:url(#linearGradient5392);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path4938"
+ style="opacity:0.96825412;fill:url(#radialGradient5394);fill-opacity:1;stroke:url(#radialGradient5396);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path4940"
+ style="fill:url(#linearGradient5398);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path4942"
+ style="opacity:0.71957703;fill:url(#radialGradient5400);fill-opacity:1;stroke:url(#radialGradient5402);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g4944">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path4946"
+ style="opacity:0.680851;fill:url(#radialGradient5404);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path4948"
+ style="fill:url(#radialGradient5406);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <path
+ style="stroke-linejoin:miter;marker-end:url(#TriangleOutMkM);stroke-opacity:1;marker-start:url(#marker13197Y);stroke-dashoffset:0;stroke:#0093d9;stroke-linecap:butt;stroke-miterlimit:4;stroke-dasharray:none;stroke-width:3;fill:none"
+ d="m 465.84232,-22.693335 85.0537,-1"
+ id="path17982"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text21940-7"
+ y="28.743378"
+ x="389.25806"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:center;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:middle;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="28.743378"
+ x="389.25806"
+ sodipodi:role="line"
+ id="tspan8613-1">Directory</tspan><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="43.143379"
+ x="389.25806"
+ sodipodi:role="line"
+ id="tspan8641">Server</tspan></text>
+ </g>
+ </g>
+ <g
+ id="layer2"
+ inkscape:label="sdfsdf"
+ style="display:none"
+ transform="translate(-204.5471,-8.3623809)">
+ <rect
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate"
+ id="rect26435"
+ width="1620"
+ height="951.42859"
+ x="-308.57144"
+ y="92.362144"
+ ry="26.574863"
+ rx="26.574863" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/krb-ticket-policy.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/krb-ticket-policy.png
new file mode 100644
index 0000000..1b6da73
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/krb-ticket-policy.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-krb.svg b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-krb.svg
new file mode 100644
index 0000000..c16da93
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-krb.svg
@@ -0,0 +1,15586 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-krb.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-ldap.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="-180.89561"
+ inkscape:cy="273.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="layer1-8"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#pattern6599"
+ id="pattern6964"
+ patternTransform="matrix(0.455007,0,0,0.455007,-358.50001,126.15346)" />
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#black-spots-2"
+ id="pattern6599"
+ patternTransform="matrix(0.455007,0,0,0.455007,-840.50001,-112.84654)" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4778"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4778-7"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4754-8"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22752-1"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient22706-9"
+ xlink:href="#linearGradient7322-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22704-6"
+ xlink:href="#XMLID_419_-7-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22702-8"
+ xlink:href="#lg1900-1-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22700-7"
+ xlink:href="#linearGradient7484-3-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient22616"
+ xlink:href="#linearGradient6398-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient5573-1-3-1">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3-9-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0-7-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-7">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-3-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-0-5" />
+ </linearGradient>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-8-2"
+ style="overflow:visible">
+ <path
+ id="path19935-2-6"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0"
+ refX="0"
+ id="TriangleOutMk-6-6"
+ style="overflow:visible">
+ <path
+ id="path19935-0-4"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ transform="scale(0.4,0.4)"
+ inkscape:connector-curvature="0" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutMk"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutMk-1"
+ style="overflow:visible">
+ <path
+ id="path19935-01"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4-0"
+ id="linearGradient17980-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1-3"
+ id="linearGradient17978-8"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient17976-1"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4-0"
+ id="linearGradient17974-7"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1-0"
+ id="linearGradient17972-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6-5"
+ id="linearGradient17970-7"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient17968-4"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4-1"
+ id="linearGradient17966-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3-8"
+ id="linearGradient17964-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient17962-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3-5"
+ id="linearGradient17960-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9-3"
+ id="linearGradient17958-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1-2"
+ id="radialGradient17882-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-1-2"
+ id="radialGradient17880-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9-8"
+ id="radialGradient17878-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2-3"
+ id="radialGradient17876-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6-9"
+ id="linearGradient17874-4"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9-8"
+ id="radialGradient17872-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-2-3"
+ id="radialGradient17870-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-4-9"
+ id="linearGradient17868-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-0-0"
+ id="linearGradient17866-0"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3-8"
+ id="linearGradient17864-6"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-2-7"
+ id="linearGradient17862-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2-8"
+ id="linearGradient17860-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-6-9"
+ id="linearGradient17858-0"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-9-8"
+ id="radialGradient17856-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-7-4"
+ id="radialGradient17854-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-0-5"
+ id="linearGradient17852-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3-8"
+ id="linearGradient17850-7"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-3-8"
+ id="linearGradient17848-2"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-2-8"
+ id="linearGradient17846-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ id="linearGradient17484-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17486-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17488-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359-4-1-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-5-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-5-5" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-2-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient17471-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17473-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17475-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17464-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop17466-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop17468-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17459-8">
+ <feGaussianBlur
+ id="feGaussianBlur17461-0"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17455-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17457-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter17448-1">
+ <feGaussianBlur
+ id="feGaussianBlur17450-4"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17442-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop17444-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop17446-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-6-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-8-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4-9">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400-7-0" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402-8-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-52-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-3-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17425-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17427-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5813-2-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-6-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-71-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter17414-8">
+ <feGaussianBlur
+ id="feGaussianBlur17416-6"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17410-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop17412-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter17403-6">
+ <feGaussianBlur
+ id="feGaussianBlur17405-8"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-8-2">
+ <feGaussianBlur
+ id="feGaussianBlur8393-3-4"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-5-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-0-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-4-4">
+ <feGaussianBlur
+ id="feGaussianBlur10670-9-5"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-9-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-3-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-8-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-5-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-0-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-9-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-5-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop17379-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop17381-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317-3-3-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-0-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-4-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-1-0">
+ <feGaussianBlur
+ id="feGaussianBlur9829-4-3"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-3-6">
+ <feGaussianBlur
+ id="feGaussianBlur5919-8-5"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-5-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-0-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-44-6">
+ <feGaussianBlur
+ id="feGaussianBlur9849-0-7"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-00-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-54-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-3-6" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-00-1"
+ id="linearGradient7733-7-1"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-57-0">
+ <rect
+ style="fill:url(#linearGradient7733-7-1);fill-opacity:1"
+ id="rect7731-0-8"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ id="linearGradient16131-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16133-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16135-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359-4-2-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-0-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-8-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-8-9">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-4-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient16118-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16120-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16122-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16111-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16113-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16115-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16106-8">
+ <feGaussianBlur
+ id="feGaussianBlur16108-0"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16102-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16104-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter16095-9">
+ <feGaussianBlur
+ id="feGaussianBlur16097-2"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16089-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop16091-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop16093-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16084-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop16086-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop16077-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop16079-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-8-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-0-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16066-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16068-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5813-8-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-5-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-4-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter16055-7">
+ <feGaussianBlur
+ id="feGaussianBlur16057-0"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16051-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop16053-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter16044-0">
+ <feGaussianBlur
+ id="feGaussianBlur16046-2"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-0-6">
+ <feGaussianBlur
+ id="feGaussianBlur8393-0-4"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-4-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-6-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-2-3">
+ <feGaussianBlur
+ id="feGaussianBlur10670-8-4"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-0-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-4-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-1-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-9-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-9-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-1-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-8-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop16020-7" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop16022-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317-3-9-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-1-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-1-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-2-9">
+ <feGaussianBlur
+ id="feGaussianBlur9829-3-7"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-5-2">
+ <feGaussianBlur
+ id="feGaussianBlur5919-6-5"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-8-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-1-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-43-8">
+ <feGaussianBlur
+ id="feGaussianBlur9849-2-2"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-0-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-5-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-0-4" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-0-5"
+ id="linearGradient7733-2-8"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-5-6">
+ <rect
+ style="fill:url(#linearGradient7733-2-8);fill-opacity:1"
+ id="rect7731-2-8"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ id="linearGradient15545-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15547-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15549-9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12804-8-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15538-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15540-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15542-6" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12802-6-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15531-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15533-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15535-7" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12800-5-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15524-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15526-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15528-1" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12798-0-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4-3-8">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7-8-3"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15515-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15517-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15519-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12796-7-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <linearGradient
+ id="linearGradient15508-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15510-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop15512-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1-0"
+ id="linearGradient12794-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ id="linearGradient15501-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15503-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15505-3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4-0"
+ id="linearGradient12792-4-2"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ id="linearGradient15494-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15496-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15498-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6-5"
+ id="linearGradient12790-5-7"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15489-6">
+ <feGaussianBlur
+ id="feGaussianBlur15491-3"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15483-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15485-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15487-0" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12788-0-6"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ id="linearGradient10554-1-4-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8-3-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7-7-5" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4-5"
+ id="linearGradient12786-7-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient15472-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop15474-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop15476-5" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6-5"
+ id="linearGradient12784-4-1"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15467-0">
+ <feGaussianBlur
+ id="feGaussianBlur15469-5"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15461-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15463-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15465-6" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12782-6-2"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter15456-0">
+ <feGaussianBlur
+ id="feGaussianBlur15458-7"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15450-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15452-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15454-9" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4-1"
+ id="linearGradient12780-2-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter15445-0">
+ <feGaussianBlur
+ id="feGaussianBlur15447-4"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15439-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15441-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15443-2" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3-8"
+ id="linearGradient12778-6-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ id="linearGradient15432-9">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15434-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15436-7" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12776-5-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ id="linearGradient15425-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop15427-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15429-8" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3-5"
+ id="linearGradient12774-7-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ id="linearGradient7808-7-8-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7-1-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0-8-4" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8-5"
+ id="linearGradient12772-2-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ id="linearGradient15414-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15416-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15418-1" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12770-2-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient7359-4-3-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-2-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-3-4" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3-6"
+ id="radialGradient12768-0-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient15403-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15405-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15407-4" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7-1"
+ id="linearGradient12766-1-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ id="linearGradient6478-4-1-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2-1-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6-9-1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1-0"
+ id="linearGradient12764-0-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ id="linearGradient15392-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15394-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop15396-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0-7-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3-2-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15383-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15385-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21-8-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9-7-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8-0-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7-5-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-6-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-1-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-5-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9-0-3">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0-4-2"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop15362-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop15364-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5-4-9">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5-9-0"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0-0-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7-2-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5-6-7">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2-5-0"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677-53-3-8">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2-7-1" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1-9-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1-5-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2-1-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4-4-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3-5-8" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3-8-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6-8-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481-3-6-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-5-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-1-2" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-6-4"
+ id="linearGradient7574-6-8-9"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <mask
+ id="mask7570-2-4-6">
+ <rect
+ style="fill:url(#linearGradient7574-6-8-9);fill-opacity:1"
+ id="rect7572-2-4-1"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <marker
+ inkscape:stockid="TriangleInM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="marker13197-9"
+ style="overflow:visible">
+ <path
+ id="path13100-4"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(-0.4)" />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2Mend-8"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;"
+ id="path4731-4"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow1Mend-1"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refX="0.0">
+ <path
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;"
+ id="path4713-6"
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart-1"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4728-2"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Lstart-3"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refX="0.0">
+ <path
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round"
+ id="path4722-3"
+ transform="scale(1.1) translate(1,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9-5"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5720-9"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendZ-7"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000"
+ id="path5723-2"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7555-8"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7553-7"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7551-2"
+ fx="544.67078"
+ fy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ cy="121.54527"
+ cx="544.67078"
+ xlink:href="#linearGradient10494-6-1"
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7549-2"
+ fx="-9.7009583"
+ fy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ cy="49.478912"
+ cx="-9.7009583"
+ xlink:href="#linearGradient5541-2-5"
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)" />
+ <linearGradient
+ id="linearGradient7547-4"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1-5"
+ y1="35.501328"
+ x1="-50.000641" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7545-7"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6-1"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7543-0"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2-5"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <linearGradient
+ id="linearGradient7541-7"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4-6"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <linearGradient
+ id="linearGradient7539-6"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient5931-9-6"
+ y1="67.561554"
+ x1="806.19238" />
+ <linearGradient
+ id="linearGradient7537-5"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317-35"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7535-5"
+ gradientUnits="userSpaceOnUse"
+ y2="69.928268"
+ x2="-32.08812"
+ xlink:href="#linearGradient5813-5-6"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="73.162025"
+ x1="-31.529013" />
+ <linearGradient
+ id="linearGradient7533-8"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <linearGradient
+ id="linearGradient7531-5"
+ gradientUnits="userSpaceOnUse"
+ y2="57.699898"
+ x2="-17.546682"
+ xlink:href="#linearGradient5797-1-5"
+ y1="35.501328"
+ x1="-50.000641" />
+ <radialGradient
+ r="15.172215"
+ id="radialGradient7529-7"
+ fx="548.88446"
+ fy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ cy="124.24792"
+ cx="548.88446"
+ xlink:href="#linearGradient10494-6-1"
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)" />
+ <radialGradient
+ r="9.4923868"
+ id="radialGradient7527-7"
+ fx="-11.992359"
+ fy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ cy="49.12331"
+ cx="-11.992359"
+ xlink:href="#linearGradient5541-2-5"
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)" />
+ <linearGradient
+ id="linearGradient7525-3"
+ gradientUnits="userSpaceOnUse"
+ y2="19.587532"
+ x2="-33.330555"
+ xlink:href="#linearGradient5557-4-6"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="64.869919"
+ x1="-33.330555" />
+ <linearGradient
+ id="linearGradient7523-2"
+ gradientUnits="userSpaceOnUse"
+ y2="57.769058"
+ x2="777.69415"
+ xlink:href="#linearGradient8317-35"
+ y1="70.580994"
+ x1="802.88586" />
+ <linearGradient
+ id="linearGradient7521-9"
+ gradientUnits="userSpaceOnUse"
+ y2="87.987663"
+ x2="553.82892"
+ xlink:href="#linearGradient8317-35"
+ y1="143.48891"
+ x1="498.3277" />
+ <linearGradient
+ id="linearGradient7519-1"
+ gradientUnits="userSpaceOnUse"
+ y2="66.058411"
+ x2="-33.10799"
+ xlink:href="#linearGradient5805-5-5"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ y1="68.874535"
+ x1="-32.349804" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7517-4"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7515-4"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7513-7"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7511-4"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7509-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.083126"
+ x2="37.686401"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ y1="35.072224"
+ x1="55.874207" />
+ <linearGradient
+ id="linearGradient7507-6"
+ gradientUnits="userSpaceOnUse"
+ y2="36.286098"
+ x2="40.255276"
+ xlink:href="#linearGradient6478-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.187798"
+ x1="45.470558" />
+ <linearGradient
+ id="linearGradient7505-8"
+ gradientUnits="userSpaceOnUse"
+ y2="144.12111"
+ x2="603.7171"
+ xlink:href="#linearGradient6414-6"
+ y1="140.36218"
+ x1="603.25" />
+ <linearGradient
+ id="linearGradient7503-7"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566-4"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7501-9"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7499-6"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient10554-6"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.527008"
+ x1="48.126881" />
+ <linearGradient
+ id="linearGradient7497-2"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566-4"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7495-1"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7493-4"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669-9"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7491-6"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677-6"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7489-5"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="50.84045"
+ x1="16.030468" />
+ <linearGradient
+ id="linearGradient7487-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.722939"
+ x2="20.776503"
+ xlink:href="#linearGradient5573-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="46.597134"
+ x1="27.247866" />
+ <linearGradient
+ id="linearGradient7485-8"
+ gradientUnits="userSpaceOnUse"
+ y2="37.98819"
+ x2="17.47529"
+ xlink:href="#linearGradient7808-73"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="27.37009"
+ x1="37.260498" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7483-3"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <radialGradient
+ r="8.3085051"
+ id="radialGradient7481-0"
+ fx="483.13071"
+ fy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ cy="264.64523"
+ cx="483.13071"
+ xlink:href="#linearGradient7359-8"
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)" />
+ <linearGradient
+ id="linearGradient7479-3"
+ gradientUnits="userSpaceOnUse"
+ y2="33.830193"
+ x2="35.096169"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ y1="36.17104"
+ x1="53.072731" />
+ <linearGradient
+ id="linearGradient7477-2"
+ gradientUnits="userSpaceOnUse"
+ y2="35.376236"
+ x2="44.599358"
+ xlink:href="#linearGradient6478-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ y1="36.09766"
+ x1="41.126476" />
+ <linearGradient
+ id="linearGradient7475-9"
+ gradientUnits="userSpaceOnUse"
+ y2="141.11491"
+ x2="603.48352"
+ xlink:href="#linearGradient6414-6"
+ gradientTransform="translate(0,-29.000003)"
+ y1="145.48944"
+ x1="603.48352" />
+ <linearGradient
+ id="linearGradient7473-9"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6398-1"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7471-3"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7469-0"
+ gradientUnits="userSpaceOnUse"
+ y2="124.13597"
+ x2="610.89215"
+ xlink:href="#linearGradient6414-6"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7467-8"
+ gradientUnits="userSpaceOnUse"
+ y2="30.0221"
+ x2="42.382099"
+ xlink:href="#linearGradient5685-2"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ y1="42.648251"
+ x1="42.074207" />
+ <linearGradient
+ id="linearGradient7465-8"
+ gradientUnits="userSpaceOnUse"
+ y2="113.69411"
+ x2="606.94116"
+ xlink:href="#linearGradient10566-4"
+ y1="103.70177"
+ x1="605.41681" />
+ <linearGradient
+ id="linearGradient7463-1"
+ gradientUnits="userSpaceOnUse"
+ y2="112.46191"
+ x2="601.25159"
+ xlink:href="#linearGradient5565-8"
+ y1="96.853073"
+ x1="599.35095" />
+ <linearGradient
+ id="linearGradient7461-5"
+ gradientUnits="userSpaceOnUse"
+ y2="28.369732"
+ x2="48.511173"
+ xlink:href="#linearGradient5669-9"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="33.643894"
+ x1="23.121851" />
+ <linearGradient
+ id="linearGradient7459-4"
+ gradientUnits="userSpaceOnUse"
+ y2="38.493023"
+ x2="13.912579"
+ xlink:href="#linearGradient5677-6"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="35.069866"
+ x1="19.892136" />
+ <linearGradient
+ id="linearGradient7457-1"
+ gradientUnits="userSpaceOnUse"
+ y2="25.829727"
+ x2="6.7207007"
+ xlink:href="#linearGradient5565-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="51.641129"
+ x1="17.246363" />
+ <linearGradient
+ id="linearGradient7455-8"
+ gradientUnits="userSpaceOnUse"
+ y2="30.312105"
+ x2="34.585835"
+ xlink:href="#linearGradient5573-8"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="44.46735"
+ x1="21.322929" />
+ <linearGradient
+ id="linearGradient7453-3"
+ gradientUnits="userSpaceOnUse"
+ y2="19.512289"
+ x2="46.277946"
+ xlink:href="#linearGradient7576-0"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ y1="49.1087"
+ x1="33.149971" />
+ <linearGradient
+ id="linearGradient6398-1">
+ <stop
+ offset="0"
+ style="stop-color:#333333;stop-opacity:1"
+ id="stop6400-1" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6402-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6392-5"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <mask
+ id="mask7570-0">
+ <rect
+ style="fill:url(#linearGradient7574-5);fill-opacity:1"
+ id="rect7572-0"
+ width="86"
+ y="60.362179"
+ x="536"
+ height="111" />
+ </mask>
+ <linearGradient
+ id="linearGradient7574-5"
+ gradientUnits="userSpaceOnUse"
+ y2="460.97229"
+ x2="596.48529"
+ xlink:href="#linearGradient8481-9"
+ gradientTransform="translate(0,-337)"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8483-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop8485-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-0">
+ <stop
+ offset="0"
+ style="stop-color:#898989;stop-opacity:1"
+ id="stop7578-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7580-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-8">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5575-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5577-03" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-8">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5567-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5569-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5679-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5681-0" />
+ </linearGradient>
+ <filter
+ id="filter8351-57">
+ <feGaussianBlur
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5671-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5673-70" />
+ </linearGradient>
+ <filter
+ height="1.0124482"
+ id="filter8323-9"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496">
+ <feGaussianBlur
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-1"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ id="filter10486-7">
+ <feGaussianBlur
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-4">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop10568-4" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop10570-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-2">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5687-0" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5689-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6416-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6418-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-8">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop6480-22" />
+ <stop
+ offset="1"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ id="stop6482-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7361-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7363-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-73">
+ <stop
+ offset="0"
+ style="stop-color:#ababab;stop-opacity:1"
+ id="stop7810-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7812-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-6">
+ <stop
+ offset="0"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ id="stop10556-9" />
+ <stop
+ offset="1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop10558-0" />
+ </linearGradient>
+ <filter
+ id="filter10534-6">
+ <feGaussianBlur
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-3"
+ inkscape:collect="always" />
+ </filter>
+ <mask
+ id="mask7729-0-2">
+ <rect
+ style="fill:url(#linearGradient7733-4-2);fill-opacity:1"
+ id="rect7731-9-3"
+ width="103.35121"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292" />
+ </mask>
+ <linearGradient
+ id="linearGradient7733-4-2"
+ gradientUnits="userSpaceOnUse"
+ y2="595.06226"
+ x2="20.999998"
+ xlink:href="#linearGradient7584-8-6"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ y1="539.95715"
+ x1="20.999998" />
+ <linearGradient
+ id="linearGradient7584-8-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7586-8-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7588-2-8" />
+ </linearGradient>
+ <filter
+ height="1.4388067"
+ id="filter9847-4-0"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854">
+ <feGaussianBlur
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-5-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5-5">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop5807-1-7" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5809-7-5" />
+ </linearGradient>
+ <filter
+ height="1.3127669"
+ id="filter5917-1-7"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309">
+ <feGaussianBlur
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-1-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5-6">
+ <stop
+ offset="0"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop5815-2-6" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ id="stop5817-7-9" />
+ </linearGradient>
+ <filter
+ height="1.233731"
+ id="filter9827-6-8"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729">
+ <feGaussianBlur
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-1-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-35">
+ <stop
+ offset="0"
+ style="stop-color:#cccccc;stop-opacity:1"
+ id="stop8319-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop8321-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4-6">
+ <stop
+ offset="0"
+ style="stop-color:#0093d9;stop-opacity:1"
+ id="stop5559-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5561-3-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2-5">
+ <stop
+ offset="0"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ id="stop5543-2-3" />
+ <stop
+ offset="1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ id="stop5545-1-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-6-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ id="stop10496-8-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop10498-5-2" />
+ </linearGradient>
+ <filter
+ id="filter10668-7-9">
+ <feGaussianBlur
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-6-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1-5">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5799-8-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5801-9-1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2-1">
+ <feGaussianBlur
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-7-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5931-9-6">
+ <stop
+ offset="0"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ id="stop5933-5-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5935-4-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3766-2"
+ gradientUnits="userSpaceOnUse"
+ y2="412.13812"
+ x2="252.93071"
+ xlink:href="#linearGradient6075-9"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ y1="411.73941"
+ x1="277.4801" />
+ <linearGradient
+ id="linearGradient3746-5"
+ gradientUnits="userSpaceOnUse"
+ y2="33.279999"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ x1="234.81" />
+ <filter
+ height="1.5162802"
+ id="filter3712-0"
+ y="-0.25814009"
+ width="1.2335186"
+ x="-0.11675928">
+ <feGaussianBlur
+ stdDeviation="2.4864777"
+ id="feGaussianBlur3714-7"
+ inkscape:collect="always" />
+ </filter>
+ <radialGradient
+ r="19.990965"
+ id="radialGradient3628-6"
+ fx="31.988766"
+ fy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ cy="61.259193"
+ cx="31.988766"
+ xlink:href="#linearGradient3931-4"
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)" />
+ <radialGradient
+ r="24"
+ id="radialGradient3626-3"
+ fx="948"
+ fy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ cy="209.00021"
+ cx="948"
+ xlink:href="#linearGradient7126-4" />
+ <linearGradient
+ id="linearGradient3624-6"
+ gradientUnits="userSpaceOnUse"
+ y2="41.366924"
+ x2="37.213612"
+ xlink:href="#linearGradient3534-7"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ y1="26.265114"
+ x1="37.213612" />
+ <linearGradient
+ id="linearGradient3622-0"
+ gradientUnits="userSpaceOnUse"
+ y2="39.879005"
+ x2="500.77838"
+ xlink:href="#linearGradient3335-6"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ y1="78.13385"
+ x1="500.77838" />
+ <radialGradient
+ r="20.016653"
+ id="radialGradient3620-3"
+ fx="29.256323"
+ fy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ cy="34.171967"
+ cx="29.256323"
+ xlink:href="#linearGradient7126-4"
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)" />
+ <linearGradient
+ id="linearGradient3618-8"
+ gradientUnits="userSpaceOnUse"
+ y2="151.51437"
+ x2="605.57886"
+ xlink:href="#linearGradient16859-3"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="158.12231"
+ x1="599.39917" />
+ <linearGradient
+ id="linearGradient3616-0"
+ gradientUnits="userSpaceOnUse"
+ y2="170.16"
+ x2="613.84003"
+ xlink:href="#x5002_-6"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="170.77318"
+ x1="600.74371" />
+ <linearGradient
+ id="linearGradient3614-3"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ xlink:href="#x5004_-2"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ y1="156.45"
+ x1="592.20001" />
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576-5"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-0"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient3574-3"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-79"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="linearGradient3570-7"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient2466-5"
+ gradientUnits="userSpaceOnUse"
+ y2="383.08859"
+ x2="246.338"
+ xlink:href="#linearGradient6075-9"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ y1="382.31308"
+ x1="294.08597" />
+ <linearGradient
+ id="linearGradient2462-1"
+ gradientUnits="userSpaceOnUse"
+ y2="371.83398"
+ x2="257.22992"
+ xlink:href="#linearGradient6075-9"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ y1="371.49814"
+ x1="277.90814" />
+ <linearGradient
+ id="linearGradient6596-6"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721-0"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient5934-9"
+ gradientUnits="userSpaceOnUse"
+ y2="264.5452"
+ x2="529.6897"
+ xlink:href="#linearGradient5721-0"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ y1="294.61005"
+ x1="529.6897" />
+ <linearGradient
+ id="linearGradient5932-7"
+ gradientUnits="userSpaceOnUse"
+ y2="311.5975"
+ x2="500.71109"
+ xlink:href="#linearGradient3518-3"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ y1="244.95538"
+ x1="500.71109" />
+ <filter
+ height="1.2029091"
+ id="filter5126-0"
+ y="-0.10145455"
+ x="-0.021882353"
+ width="1.0437647">
+ <feGaussianBlur
+ stdDeviation="1.1579412"
+ id="feGaussianBlur5128-4"
+ inkscape:collect="always" />
+ </filter>
+ <radialGradient
+ r="265"
+ id="radialGradient4153-2"
+ fx="146.23947"
+ fy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ cy="830.26575"
+ cx="146.23947"
+ xlink:href="#linearGradient3987-4-5"
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)" />
+ <linearGradient
+ id="x5004_-2"
+ gradientUnits="userSpaceOnUse"
+ y2="174.23"
+ x2="609.98999"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ y1="156.45"
+ x1="592.20001">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29157-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29159-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#FFFFFF" />
+ </linearGradient>
+ <linearGradient
+ id="x5002_-6"
+ gradientUnits="userSpaceOnUse"
+ x1="601.48999"
+ x2="613.84003"
+ y1="170.16"
+ y2="170.16">
+ <stop
+ offset="0"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ id="stop29134-3" />
+ <stop
+ offset="0.2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop29136-4" />
+ <stop
+ offset="1"
+ style="stop-color:#999999;stop-opacity:1"
+ id="stop29138-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#D9D9D9" />
+ <a:midPointStop
+ offset="0.20"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#FFFFFF" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#999999" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16859-3"
+ gradientUnits="userSpaceOnUse"
+ x1="592.31"
+ x2="609.32001"
+ y1="162.60001"
+ y2="145.59">
+ <stop
+ offset="0"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ id="stop16861-4" />
+ <stop
+ offset="1"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ id="stop16863-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#F2F2F2" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E5E5E5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126-4">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7128-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7130-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335-6">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3337-2" />
+ <stop
+ offset="1"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ id="stop3339-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3534-7">
+ <stop
+ offset="0"
+ style="stop-color:#888a85;stop-opacity:1"
+ id="stop3536-6" />
+ <stop
+ offset="1"
+ style="stop-color:#888a85;stop-opacity:0"
+ id="stop3538-0" />
+ </linearGradient>
+ <filter
+ height="1.2617458"
+ id="filter3605-7"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-77"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7484-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-5" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="lg1900-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-9">
+ <path
+ style="opacity:1;fill:#2e3436"
+ id="path17037-3"
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z" />
+ </clipPath>
+ <filter
+ height="1.3295043"
+ id="filter7696-4"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-4"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="XMLID_419_-79"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-8" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7322-0">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-0" />
+ </linearGradient>
+ <filter
+ id="filter3968-3">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931-4">
+ <stop
+ offset="0"
+ style="stop-color:#2e3436;stop-opacity:1"
+ id="stop3933-1" />
+ <stop
+ offset="1"
+ style="stop-color:#2e3436;stop-opacity:0"
+ id="stop3935-3" />
+ </linearGradient>
+ <filter
+ height="1.5828062"
+ id="filter16947-4"
+ y="-0.29140311"
+ x="-0.093153283"
+ width="1.1863066">
+ <feGaussianBlur
+ stdDeviation="1.5518534"
+ id="feGaussianBlur16949-5"
+ inkscape:collect="always" />
+ </filter>
+ <pattern
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)"
+ id="pattern18092-2"
+ xlink:href="#pattern2491-4" />
+ <pattern
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)"
+ id="pattern2491-4"
+ xlink:href="#pattern2509-3" />
+ <pattern
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)"
+ id="pattern2509-3"
+ xlink:href="#pattern6159-8" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)"
+ id="pattern6159-8"
+ xlink:href="#pattern4062-3-5" />
+ <pattern
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)"
+ id="pattern4062-3-5"
+ xlink:href="#pattern4015-1-0" />
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)"
+ id="pattern4015-1-0"
+ xlink:href="#white-spots-2-8" />
+ <pattern
+ height="32"
+ id="white-spots-2-8"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ width="32">
+ <g
+ inkscape:label="#g3035"
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot-3-4">
+ <path
+ style="opacity:0.3;fill:white"
+ id="path3033-3-8"
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z " />
+ </g>
+ </pattern>
+ <linearGradient
+ id="linearGradient3987-4-5">
+ <stop
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ id="stop3989-1-2" />
+ <stop
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ id="stop3991-1-4" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)"
+ id="pattern4156-6"
+ xlink:href="#pattern18092-2" />
+ <filter
+ height="1.8680604"
+ id="filter4009-5"
+ y="-0.43403015"
+ width="1.1872287"
+ x="-0.093614347">
+ <feGaussianBlur
+ stdDeviation="3.9786096"
+ id="feGaussianBlur4011-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3518-3">
+ <stop
+ offset="0"
+ style="stop-color:#000000;stop-opacity:1"
+ id="stop3520-8" />
+ <stop
+ offset="1"
+ style="stop-color:#000000;stop-opacity:0"
+ id="stop3522-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6075-9">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop6077-8" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop6079-8" />
+ </linearGradient>
+ <marker
+ style="overflow:visible"
+ id="TriangleInM-1"
+ refY="0"
+ orient="auto"
+ refX="0">
+ <path
+ transform="scale(-0.5,-0.5)"
+ style="fill:#555753"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ id="path4167-8" />
+ </marker>
+ <linearGradient
+ id="linearGradient5721-0">
+ <stop
+ offset="0"
+ style="stop-color:#ac0000;stop-opacity:1"
+ id="stop5723-2" />
+ <stop
+ offset="1"
+ style="stop-color:#f50606;stop-opacity:1"
+ id="stop5725-5" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)"
+ id="pattern18096-5"
+ xlink:href="#pattern4829-6" />
+ <pattern
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)"
+ id="pattern4829-6"
+ xlink:href="#pattern2505-2" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)"
+ id="pattern2505-2"
+ xlink:href="#pattern6248-9" />
+ <pattern
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)"
+ id="pattern6248-9"
+ xlink:href="#pattern3587-1" />
+ <pattern
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)"
+ id="pattern3587-1"
+ xlink:href="#pattern4704-5" />
+ <pattern
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)"
+ id="pattern4704-5"
+ xlink:href="#pattern4396-6" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)"
+ id="pattern4396-6"
+ xlink:href="#pattern4315-7" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)"
+ id="pattern4315-7"
+ xlink:href="#pattern4038-8" />
+ <pattern
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)"
+ id="pattern4038-8"
+ xlink:href="#black-spots-2" />
+ <pattern
+ height="32"
+ id="black-spots-2"
+ patternUnits="userSpaceOnUse"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ width="32">
+ <g
+ inkscape:label="#g3039"
+ transform="translate(-448.3997,-513.505)"
+ id="black-spot-2">
+ <path
+ style="opacity:0.1;fill:black"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path2961-7" />
+ </g>
+ </pattern>
+ <radialGradient
+ r="75"
+ id="radialGradient18146-6"
+ fx="55.217297"
+ fy="846.34479"
+ gradientUnits="userSpaceOnUse"
+ cy="846.42249"
+ cx="99.411484"
+ xlink:href="#linearGradient3579-7"
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)" />
+ <linearGradient
+ id="linearGradient3579-7">
+ <stop
+ offset="0"
+ style="stop-color:#555753;stop-opacity:1"
+ id="stop3581-1" />
+ <stop
+ offset="1"
+ style="stop-color:#555753;stop-opacity:0"
+ id="stop3583-0" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)"
+ id="pattern7559-5"
+ xlink:href="#pattern18096-5" />
+ <linearGradient
+ id="linearGradient4899-3"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5175-9"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5199-7"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5478-5"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-6"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <marker
+ style="overflow:visible"
+ id="Arrow2Mstart9v-0"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9"
+ id="path10095-5"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-6"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3570-1-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3-8"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient7484-3-8"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-8" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5372-3-3"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1-53"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-1-53"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-6-7">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-1"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-92"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient3574-1-5"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7-9"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="XMLID_419_-7-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-0" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-82" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient3576-6-6"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1-4"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient7322-1-4">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-09" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-7">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4453-3"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4455-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4457-9"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3-8"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient4459-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4461-1" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4463-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4465-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4467-1"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1-53"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4469-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4471-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4473-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath4475-3">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4477-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4479-6"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4481-6"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4483-6"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7-9"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="linearGradient4485-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4487-8" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4489-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4491-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4493-0"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1-4"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4495-7">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4497-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4499-8" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4501-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4503-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter4505-0"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur4507-4"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4509-8"
+ gradientUnits="userSpaceOnUse"
+ y2="33.29771"
+ x2="212.93233"
+ xlink:href="#linearGradient7484-3-8"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="33.29771"
+ x1="231.07658" />
+ <linearGradient
+ id="linearGradient4511-7"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop4513-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop4515-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4517-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4519-9"
+ gradientUnits="userSpaceOnUse"
+ inkscape:collect="always"
+ x1="234.81"
+ x2="225.54341"
+ xlink:href="#lg1900-1-53"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ y1="33.279999"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient4521-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4523-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4525-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath4527-4">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path4529-4"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter4531-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur4533-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient4535-6"
+ gradientUnits="userSpaceOnUse"
+ y2="18.02874"
+ x2="208.65283"
+ xlink:href="#XMLID_419_-7-9"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ y1="37.113522"
+ x1="240.48146" />
+ <linearGradient
+ id="linearGradient4537-1"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop4539-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop4541-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4543-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ id="radialGradient4545-9"
+ fx="22.315165"
+ fy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ cy="28.67547"
+ cx="22.315165"
+ xlink:href="#linearGradient7322-1-4"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)" />
+ <linearGradient
+ id="linearGradient4547-2">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop4549-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop4551-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter4553-3">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur4555-6"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-5-9"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-5-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4-6"
+ id="linearGradient5840-5-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-4-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-75-6" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-9-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0-5"
+ id="linearGradient5842-8-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-0-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-26-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-52-0" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-5-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-8-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-9-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-9-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6-9"
+ id="linearGradient5844-8-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-6-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-3-8" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-00-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-1-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8-7"
+ id="radialGradient5846-3-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-8-7">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-6-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-8-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-8-4">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-2-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5884-9"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5886-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4-6"
+ id="linearGradient5888-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient5890-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5892-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5894-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5896-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0-5"
+ id="linearGradient5898-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5900-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5902-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5904-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath5906-3">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5908-1"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5910-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5912-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6-9"
+ id="linearGradient5914-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient5916-4"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5918-6" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5920-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5922-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8-7"
+ id="radialGradient5924-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5926-3">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5928-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5930-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5932-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5934-5"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter5936-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur5938-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-4-6"
+ id="linearGradient5940-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient5942-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop5944-6" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop5946-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5948-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-0-5"
+ id="linearGradient5950-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient5952-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5954-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5956-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath5958-1">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path5960-1"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter5962-2"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur5964-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-6-9"
+ id="linearGradient5966-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient5968-5"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop5970-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop5972-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5974-0" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-8-7"
+ id="radialGradient5976-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient5978-9">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop5980-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop5982-5" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter5984-2">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur5986-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-3-8"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-9-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3-4"
+ id="linearGradient5230-7-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-3-3-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-1-3" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-7-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-5-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5-3"
+ id="linearGradient5232-2-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-1-5-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-0-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-2-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-6-1-3">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-5-5"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-0-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-3-9"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7-6"
+ id="linearGradient5234-8-7"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-7-7-6"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-5-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-3-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-2-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9-3"
+ id="radialGradient5236-4-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-1-9-3">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-0-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-8-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-5-0">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-3-4"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6283-2"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6285-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3-4"
+ id="linearGradient6287-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6289-6"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6291-6" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6293-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6295-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5-3"
+ id="linearGradient6297-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6299-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6301-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6303-7" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6305-4">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6307-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6309-4"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6311-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7-6"
+ id="linearGradient6313-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6315-8"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6317-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6319-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6321-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9-3"
+ id="radialGradient6323-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6325-2">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6327-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6329-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6331-1">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6333-5"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6335-6"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6337-0"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-3-4"
+ id="linearGradient6339-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6341-9"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6343-9" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6345-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6347-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-5-3"
+ id="linearGradient6349-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6351-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6353-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6355-8" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6357-0">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6359-5"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6361-7"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6363-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-7-6"
+ id="linearGradient6365-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6367-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6369-4" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6371-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6373-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-9-3"
+ id="radialGradient6375-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6377-0">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6379-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6381-4" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6383-7">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6385-1"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-4-1"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-7-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2-1"
+ id="linearGradient5840-2-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-2-1"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-9-5" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-6-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-4-1" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9-5"
+ id="linearGradient5842-2-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-9-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-28-4" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-50-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-4-6">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-6-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-1-2"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-2-7"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67-9"
+ id="linearGradient5844-1-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-67-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-2-1" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-2-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-8-7" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10-8"
+ id="radialGradient5846-6-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-10-8">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-9-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-82-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-5-5">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-0-7"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6829-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6831-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2-1"
+ id="linearGradient6833-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6835-7"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6837-7" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6839-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6841-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9-5"
+ id="linearGradient6843-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6845-5"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6847-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6849-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6851-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6853-0"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6855-6"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6857-5"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67-9"
+ id="linearGradient6859-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6861-9"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6863-5" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6865-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6867-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10-8"
+ id="radialGradient6869-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6871-5">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6873-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6875-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6877-8">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6879-9"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter6881-1"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur6883-4"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-2-1"
+ id="linearGradient6885-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient6887-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop6889-1" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop6891-2" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6893-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-9-5"
+ id="linearGradient6895-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient6897-7"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6899-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6901-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath6903-7">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path6905-9"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter6907-0"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur6909-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-67-9"
+ id="linearGradient6911-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient6913-7"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop6915-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop6917-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6919-2" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-10-8"
+ id="radialGradient6921-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient6923-1">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop6925-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop6927-9" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter6929-0">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur6931-8"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter3605-3-4-7"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur3607-9-8-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37-4"
+ id="linearGradient7248-6-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7484-3-37-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7486-7-2-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop3939-9-4-8" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7490-3-50-0" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3-8"
+ id="linearGradient7250-5-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="lg1900-1-3-8"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1902-2-8-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="s1906-5-5-7" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath17035-6-6-8">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path17037-2-7-3"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7696-0-9-8"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7698-6-5-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71-8"
+ id="linearGradient7252-2-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="XMLID_419_-7-71-8"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="s1903-7-1-7" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="s1905-0-8-0" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="s1907-5-5-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0-6"
+ id="radialGradient7254-1-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7322-1-0-6">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7324-2-4-7" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7326-2-4-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter3968-6-9-9">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur3970-1-33-6"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7313-5"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7315-2"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37-4"
+ id="linearGradient7317-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7319-8"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7321-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7323-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7325-3" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3-8"
+ id="linearGradient7327-8"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7329-0"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7331-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7333-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath7335-2">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7337-8"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7339-3"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7341-1"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71-8"
+ id="linearGradient7343-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient7345-5"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7347-3" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7349-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7351-6" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0-6"
+ id="radialGradient7353-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7355-5">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7357-9" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7359-6" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7361-7">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7363-1"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.2617458"
+ id="filter7365-1"
+ y="-0.13087288"
+ x="-0.093524978"
+ width="1.18705">
+ <feGaussianBlur
+ stdDeviation="8.2187489"
+ id="feGaussianBlur7367-8"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3-37-4"
+ id="linearGradient7369-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ id="linearGradient7371-4"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#858882;stop-opacity:1"
+ id="stop7373-4" />
+ <stop
+ offset="0.36000001"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ id="stop7375-6" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7377-5" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1-3-8"
+ id="linearGradient7379-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ id="linearGradient7381-3"
+ gradientUnits="userSpaceOnUse"
+ x1="228.35001"
+ x2="215.42999"
+ y1="33.279999"
+ y2="33.279999">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7383-1" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7385-4" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#575757" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#D3D3D3" />
+ </linearGradient>
+ <clipPath
+ id="clipPath7387-5">
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#2e3436"
+ id="path7389-2"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z" />
+ </clipPath>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3295043"
+ id="filter7391-2"
+ y="-0.16475213"
+ x="-0.12240516"
+ width="1.2448103">
+ <feGaussianBlur
+ stdDeviation="0.82797329"
+ id="feGaussianBlur7393-3"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7-71-8"
+ id="linearGradient7395-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <linearGradient
+ id="linearGradient7397-5"
+ gradientUnits="userSpaceOnUse"
+ x1="224.31"
+ x2="214.33"
+ y1="19.450001"
+ y2="11.46">
+ <stop
+ offset="0"
+ style="stop-color:#666666;stop-opacity:1"
+ id="stop7399-9" />
+ <stop
+ offset="0.33000001"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ id="stop7401-5" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7403-9" />
+ <a:midPointStop
+ offset="0"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#404040" />
+ <a:midPointStop
+ offset="0.33"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="0.5"
+ style="stop-color:#6D6D6D" />
+ <a:midPointStop
+ offset="1"
+ style="stop-color:#E9E9E9" />
+ </linearGradient>
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1-0-6"
+ id="radialGradient7405-9"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ id="linearGradient7407-7">
+ <stop
+ offset="0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ id="stop7409-3" />
+ <stop
+ offset="1"
+ style="stop-color:#ffffff;stop-opacity:0"
+ id="stop7411-2" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7413-9">
+ <feGaussianBlur
+ stdDeviation="0.10634363"
+ id="feGaussianBlur7415-7"
+ inkscape:collect="always" />
+ </filter>
+ <marker
+ style="overflow:visible"
+ id="Arrow2MstartB-8"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9004-1"
+ transform="scale(0.6) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible;"
+ id="Arrow2MendI-6"
+ orient="auto"
+ refY="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refX="0.0">
+ <path
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888"
+ id="path9007-7"
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z " />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS2-1"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS2">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9797-8" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSJ-9"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSJ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9794-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSf-0"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSf">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9791-1" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSE-9"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSE">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9788-4" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutSG-0"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutSG">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9785-9" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSg-4"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSg">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9782-5" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutS7-5"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutS7">
+ <path
+ transform="scale(0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9779-3" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleInSQ-9"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInSQ">
+ <path
+ transform="scale(-0.2)"
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path9776-6" />
+ </marker>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-1-2"
+ id="linearGradient7574-6-7-3"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <linearGradient
+ id="linearGradient8481-3-1-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-3-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-7-7" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1-4-2-9"
+ xlink:href="#linearGradient4584-7-8-5-5"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-7-8-5-5">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0-9-4-0" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4-6-0-7" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8-1-4-4"
+ xlink:href="#linearGradient4584-70-8-6-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <linearGradient
+ id="linearGradient4584-70-8-6-2">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3-8-9-8" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0-3-2-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-2">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-7" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-07" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-4"
+ xlink:href="#linearGradient4584-2"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <mask
+ id="mask4631-8-4">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ style="fill:url(#linearGradient4635-4);fill-opacity:1"
+ id="path4633-3-1" />
+ </mask>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10534-4-7">
+ <feGaussianBlur
+ id="feGaussianBlur10536-7-3"
+ stdDeviation="0.50670758"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554-1-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ id="stop10556-8-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop10558-7-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ id="stop7810-7-13" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7812-0-5" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4-10">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop6480-2-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ id="stop6482-6-1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-2">
+ <stop
+ offset="0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ id="stop6400-0-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop6402-3-0" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop6416-21-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop6418-9-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-4">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5687-8-6" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5689-7-9" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-0">
+ <stop
+ offset="0"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ id="stop10568-8-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ id="stop10570-2-1" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10486-9-9">
+ <feGaussianBlur
+ id="feGaussianBlur10488-0-3"
+ stdDeviation="0.36649474"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.0124482"
+ y="-0.0062240968"
+ width="1.3332899"
+ x="-0.16664496"
+ id="filter8323-5-0">
+ <feGaussianBlur
+ id="feGaussianBlur8325-5-1"
+ stdDeviation="0.15442502"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5671-0-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5673-7-4" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8351-5-5">
+ <feGaussianBlur
+ id="feGaussianBlur8353-2-4"
+ stdDeviation="0.21855907"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677-53-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5679-2-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5681-1-94" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5567-1-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5569-2-6" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-1">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5575-4-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5577-3-7" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ id="stop7578-3-88" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7580-6-3" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481-3-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8483-80-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop8485-3-74" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="translate(0,-337)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient8481-3-3"
+ id="linearGradient7574-6-3"
+ y2="460.97229"
+ x2="596.48529"
+ y1="416.72614"
+ x1="596.48529" />
+ <mask
+ id="mask7570-2-5">
+ <rect
+ style="fill:url(#linearGradient7574-6-3);fill-opacity:1"
+ id="rect7572-2-47"
+ y="60.362179"
+ x="536"
+ height="111"
+ width="86" />
+ </mask>
+ <linearGradient
+ id="linearGradient7359-4-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7361-9-9" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7363-3-0" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter7106-5">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.51373373"
+ id="feGaussianBlur7108-7" />
+ </filter>
+ <linearGradient
+ id="linearGradient5931-05">
+ <stop
+ offset="0"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ id="stop5933-0" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5935-2" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5813-6">
+ <stop
+ offset="0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5815-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ id="stop5817-3" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter8391-7">
+ <feGaussianBlur
+ id="feGaussianBlur8393-8"
+ stdDeviation="0.23516584"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-61">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop5799-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop5801-7" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ id="filter10668-28">
+ <feGaussianBlur
+ id="feGaussianBlur10670-3"
+ stdDeviation="0.40041338"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-07">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ id="stop10496-5" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop10498-55" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-23">
+ <stop
+ offset="0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5543-50" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ id="stop5545-4" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-41">
+ <stop
+ offset="0"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ id="stop5559-3" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ id="stop5561-36" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317-3-5">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop8319-5-8" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop8321-8-8" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.233731"
+ y="-0.11686549"
+ width="1.2466146"
+ x="-0.12330729"
+ id="filter9827-0">
+ <feGaussianBlur
+ id="feGaussianBlur9829-0"
+ stdDeviation="13.567379"
+ inkscape:collect="always" />
+ </filter>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.3127669"
+ y="-0.15638345"
+ width="1.1948662"
+ x="-0.09743309"
+ id="filter5917-37">
+ <feGaussianBlur
+ id="feGaussianBlur5919-81"
+ stdDeviation="0.60257196"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-7">
+ <stop
+ offset="0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ id="stop5807-2" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ id="stop5809-5" />
+ </linearGradient>
+ <filter
+ color-interpolation-filters="sRGB"
+ height="1.4388067"
+ y="-0.21940336"
+ width="1.2520971"
+ x="-0.12604854"
+ id="filter9847-6">
+ <feGaussianBlur
+ id="feGaussianBlur9849-6"
+ stdDeviation="1.7113675"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-3">
+ <stop
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ id="stop7586-4" />
+ <stop
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ id="stop7588-39" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient7584-3"
+ id="linearGradient7733-1"
+ y2="595.06226"
+ x2="20.999998"
+ y1="539.95715"
+ x1="20.999998" />
+ <mask
+ id="mask7729-8">
+ <rect
+ style="fill:url(#linearGradient7733-1);fill-opacity:1"
+ id="rect7731-8"
+ y="71.481766"
+ x="483.75613"
+ height="123.26292"
+ width="103.35121" />
+ </mask>
+ <linearGradient
+ id="linearGradient4584-70-4">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-3-4" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-0-7" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-8-1"
+ xlink:href="#linearGradient4584-70-4"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <mask
+ id="mask4631-7-7">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-8-1);fill-opacity:1"
+ id="path4633-8-6" />
+ </mask>
+ <linearGradient
+ id="linearGradient4584-7-6">
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0"
+ id="stop4586-0-8" />
+ <stop
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1"
+ id="stop4588-4-6" />
+ </linearGradient>
+ <linearGradient
+ x1="205"
+ y1="114.00015"
+ x2="205"
+ y2="132.71391"
+ id="linearGradient4635-1-1"
+ xlink:href="#linearGradient4584-7-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)" />
+ <mask
+ id="mask4631-76">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ style="fill:url(#linearGradient4635-1-1);fill-opacity:1"
+ id="path4633-7" />
+ </mask>
+ <pattern
+ patternUnits="userSpaceOnUse"
+ width="32"
+ height="32"
+ id="white-spots-21"
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)">
+ <g
+ inkscape:label="#g3035"
+ id="white-spot-2"
+ transform="translate(-484.3997,-513.505)">
+ <path
+ sodipodi:nodetypes="czzzz"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ id="path3033-0"
+ style="opacity:0.25;fill:white" />
+ </g>
+ </pattern>
+ <linearGradient
+ id="linearGradient3987-49">
+ <stop
+ id="stop3989-5"
+ offset="0"
+ style="stop-color:#e3dcc0;stop-opacity:0;" />
+ <stop
+ id="stop3991-0"
+ offset="1"
+ style="stop-color:#e3dcc0;stop-opacity:1;" />
+ </linearGradient>
+ <marker
+ inkscape:stockid="TriangleOutM"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutM-0"
+ style="overflow:visible">
+ <path
+ id="path18351-1"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ transform="scale(0.4)" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient6624"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient6626"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6628"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient6630"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient6632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6634"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient6636"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient6638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient6640"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6642"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient6644"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient6646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient6648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6650"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6652"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient6656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient6658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6660"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient6662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient6664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6666"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient6668"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient6670"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6672"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient6674"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient6676"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient6678"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient6680"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6682"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6684"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6686"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient6688"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient6690"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient6692"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient6694"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient6696"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient6698"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient6700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient6702"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient6704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient6706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient6708"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient6710"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient6712"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient6714"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient6716"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient6718"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient6720"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient6722"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient6724"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient6726"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title />
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <rect
+ y="85.767029"
+ x="-55.645996"
+ height="197.38618"
+ width="410.38617"
+ id="rect23486-9"
+ style="fill:url(#pattern6964);fill-opacity:1;stroke:#000000;stroke-width:4;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.72123892;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect7100"
+ width="405"
+ height="192"
+ x="-53.645996"
+ y="89.153214" />
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314"
+ y="5244.3931"
+ x="4432.2417"
+ ry="24.171429"
+ rx="60.428574"
+ height="24.171429"
+ width="0" />
+ <g
+ id="g8484-6"
+ transform="translate(5731.7105,647.6564)" />
+ <g
+ style="fill:#ffffff"
+ id="g6374-4"
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)" />
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-1"
+ y="672.71167"
+ x="5640.6602"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ id="g4596-3"
+ mask="url(#mask4631-8)"
+ style="opacity:0.30729232"
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)" />
+ <g
+ id="g3002-33"
+ transform="translate(5456.1995,2052.0684)" />
+ <g
+ id="g4898-8"
+ transform="translate(5291.6877,1428.7067)">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ id="g3002-4"
+ transform="translate(6200.2995,1255.4254)" />
+ <g
+ id="g4898-9"
+ transform="translate(6035.7875,632.0634)">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ x="5721.2646"
+ y="1713.0334"
+ id="text19594"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="5721.2646"
+ y="1713.0334"
+ id="tspan19596" /></text>
+ <g
+ id="g3002-3"
+ transform="translate(6137.2995,1486.4253)" />
+ <g
+ id="g4898-2"
+ transform="translate(5972.7875,863.0634)">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ id="g21694"
+ transform="translate(5002.2995,1054.4254)">
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text21702"
+ y="658.60797"
+ x="321.965"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan21704"
+ y="658.60797"
+ x="321.965" /></text>
+ </g>
+ <rect
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5"
+ id="rect5314-3"
+ y="1739.5555"
+ x="6394.4658"
+ ry="6"
+ rx="15"
+ height="6"
+ width="0" />
+ <g
+ transform="translate(539.98213,665.63497)"
+ id="g3002-35" />
+ <g
+ transform="translate(375.47031,42.27285)"
+ id="g4898-37">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ transform="translate(321.48515,123.56711)"
+ id="g3002-4-44" />
+ <g
+ transform="translate(156.97333,-499.79501)"
+ id="g4898-3">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ transform="translate(4.49242,441.24827)"
+ id="g9694" />
+ <g
+ transform="translate(-160.01938,-182.11385)"
+ id="g9696">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ transform="translate(531.70846,712.31515)"
+ id="g11586" />
+ <g
+ transform="translate(367.19664,88.95298)"
+ id="g11591">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ transform="translate(945.16259,126.17676)"
+ id="g13960" />
+ <g
+ transform="translate(780.65077,-497.18536)"
+ id="g13962">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ id="g6425"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ style="fill:#5c3566" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ x="902.75421"
+ y="196.70628"
+ id="text13535"><tspan
+ sodipodi:role="line"
+ id="tspan13537"
+ x="902.75421"
+ y="196.70628" /></text>
+ <g
+ id="g4113"
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)" />
+ <g
+ id="g6262"
+ transform="translate(-2126.5044,28.9977)" />
+ <g
+ id="g22104"
+ transform="matrix(1.1226825,0,0,0.96774932,-69.33824,87.61629)">
+ <g
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)"
+ id="g22106">
+ <g
+ style="opacity:0.53157899"
+ id="g22108"
+ mask="url(#mask7570-2)"
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)">
+ <path
+ style="fill:url(#linearGradient6624);fill-opacity:1"
+ id="path22110"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6626);fill-opacity:1"
+ id="path22112"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6628);fill-opacity:1"
+ id="path22114"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6630);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path22116"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6632);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path22118"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22120"
+ transform="translate(0,41.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient6634);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path22122"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6636);fill-opacity:1"
+ id="path22124"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient6638);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22126"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22128"
+ transform="translate(0,31)">
+ <path
+ style="fill:url(#linearGradient6640);fill-opacity:1;stroke:url(#linearGradient6642);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22130"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6644);fill-opacity:1"
+ id="path22132"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient6646);fill-opacity:1;stroke:url(#linearGradient6648);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path22134"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient6650);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22136"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22138"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient6652);fill-opacity:1"
+ id="path22140"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient6654);fill-opacity:1"
+ id="path22142"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <g
+ id="g22144"
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)">
+ <path
+ style="fill:url(#linearGradient6656);fill-opacity:1"
+ id="path22146"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6658);fill-opacity:1"
+ id="path22148"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6660);fill-opacity:1"
+ id="path22150"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6662);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path22152"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6664);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path22154"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22156"
+ transform="translate(0,10.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient6666);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path22158"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6668);fill-opacity:1"
+ id="path22160"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient6670);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path22162"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22164">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient6672);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path22166"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient6674);fill-opacity:1"
+ id="path22168"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient6676);fill-opacity:1;stroke:url(#linearGradient6678);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path22170"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient6680);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)"
+ id="path22172"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g22174"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient6682);fill-opacity:1"
+ id="path22176"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient6684);fill-opacity:1"
+ id="path22178"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ id="g22180"
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient6686);fill-opacity:1"
+ id="path22182"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient6688);fill-opacity:1"
+ id="path22184"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path22326"
+ d="m 60.84232,150.30666 148.0537,-1"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)" />
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,18.98149,-172.92372)"
+ id="g22328"
+ style="display:inline">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729-5)"
+ id="g22330"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22332"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22334"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22336"
+ style="fill:url(#linearGradient6690);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22338"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path22340"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22342"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22344"
+ style="fill:url(#linearGradient6692)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22346"
+ style="fill:url(#linearGradient6694);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22348"
+ style="fill:url(#linearGradient6696);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22350"
+ style="opacity:0.62254902;fill:url(#radialGradient6698);fill-opacity:1;stroke:url(#radialGradient6700);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22352"
+ style="fill:url(#linearGradient6702);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g22354">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22356"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22358"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22360"
+ style="fill:url(#linearGradient6704);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22362"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path22364"
+ style="fill:url(#linearGradient6706);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22366"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22368"
+ style="fill:url(#linearGradient6708)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22370"
+ style="fill:url(#linearGradient6710);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22372"
+ style="fill:url(#linearGradient6712);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22374"
+ style="opacity:0.96825412;fill:url(#radialGradient6714);fill-opacity:1;stroke:url(#radialGradient6716);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22376"
+ style="fill:url(#linearGradient6718);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path22378"
+ style="opacity:0.71957703;fill:url(#radialGradient6720);fill-opacity:1;stroke:url(#radialGradient6722);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g22380">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22382"
+ style="opacity:0.680851;fill:url(#radialGradient6724);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22384"
+ style="fill:url(#radialGradient6726);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="222.54712"
+ y="122.30667"
+ id="text22386"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22388"
+ x="222.54712"
+ y="122.30667"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">pam_krb5</tspan><tspan
+ sodipodi:role="line"
+ x="222.54712"
+ y="136.70667"
+ id="tspan22390"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">nss_ldap</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ x="89.547119"
+ y="171.30667"
+ id="text22394"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ x="89.547119"
+ y="171.30667"
+ id="tspan22398"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">client connects</tspan><tspan
+ sodipodi:role="line"
+ x="89.547119"
+ y="183.90668"
+ id="tspan22400"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">for authentication</tspan><tspan
+ id="tspan4514"
+ sodipodi:role="line"
+ x="89.547119"
+ y="196.50667"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">& proceeds</tspan><tspan
+ id="tspan4516"
+ sodipodi:role="line"
+ x="89.547119"
+ y="209.10667"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">with its request</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="-44.452881"
+ y="180.30667"
+ id="text22422"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22424"
+ x="-44.452881"
+ y="180.30667"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">client</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="296.96118"
+ y="182.19727"
+ id="text22426"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22428"
+ x="296.96118"
+ y="182.19727"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">IPA</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text4784"
+ y="137.30667"
+ x="52.547119"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ xml:space="preserve"><tspan
+ style="font-size:20px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="137.30667"
+ x="52.547119"
+ id="tspan4786"
+ sodipodi:role="line">LDAP + Kerberos</tspan></text>
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="3570.7417"
+ y="5015.5464"
+ id="rect5314-0"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(4870.2105,418.80986)"
+ id="g8484-6-0" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,4672.3055,531.12986)"
+ id="g6374-4-8"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="4779.1602"
+ y="443.86514"
+ id="rect5314-1-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,4650.3225,1383.1399)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8-4)"
+ id="g4596-3-7" />
+ <g
+ transform="translate(4594.6995,1823.2219)"
+ id="g3002-33-9" />
+ <g
+ transform="translate(4430.1877,1199.8602)"
+ id="g4898-8-6">
+ <g
+ id="g4900-92">
+ <g
+ id="g4902-15" />
+ </g>
+ </g>
+ <g
+ transform="translate(5338.7995,1026.5789)"
+ id="g3002-4-2" />
+ <g
+ transform="translate(5174.2875,403.21686)"
+ id="g4898-9-4">
+ <g
+ id="g4900-9-8">
+ <g
+ id="g4902-1-3" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594-8"
+ y="1484.1869"
+ x="4859.7646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596-4"
+ y="1484.1869"
+ x="4859.7646" /></text>
+ <g
+ transform="translate(5275.7995,1257.5788)"
+ id="g3002-3-3" />
+ <g
+ transform="translate(5111.2875,634.21686)"
+ id="g4898-2-1">
+ <g
+ id="g4900-7-9">
+ <g
+ id="g4902-8-7" />
+ </g>
+ </g>
+ <g
+ transform="translate(4140.7995,825.57886)"
+ id="g21694-0">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702-2"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704-7" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5532.9658"
+ y="1510.709"
+ id="rect5314-3-9"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g3002-35-9"
+ transform="translate(-321.51783,436.78843)" />
+ <g
+ id="g4898-37-4"
+ transform="translate(-486.02965,-186.57369)">
+ <g
+ id="g4900-5-0">
+ <g
+ id="g4902-5-6" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44-7"
+ transform="translate(-540.01481,-105.27943)" />
+ <g
+ id="g4898-3-9"
+ transform="translate(-704.52663,-728.64155)">
+ <g
+ id="g4900-3-7-7">
+ <g
+ id="g4902-3-9-8" />
+ </g>
+ </g>
+ <g
+ id="g9694-8"
+ transform="translate(-857.00754,212.40173)" />
+ <g
+ id="g9696-3"
+ transform="translate(-1021.5193,-410.96039)">
+ <g
+ id="g9698-6">
+ <g
+ id="g9700-0" />
+ </g>
+ </g>
+ <g
+ id="g11586-8"
+ transform="translate(-329.7915,483.46861)" />
+ <g
+ id="g11591-3"
+ transform="translate(-494.30332,-139.89356)">
+ <g
+ id="g11593-7">
+ <g
+ id="g11595-5" />
+ </g>
+ </g>
+ <g
+ id="g13960-7"
+ transform="translate(83.66263,-102.66978)" />
+ <g
+ id="g13962-3"
+ transform="translate(-80.84919,-726.0319)">
+ <g
+ id="g13964-2">
+ <g
+ id="g13966-3" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,-520.29065,-1241.8593)"
+ id="g6425-3" />
+ <text
+ id="text13535-4"
+ y="-32.140255"
+ x="41.25425"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="-32.140255"
+ x="41.25425"
+ id="tspan13537-5"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-2811.8862,-70.48372)"
+ id="g4113-7" />
+ <g
+ transform="translate(-2988.0044,-199.84884)"
+ id="g6262-2" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text22386-5"
+ y="249.46013"
+ x="220.04715"
+ style="font-size:16px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="249.46013"
+ x="220.04715"
+ id="tspan22388-7"
+ sodipodi:role="line">pam_ldap</tspan><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#000000;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22390-4"
+ y="263.86014"
+ x="220.04715"
+ sodipodi:role="line">nss_ldap</tspan></text>
+ <rect
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:none;overflow:visible;enable-background:accumulate"
+ id="rect26435-4"
+ width="1620"
+ height="951.42859"
+ x="-1214.0714"
+ y="-207.48439"
+ ry="26.574863"
+ rx="26.574863" />
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)"
+ d="m 60.84232,234.30666 148.0537,-1"
+ id="path6601"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text4784-6"
+ y="256.5332"
+ x="79.26976"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ xml:space="preserve"><tspan
+ style="font-size:20px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="256.5332"
+ x="79.26976"
+ id="tspan4786-3"
+ sodipodi:role="line">LDAP + LDAP</tspan></text>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-ldap.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-ldap.png
new file mode 100644
index 0000000..41d6b7a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-ldap.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-ldap.svg b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-ldap.svg
new file mode 100644
index 0000000..122c66e
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-ldap.svg
@@ -0,0 +1,8315 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-ldap.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-ldap.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="-24.89561"
+ inkscape:cy="153.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient22462"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22464"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22466"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22468"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22470"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22472"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22474"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient22476"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22478"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22480"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient22482"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22484"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22486"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22488"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22490"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22492"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient22494"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22496"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22498"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22500"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22502"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22504"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22506"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient22508"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22510"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22512"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22514"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22516"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22518"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22520"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22522"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22524"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22526"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient22616"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22634"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22636"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22640"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22642"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22644"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient22648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22650"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient22652"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22660"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22666"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22668"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4778"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <g
+ id="g51234">
+ <rect
+ y="75.613564"
+ x="323.85397"
+ height="197.38618"
+ width="410.38617"
+ id="rect23486"
+ style="fill:url(#black-spots);fill-opacity:1.0;stroke:#000000;stroke-width:4;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.72123892;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect6141"
+ width="405"
+ height="192"
+ x="325.85397"
+ y="76.999748" />
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="4432.2417"
+ y="5244.3931"
+ id="rect5314"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(5731.7105,647.6564)"
+ id="g8484-6" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)"
+ id="g6374-4"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5640.6602"
+ y="672.71167"
+ id="rect5314-1"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8)"
+ id="g4596-3" />
+ <g
+ transform="translate(5456.1995,2052.0684)"
+ id="g3002-33" />
+ <g
+ transform="translate(5291.6877,1428.7067)"
+ id="g4898-8">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ transform="translate(6200.2995,1255.4254)"
+ id="g3002-4" />
+ <g
+ transform="translate(6035.7875,632.0634)"
+ id="g4898-9">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594"
+ y="1713.0334"
+ x="5721.2646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596"
+ y="1713.0334"
+ x="5721.2646" /></text>
+ <g
+ transform="translate(6137.2995,1486.4253)"
+ id="g3002-3" />
+ <g
+ transform="translate(5972.7875,863.0634)"
+ id="g4898-2">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ transform="translate(5002.2995,1054.4254)"
+ id="g21694">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="6394.4658"
+ y="1739.5555"
+ id="rect5314-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g3002-35"
+ transform="translate(539.98213,665.63497)" />
+ <g
+ id="g4898-37"
+ transform="translate(375.47031,42.27285)">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44"
+ transform="translate(321.48515,123.56711)" />
+ <g
+ id="g4898-3"
+ transform="translate(156.97333,-499.79501)">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ id="g9694"
+ transform="translate(4.49242,441.24827)" />
+ <g
+ id="g9696"
+ transform="translate(-160.01938,-182.11385)">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ id="g11586"
+ transform="translate(531.70846,712.31515)" />
+ <g
+ id="g11591"
+ transform="translate(367.19664,88.95298)">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ id="g13960"
+ transform="translate(945.16259,126.17676)" />
+ <g
+ id="g13962"
+ transform="translate(780.65077,-497.18536)">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ id="g6425" />
+ <text
+ id="text13535"
+ y="196.70628"
+ x="902.75421"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="196.70628"
+ x="902.75421"
+ id="tspan13537"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)"
+ id="g4113" />
+ <g
+ transform="translate(-2126.5044,28.9977)"
+ id="g6262" />
+ <g
+ transform="matrix(1.1226825,0,0,0.96774932,348.66176,54.61629)"
+ id="g22104">
+ <g
+ id="g22106"
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)">
+ <g
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)"
+ mask="url(#mask7570-2)"
+ id="g22108"
+ style="opacity:0.53157899">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22110"
+ style="fill:url(#linearGradient22462);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22112"
+ style="fill:url(#linearGradient22464);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ id="path22114"
+ style="fill:url(#linearGradient22466);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22116"
+ style="fill:none;stroke:url(#linearGradient22468);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22118"
+ style="fill:none;stroke:url(#linearGradient22470);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,41.25)"
+ id="g22120">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22122"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22472);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22124"
+ style="fill:url(#linearGradient22474);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22126"
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient22476);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="translate(0,31)"
+ id="g22128">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22130"
+ style="fill:url(#linearGradient22478);fill-opacity:1;stroke:url(#linearGradient22480);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22132"
+ style="fill:url(#linearGradient22482);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22134"
+ style="fill:url(#linearGradient22484);fill-opacity:1;stroke:url(#linearGradient22486);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22136"
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient22488);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22138">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22140"
+ style="opacity:0.680851;fill:url(#radialGradient22490);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22142"
+ style="fill:url(#radialGradient22492);fill-opacity:1" />
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)"
+ id="g22144">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22146"
+ style="fill:url(#linearGradient22494);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22148"
+ style="fill:url(#linearGradient22496);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ id="path22150"
+ style="fill:url(#linearGradient22498);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22152"
+ style="fill:none;stroke:url(#linearGradient22500);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22154"
+ style="fill:none;stroke:url(#linearGradient22502);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,10.25)"
+ id="g22156">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22158"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22504);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22160"
+ style="fill:url(#linearGradient22506);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22162"
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient22508);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ id="g22164">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22166"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22510);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22168"
+ style="fill:url(#linearGradient22512);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22170"
+ style="fill:url(#linearGradient22514);fill-opacity:1;stroke:url(#linearGradient22516);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22172"
+ style="fill:none;stroke:url(#linearGradient22518);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22174">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22176"
+ style="opacity:0.680851;fill:url(#radialGradient22520);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22178"
+ style="fill:url(#radialGradient22522);fill-opacity:1" />
+ </g>
+ <g
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)"
+ id="g22180">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22182"
+ style="opacity:0.680851;fill:url(#radialGradient22524);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22184"
+ style="fill:url(#radialGradient22526);fill-opacity:1" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)"
+ d="m 467.84232,166.30666 148.0537,-1"
+ id="path22326"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <g
+ style="display:inline"
+ id="g22328"
+ transform="matrix(-0.6631863,0,0,0.67913371,420.98149,-185.92372)">
+ <g
+ style="opacity:0.15161288"
+ id="g22330"
+ mask="url(#mask7729-5)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22332"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22334"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22632);fill-opacity:1"
+ id="path22336"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22338"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ id="path22340"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22342"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22634)"
+ id="path22344"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22636);fill-opacity:1"
+ id="polygon22346"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22638);fill-opacity:1"
+ id="path22348"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient22640);fill-opacity:1;stroke:url(#radialGradient22642);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22350"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22644);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22352"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g22354"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22356"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22358"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22646);fill-opacity:1"
+ id="path22360"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22362"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22648);fill-opacity:1"
+ id="path22364"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22366"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22650)"
+ id="path22368"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22652);fill-opacity:1"
+ id="polygon22370"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22654);fill-opacity:1"
+ id="path22372"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient22656);fill-opacity:1;stroke:url(#radialGradient22658);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22374"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22660);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22376"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient22662);fill-opacity:1;stroke:url(#radialGradient22664);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ id="path22378"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g22380"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient22666);fill-opacity:1"
+ id="path22382"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient22668);fill-opacity:1"
+ id="path22384"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22386"
+ y="119.30667"
+ x="588.54712"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="119.30667"
+ x="588.54712"
+ id="tspan22388"
+ sodipodi:role="line">pam_ldap</tspan><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22390"
+ y="130.10667"
+ x="588.54712"
+ sodipodi:role="line">nss_ldap</tspan></text>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22394"
+ y="187.30667"
+ x="496.54712"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22398"
+ y="187.30667"
+ x="496.54712"
+ sodipodi:role="line">client connects</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22400"
+ y="199.90668"
+ x="496.54712"
+ sodipodi:role="line">for authentication</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="212.50667"
+ x="496.54712"
+ sodipodi:role="line"
+ id="tspan4514">& proceeds</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="225.10667"
+ x="496.54712"
+ sodipodi:role="line"
+ id="tspan4516">with its request</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22422"
+ y="163.30667"
+ x="358.54712"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="163.30667"
+ x="358.54712"
+ id="tspan22424"
+ sodipodi:role="line">client</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22426"
+ y="217.19727"
+ x="644.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="217.19727"
+ x="644.96118"
+ id="tspan22428"
+ sodipodi:role="line">IPA</tspan></text>
+ <rect
+ style="fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect4788"
+ width="84"
+ height="39"
+ x="336.54712"
+ y="55.30666" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ x="345.54712"
+ y="85.306664"
+ id="text4784"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan4786"
+ x="345.54712"
+ y="85.306664"
+ style="font-size:28px">LDAP</tspan></text>
+ </g>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd.png
new file mode 100644
index 0000000..abf8adf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd.svg b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd.svg
new file mode 100644
index 0000000..faf18bd
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd.svg
@@ -0,0 +1,9976 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-sssd.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-sssd.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="287.10439"
+ inkscape:cy="273.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#black-spots"
+ id="pattern23476"
+ patternTransform="matrix(0.39607708,0,0,0.42550454,617.86712,-146.57274)" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient5370"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient5372"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient5374"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557"
+ id="linearGradient5376"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541"
+ id="radialGradient5378"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient5380"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient5382"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient5384"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813"
+ id="linearGradient5386"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient5388"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931"
+ id="linearGradient5390"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient5392"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient5394"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient5396"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient5398"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient5400"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient5402"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient5404"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient5406"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12740"
+ xlink:href="#linearGradient7576-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12742"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12744"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12746"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12748"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12750"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12752"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12754"
+ xlink:href="#linearGradient5685-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12756"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12758"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12760"
+ xlink:href="#linearGradient6398-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12762"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772"
+ xlink:href="#linearGradient7808-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774"
+ xlink:href="#linearGradient5573-77"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778"
+ xlink:href="#linearGradient5677-53"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780"
+ xlink:href="#linearGradient5669-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786"
+ xlink:href="#linearGradient10554-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790"
+ xlink:href="#linearGradient10566-93"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792"
+ xlink:href="#linearGradient6414-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794"
+ xlink:href="#linearGradient6478-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796"
+ xlink:href="#linearGradient5565-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804"
+ xlink:href="#linearGradient7359-4"
+ inkscape:collect="always" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient21675"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient21677"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient21679"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient21681"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient21683"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient21685"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient21687"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient21689"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient21691"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient21693"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient21695"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient21697"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient21699"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient21701"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient21703"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient21705"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient21707"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient21709"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient21711"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573"
+ id="linearGradient22024"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1"
+ id="linearGradient22024-3"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1-3"
+ id="linearGradient22024-3-6"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient22462"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22464"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22466"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22468"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22470"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22472"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22474"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient22476"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22478"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22480"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient22482"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22484"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22486"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22488"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22490"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22492"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient22494"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22496"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22498"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22500"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22502"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22504"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22506"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient22508"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22510"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22512"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22514"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22516"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22518"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22520"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22522"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22524"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22526"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9"
+ id="linearGradient22528"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22530"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22532"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22534"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22536"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22538"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22540"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1"
+ id="linearGradient22542"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22544"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22546"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1"
+ id="linearGradient22548"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22550"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22552"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22554"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22556"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22558"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8"
+ id="linearGradient22560"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22562"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22564"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22566"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22568"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22570"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22572"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4"
+ id="linearGradient22574"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22576"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22578"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22580"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22582"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22586"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22588"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22590"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22592"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22594"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22596"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22598"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557"
+ id="linearGradient22600"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541"
+ id="radialGradient22602"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22604"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22606"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22608"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813"
+ id="linearGradient22610"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22612"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931"
+ id="linearGradient22614"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient22616"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22618"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22620"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22622"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22624"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22626"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22628"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22630"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22634"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22636"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22640"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22642"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22644"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient22648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22650"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient22652"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22660"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22666"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22668"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573"
+ id="linearGradient22670"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1"
+ id="linearGradient22672"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1-3"
+ id="linearGradient22674"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22750"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22756"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <g
+ id="g51234">
+ <g
+ id="g23480"
+ transform="translate(-372,188)">
+ <rect
+ y="-315.88885"
+ x="500.35156"
+ height="268.39102"
+ width="575.39099"
+ id="rect22758"
+ style="fill:url(#pattern23476);fill-opacity:1;stroke:#000000;stroke-width:3.60897493;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.61946903;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect23478"
+ width="570"
+ height="263"
+ x="502.35156"
+ y="-312.49783" />
+ </g>
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="4432.2417"
+ y="5244.3931"
+ id="rect5314"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(5731.7105,647.6564)"
+ id="g8484-6" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)"
+ id="g6374-4"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5640.6602"
+ y="672.71167"
+ id="rect5314-1"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8)"
+ id="g4596-3" />
+ <g
+ transform="translate(5456.1995,2052.0684)"
+ id="g3002-33" />
+ <g
+ transform="translate(5291.6877,1428.7067)"
+ id="g4898-8">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ transform="translate(6200.2995,1255.4254)"
+ id="g3002-4" />
+ <g
+ transform="translate(6035.7875,632.0634)"
+ id="g4898-9">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594"
+ y="1713.0334"
+ x="5721.2646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596"
+ y="1713.0334"
+ x="5721.2646" /></text>
+ <g
+ transform="translate(6137.2995,1486.4253)"
+ id="g3002-3" />
+ <g
+ transform="translate(5972.7875,863.0634)"
+ id="g4898-2">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ transform="translate(5002.2995,1054.4254)"
+ id="g21694">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="6394.4658"
+ y="1739.5555"
+ id="rect5314-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g9226"
+ transform="matrix(1.1226825,0,0,0.96774932,317.66176,-68.38371)">
+ <g
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)"
+ id="g17509">
+ <g
+ style="opacity:0.53157899"
+ id="g7663"
+ mask="url(#mask7570-2)"
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)">
+ <path
+ style="fill:url(#linearGradient12740);fill-opacity:1"
+ id="path7667"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12742);fill-opacity:1"
+ id="path7669"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12744);fill-opacity:1"
+ id="path7671"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12746);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path7673"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12748);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path7675"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="use7678"
+ transform="translate(0,41.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient12750);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path5196"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12752);fill-opacity:1"
+ id="path5198"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient12754);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7680"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7682"
+ transform="translate(0,31)">
+ <path
+ style="fill:url(#linearGradient12756);fill-opacity:1;stroke:url(#linearGradient12758);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7684"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12760);fill-opacity:1"
+ id="path7686"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient12762);fill-opacity:1;stroke:url(#linearGradient12764);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path7688"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient12766);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7690"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7692"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient12768);fill-opacity:1"
+ id="path7694"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient12770);fill-opacity:1"
+ id="path7696"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <g
+ id="g7698"
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)">
+ <path
+ style="fill:url(#linearGradient12772);fill-opacity:1"
+ id="path7700"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12774);fill-opacity:1"
+ id="path7702"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12776);fill-opacity:1"
+ id="path7704"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12778);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)"
+ id="path7706"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12780);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)"
+ id="path7708"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ inkscape:connector-curvature="0" />
+ <g
+ id="use7710"
+ transform="translate(0,10.25)">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient12782);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path5186"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12784);fill-opacity:1"
+ id="path5188"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient12786);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none"
+ id="path7712"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7714">
+ <path
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient12788);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)"
+ id="path7716"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#linearGradient12790);fill-opacity:1"
+ id="path7718"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <path
+ style="fill:url(#linearGradient12792);fill-opacity:1;stroke:url(#linearGradient12794);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none"
+ id="path7720"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:none;stroke:url(#linearGradient12796);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)"
+ id="path7722"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ inkscape:connector-curvature="0" />
+ <g
+ id="g7724"
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient12798);fill-opacity:1"
+ id="path7726"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient12800);fill-opacity:1"
+ id="path7728"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ id="use7730"
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)">
+ <path
+ style="opacity:0.680851;fill:url(#radialGradient12802);fill-opacity:1"
+ id="path5236"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ <path
+ style="fill:url(#radialGradient12804);fill-opacity:1"
+ id="path5238"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <g
+ id="g4892"
+ transform="matrix(-0.6631863,0,0,0.67913371,387.88733,-316.95875)">
+ <g
+ style="opacity:0.15161288"
+ id="g4894"
+ mask="url(#mask7729)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ id="path4896"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path4898"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5370);fill-opacity:1"
+ id="path4900"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ id="path4902"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827)"
+ id="path4904"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path4906"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5372)"
+ id="path4908"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient5374);fill-opacity:1"
+ id="polygon4910"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5376);fill-opacity:1"
+ id="path4912"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient5378);fill-opacity:1;stroke:url(#radialGradient5380);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ id="path4914"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5382);fill-opacity:1;filter:url(#filter8391)"
+ id="path4916"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g4918"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ id="path4920"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path4922"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5384);fill-opacity:1"
+ id="path4924"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ id="path4926"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5386);fill-opacity:1"
+ id="path4928"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path4930"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5388)"
+ id="path4932"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient5390);fill-opacity:1"
+ id="polygon4934"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="801.55,51.99 779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5392);fill-opacity:1"
+ id="path4936"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient5394);fill-opacity:1;stroke:url(#radialGradient5396);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ id="path4938"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient5398);fill-opacity:1;filter:url(#filter8391)"
+ id="path4940"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient5400);fill-opacity:1;stroke:url(#radialGradient5402);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106)"
+ id="path4942"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g4944"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient5404);fill-opacity:1"
+ id="path4946"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient5406);fill-opacity:1"
+ id="path4948"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path17982"
+ d="m 253.84232,35.306665 105.0537,-1"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)" />
+ <g
+ id="g3002-35"
+ transform="translate(539.98213,665.63497)" />
+ <g
+ id="g4898-37"
+ transform="translate(375.47031,42.27285)">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44"
+ transform="translate(321.48515,123.56711)" />
+ <g
+ id="g4898-3"
+ transform="translate(156.97333,-499.79501)">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ id="g9694"
+ transform="translate(4.49242,441.24827)" />
+ <g
+ id="g9696"
+ transform="translate(-160.01938,-182.11385)">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ id="g11586"
+ transform="translate(531.70846,712.31515)" />
+ <g
+ id="g11591"
+ transform="translate(367.19664,88.95298)">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ id="g13960"
+ transform="translate(945.16259,126.17676)" />
+ <g
+ id="g13962"
+ transform="translate(780.65077,-497.18536)">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ id="g6425" />
+ <text
+ id="text13535"
+ y="196.70628"
+ x="902.75421"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="196.70628"
+ x="902.75421"
+ id="tspan13537"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)"
+ id="g4113" />
+ <g
+ transform="translate(-2126.5044,28.9977)"
+ id="g6262" />
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,205.98149,-338.92372)"
+ id="g8866-7"
+ style="display:inline">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729-5)"
+ id="g8868-3"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8870-0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path8872-2"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path8874-5"
+ style="fill:url(#linearGradient21675);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8876-0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path8878-7"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path8880-0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path8882-2"
+ style="fill:url(#linearGradient21677)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon8884-7"
+ style="fill:url(#linearGradient21679);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path8886-9"
+ style="fill:url(#linearGradient21681);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path8888-0"
+ style="opacity:0.62254902;fill:url(#radialGradient21683);fill-opacity:1;stroke:url(#radialGradient21685);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8890-0"
+ style="fill:url(#linearGradient21687);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g8892-6">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8894-4"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path8896-1"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path8898-5"
+ style="fill:url(#linearGradient21689);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8900-1"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path8902-2"
+ style="fill:url(#linearGradient21691);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path8904-9"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path8906-7"
+ style="fill:url(#linearGradient21693)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon8908-0"
+ style="fill:url(#linearGradient21695);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path8910-6"
+ style="fill:url(#linearGradient21697);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path8912-3"
+ style="opacity:0.96825412;fill:url(#radialGradient21699);fill-opacity:1;stroke:url(#radialGradient21701);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path8914-6"
+ style="fill:url(#linearGradient21703);fill-opacity:1;filter:url(#filter8391-0)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path8916-3"
+ style="opacity:0.71957703;fill:url(#radialGradient21705);fill-opacity:1;stroke:url(#radialGradient21707);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g8918-6">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path8920-7"
+ style="opacity:0.680851;fill:url(#radialGradient21709);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path8922-6"
+ style="fill:url(#radialGradient21711);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <g
+ transform="matrix(0.23376094,0,0,0.15766672,1027.4948,-175.19334)"
+ id="g7496-0">
+ <use
+ id="use7494-5"
+ width="1000"
+ transform="translate(0,73)"
+ y="0"
+ xlink:href="#g7452-5"
+ x="0"
+ height="700" />
+ <g
+ transform="matrix(0.8937066,0,0,0.8937066,-85.24089,192.26027)"
+ id="g7452-5">
+ <g
+ transform="matrix(7.659747,0,0,7.659747,-3413.2328,-6201.7396)"
+ id="g7454-3">
+ <g
+ transform="matrix(1.0634304,0,0,1.1520362,59.093881,903.66323)"
+ id="g7456-3">
+ <path
+ inkscape:connector-curvature="0"
+ transform="matrix(0.1373667,0,0,0.1268015,-199.43287,-50.397161)"
+ style="fill:#000000;fill-opacity:1;filter:url(#filter3605-3)"
+ id="path14856-1"
+ d="m 1622.8438,458.84375 c -56.3324,0 -102.0313,23.48139 -102.0313,52.46875 0,0.33975 0.019,0.69303 0.031,1.03125 l -3.5,0 0,42.96875 c -10e-5,29.96809 47.2617,54.25 105.5,54.25 58.2382,2e-5 105.4062,-24.28191 105.4062,-54.25 l 0,-42.96875 -3.5,0 c 0.013,-0.33822 0.031,-0.6915 0.031,-1.03125 10e-5,-28.98736 -45.605,-52.46875 -101.9374,-52.46875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22750)"
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7458-2" />
+ <path
+ inkscape:connector-curvature="0"
+ clip-path="url(#clipPath17035-6)"
+ style="fill:url(#linearGradient22752);filter:url(#filter7696-0)"
+ id="path7460-5"
+ d="m 23.078104,27.161102 c 8,0 14.457158,-3.08 14.457158,-6.88 l 0,-5.446791 c -1.375602,3.076004 -8.175744,5.672238 -13.851796,7.231897 0.04822,1.262713 -8.605362,5.094894 -0.605362,5.094894 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22754)"
+ d="m 37.97,14.568887 c 0,3.8 -6.48,6.88 -14.48,6.88 -8,0 -14.49,-3.08 -14.49,-6.88 0,-3.8 6.49,-6.8800005 14.49,-6.8800005 8,0 14.48,3.0800005 14.48,6.8800005 z"
+ id="path7462-7" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.68983956;fill:none;stroke:url(#radialGradient22756);stroke-width:0.57768553;stroke-miterlimit:4;stroke-opacity:1;filter:url(#filter3968-6)"
+ d="m 37.728925,14.725637 c 0,3.705803 -6.319369,6.709453 -14.12106,6.709453 -7.80169,0 -14.1308116,-3.00365 -14.1308116,-6.709453 0,-3.705802 6.3291216,-6.709455 14.1308116,-6.709455 7.801691,0 14.12106,3.003653 14.12106,6.709455 z"
+ id="path7464-2" />
+ </g>
+ </g>
+ </g>
+ <use
+ id="use5130-1"
+ width="1000"
+ transform="translate(0,-79.242113)"
+ y="0"
+ xlink:href="#g7452-5"
+ x="0"
+ height="700" />
+ </g>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="379.54709"
+ y="-69.693336"
+ id="text21713"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan21715"
+ x="379.54709"
+ y="-69.693336"
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">pam_sss</tspan><tspan
+ sodipodi:role="line"
+ x="379.54709"
+ y="-58.893333"
+ id="tspan21717"
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">nss_sss</tspan></text>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path17982-1"
+ d="m 444.43325,43.30666 152.0537,0"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ x="196.5471"
+ y="67.306656"
+ id="text21743"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ id="tspan21745"
+ x="196.5471"
+ y="67.306656"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">client</tspan><tspan
+ sodipodi:role="line"
+ x="196.5471"
+ y="79.906662"
+ id="tspan21747"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">connects to SSSD</tspan><tspan
+ sodipodi:role="line"
+ x="196.5471"
+ y="92.50666"
+ id="tspan21749"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">for authentication</tspan></text>
+ <path
+ sodipodi:nodetypes="cc"
+ inkscape:connector-curvature="0"
+ id="path17982-1-1"
+ d="m 379.43325,30.30666 c -39.64564,-5.7457 -34.15972,-68.394533 11.0537,-61"
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:end;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:end;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="348.31958"
+ y="-65.139046"
+ id="text21743-8"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-65.139046"
+ id="tspan21749-0"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic">SSSD checks</tspan><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-52.539047"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21879">IPA for user</tspan><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-39.939045"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21881">& authentication</tspan><tspan
+ sodipodi:role="line"
+ x="348.31958"
+ y="-27.339046"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21883">information</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:start;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:start;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="470.49048"
+ y="64.465256"
+ id="text21743-8-0"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ x="470.49048"
+ y="64.465256"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21883-1">continues with</tspan><tspan
+ sodipodi:role="line"
+ x="470.49048"
+ y="77.065254"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21924">typical directory </tspan><tspan
+ sodipodi:role="line"
+ x="470.49048"
+ y="89.665253"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan21926">service request</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ x="145.5471"
+ y="21.30666"
+ id="text21940"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan21942"
+ x="145.5471"
+ y="21.30666"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">client</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="613.96118"
+ y="94.197281"
+ id="text21940-0"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan21942-9"
+ x="613.96118"
+ y="94.197281"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">IPA</tspan></text>
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="408.15646"
+ y="88.197281"
+ id="text21940-1"
+ sodipodi:linespacing="89.999998%"><tspan
+ sodipodi:role="line"
+ id="tspan21942-3"
+ x="408.15646"
+ y="88.197281"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">SSSD with</tspan><tspan
+ sodipodi:role="line"
+ x="408.15646"
+ y="102.59728"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ id="tspan21974">an LDAP</tspan><tspan
+ sodipodi:role="line"
+ x="408.15646"
+ y="116.99728"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ id="tspan21976">backend</tspan></text>
+ <g
+ id="g22019"
+ transform="translate(-89,379)">
+ <path
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)"
+ d="m 188,-130.55569 a 58.5,59.5 0 1 1 -117,0 58.5,59.5 0 1 1 117,0 z"
+ sodipodi:ry="59.5"
+ sodipodi:rx="58.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:cx="129.5"
+ id="path21986"
+ style="fill:url(#linearGradient22024);fill-opacity:1;stroke:none"
+ sodipodi:type="arc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text21940-3"
+ y="-295.8027"
+ x="260.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="-295.8027"
+ x="260.96118"
+ id="tspan21942-4"
+ sodipodi:role="line">1</tspan></text>
+ </g>
+ <g
+ style="display:inline"
+ id="g22019-3"
+ transform="translate(45.28658,206.71341)">
+ <path
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ sodipodi:ry="59.5"
+ sodipodi:rx="58.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:cx="129.5"
+ id="path21986-4"
+ style="fill:url(#linearGradient22024-3);fill-opacity:1;stroke:none"
+ sodipodi:type="arc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text21940-3-4"
+ y="-295.8027"
+ x="260.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="-295.8027"
+ x="260.96118"
+ id="tspan21942-4-2"
+ sodipodi:role="line">2</tspan></text>
+ </g>
+ <g
+ style="display:inline"
+ id="g22019-3-3"
+ transform="translate(257.28658,323.71341)">
+ <path
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ sodipodi:ry="59.5"
+ sodipodi:rx="58.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:cx="129.5"
+ id="path21986-4-9"
+ style="fill:url(#linearGradient22024-3-6);fill-opacity:1;stroke:none"
+ sodipodi:type="arc" />
+ <text
+ sodipodi:linespacing="125%"
+ id="text21940-3-4-3"
+ y="-295.8027"
+ x="260.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="-295.8027"
+ x="260.96118"
+ id="tspan21942-4-2-5"
+ sodipodi:role="line">3</tspan></text>
+ </g>
+ <rect
+ style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect23494"
+ width="173"
+ height="37"
+ x="296"
+ y="-61.055695"
+ transform="translate(217.5471,-83.637645)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ x="514.54712"
+ y="-118.69334"
+ id="text23490"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan23492"
+ x="514.54712"
+ y="-118.69334"
+ style="font-size:28px">SSSD + LDAP</tspan></text>
+ </g>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd2.png
new file mode 100644
index 0000000..a2f8886
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd2.svg b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd2.svg
new file mode 100644
index 0000000..52ce57a
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/migr-sssd2.svg
@@ -0,0 +1,9389 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:a="http://ns.adobe.com/AdobeSVGViewerExtensions/3.0/"
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+ xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+ width="444"
+ height="471.94431"
+ id="svg2"
+ sodipodi:version="0.32"
+ inkscape:version="0.48.0 r9654"
+ sodipodi:docname="migr-sssd2.svg"
+ inkscape:output_extension="org.inkscape.output.svg.inkscape"
+ version="1.0"
+ inkscape:export-filename="C:\Users\elladeon\Documents\work\redhat\freeipa-guide\ipa-admin\en-US\images\migr-sssd2.png"
+ inkscape:export-xdpi="90"
+ inkscape:export-ydpi="90">
+ <sodipodi:namedview
+ id="base"
+ pagecolor="#ffffff"
+ bordercolor="#666666"
+ borderopacity="1.0"
+ inkscape:pageopacity="0.0"
+ inkscape:pageshadow="2"
+ inkscape:zoom="1"
+ inkscape:cx="131.10439"
+ inkscape:cy="153.55533"
+ inkscape:document-units="px"
+ inkscape:current-layer="g51234"
+ showgrid="false"
+ inkscape:window-width="1920"
+ inkscape:window-height="1018"
+ inkscape:window-x="-8"
+ inkscape:window-y="-8"
+ inkscape:window-maximized="1"
+ fit-margin-top="0"
+ fit-margin-left="0"
+ fit-margin-right="0"
+ fit-margin-bottom="0"
+ showguides="false"
+ inkscape:guide-bbox="true">
+ <sodipodi:guide
+ orientation="1,0"
+ position="301,506"
+ id="guide6372" />
+ </sodipodi:namedview>
+ <defs
+ id="defs4">
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#pattern23476"
+ id="pattern5698"
+ patternTransform="matrix(0.39607708,0,0,0.42550454,275.86712,173.42726)" />
+ <pattern
+ inkscape:collect="always"
+ xlink:href="#black-spots"
+ id="pattern23476"
+ patternTransform="matrix(0.39607708,0,0,0.42550454,617.86712,-146.57274)" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutM"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutM">
+ <path
+ transform="scale(0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path18351" />
+ </marker>
+ <linearGradient
+ id="linearGradient3987">
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:0;"
+ offset="0"
+ id="stop3989" />
+ <stop
+ style="stop-color:#e3dcc0;stop-opacity:1;"
+ offset="1"
+ id="stop3991" />
+ </linearGradient>
+ <pattern
+ patternTransform="matrix(0.375,0,0,0.375,71.51384,20.36167)"
+ id="white-spots"
+ height="32"
+ width="32"
+ patternUnits="userSpaceOnUse">
+ <g
+ transform="translate(-484.3997,-513.505)"
+ id="white-spot"
+ inkscape:label="#g3035">
+ <path
+ style="opacity:0.25;fill:white"
+ id="path3033"
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz" />
+ </g>
+ </pattern>
+ <mask
+ id="mask4631">
+ <path
+ id="path4633"
+ style="fill:url(#linearGradient4635-1) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7"
+ id="linearGradient4635-1"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7">
+ <stop
+ id="stop4586-0"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask4631-7">
+ <path
+ id="path4633-8"
+ style="fill:url(#linearGradient4635-8) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 0,0 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 0,0 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 0,0 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70"
+ id="linearGradient4635-8"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-70">
+ <stop
+ id="stop4586-3"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <mask
+ id="mask7729">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731"
+ style="fill:url(#linearGradient7733) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733"
+ xlink:href="#linearGradient7584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584">
+ <stop
+ id="stop7586"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805">
+ <stop
+ id="stop5807"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919" />
+ </filter>
+ <filter
+ id="filter9827"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3">
+ <stop
+ id="stop8319-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557">
+ <stop
+ id="stop5559"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541">
+ <stop
+ id="stop5543"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494">
+ <stop
+ id="stop10496"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797">
+ <stop
+ id="stop5799"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813">
+ <stop
+ id="stop5815"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931">
+ <stop
+ id="stop5933"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4">
+ <stop
+ id="stop7361-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7570-2">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2"
+ style="fill:url(#linearGradient7574-6) #000000;fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6"
+ xlink:href="#linearGradient8481-3"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3">
+ <stop
+ id="stop8483-80"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1">
+ <stop
+ id="stop7578-3"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77">
+ <stop
+ id="stop5575-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0">
+ <stop
+ id="stop5567-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53">
+ <stop
+ id="stop5679-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6">
+ <stop
+ id="stop5671-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5" />
+ </filter>
+ <filter
+ id="filter10486-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93">
+ <stop
+ id="stop10568-8"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1">
+ <stop
+ id="stop5687-8"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3">
+ <stop
+ id="stop6416-21"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9">
+ <stop
+ id="stop6400-0"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478-4">
+ <stop
+ id="stop6480-2"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808-7">
+ <stop
+ id="stop7810-7"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10554-1">
+ <stop
+ id="stop10556-8"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7" />
+ </filter>
+ <mask
+ id="mask4631-8">
+ <path
+ id="path4633-3"
+ style="fill:url(#linearGradient4635) #000000;fill-opacity:1"
+ d="m 75.739162,940.09671 -21.152457,11.75719 16.383671,17.20912 20.393786,-10.42977 -15.625,-18.53654 z m 41.907518,0 -21.170524,11.75719 16.401734,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 41.69075,0 -21.17052,11.75719 16.40173,17.20912 20.37572,-10.42977 -15.60693,-18.53654 z m 42.50361,0 -21.15246,11.75719 16.38367,17.20912 20.37573,-10.42977 -15.60694,-18.53654 z"
+ inkscape:connector-curvature="0" />
+ </mask>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584"
+ id="linearGradient4635"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584">
+ <stop
+ id="stop4586"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient4584-70-8-6">
+ <stop
+ id="stop4586-3-8-9"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-0-3-2"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-70-8-6"
+ id="linearGradient4635-8-1-4"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient4584-7-8-5">
+ <stop
+ id="stop4586-0-9-4"
+ offset="0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;" />
+ <stop
+ id="stop4588-4-6-0"
+ offset="1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;" />
+ </linearGradient>
+ <linearGradient
+ gradientTransform="matrix(0.578035,0,0,1.51706,41.2919,774.69)"
+ gradientUnits="userSpaceOnUse"
+ xlink:href="#linearGradient4584-7-8-5"
+ id="linearGradient4635-1-4-2"
+ y2="132.71391"
+ x2="205"
+ y1="114.00015"
+ x1="205" />
+ <linearGradient
+ id="linearGradient8481-3-1">
+ <stop
+ id="stop8483-80-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-7"
+ xlink:href="#linearGradient8481-3-1"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <marker
+ inkscape:stockid="TriangleInSQ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSQ"
+ style="overflow:visible">
+ <path
+ id="path9776"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS7"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS7"
+ style="overflow:visible">
+ <path
+ id="path9779"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSg"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSg"
+ style="overflow:visible">
+ <path
+ id="path9782"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSG"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSG"
+ style="overflow:visible">
+ <path
+ id="path9785"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSE"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSE"
+ style="overflow:visible">
+ <path
+ id="path9788"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutSf"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutSf"
+ style="overflow:visible">
+ <path
+ id="path9791"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleInSJ"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleInSJ"
+ style="overflow:visible">
+ <path
+ id="path9794"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(-0.2)" />
+ </marker>
+ <marker
+ inkscape:stockid="TriangleOutS2"
+ orient="auto"
+ refY="0.0"
+ refX="0.0"
+ id="TriangleOutS2"
+ style="overflow:visible">
+ <path
+ id="path9797"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ style="marker-start:none;stroke:#888a85;stroke-width:1.0pt;fill:#888a85;fill-rule:evenodd"
+ transform="scale(0.2)" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendI"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendI"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path9007"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MstartB"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MstartB"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path9004"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#888888;stroke-width:0.62500000;fill:#888888" />
+ </marker>
+ <filter
+ id="filter7413"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7415"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7407">
+ <stop
+ id="stop7409"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7411"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7405"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7397">
+ <stop
+ id="stop7399"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7401"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7403"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7395"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7391"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7393"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7387">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7389"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7381">
+ <stop
+ id="stop7383"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7385"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7379"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7371">
+ <stop
+ id="stop7373"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7375"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7377"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7369"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7365"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7367"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter7361"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7363"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7355">
+ <stop
+ id="stop7357"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7359"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7353"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7345">
+ <stop
+ id="stop7347"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7349"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop7351"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7343"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7339"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7341"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath7335">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path7337"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7329">
+ <stop
+ id="stop7331"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7333"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7327"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7319">
+ <stop
+ id="stop7321"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7323"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7325"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7317"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter7313"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7315"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-9"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-33"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-0">
+ <stop
+ id="stop7324-2-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-4"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient7254-1"
+ xlink:href="#linearGradient7322-1-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-71">
+ <stop
+ id="s1903-7-1"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-8"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7252-2"
+ xlink:href="#XMLID_419_-7-71"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-5"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-7"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-3">
+ <stop
+ id="s1902-2-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7250-5"
+ xlink:href="#lg1900-1-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-37">
+ <stop
+ id="stop7486-7-2"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-4"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-50"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7248-6"
+ xlink:href="#linearGradient7484-3-37"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-8"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6929"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6931"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6923">
+ <stop
+ id="stop6925"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6927"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6921"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6913">
+ <stop
+ id="stop6915"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6917"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6919"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6911"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6907"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6909"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6903">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6905"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6897">
+ <stop
+ id="stop6899"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6901"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6895"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6887">
+ <stop
+ id="stop6889"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6891"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6893"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6885"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6881"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6883"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6877"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6879"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6871">
+ <stop
+ id="stop6873"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6875"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6869"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6861">
+ <stop
+ id="stop6863"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6865"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6867"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6859"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6855"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6857"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6851">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6853"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6845">
+ <stop
+ id="stop6847"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6849"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6843"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6835">
+ <stop
+ id="stop6837"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6839"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6841"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6833"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6829"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6831"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-0"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-10">
+ <stop
+ id="stop7324-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-82"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-6"
+ xlink:href="#linearGradient7322-10"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-67">
+ <stop
+ id="s1903-2"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-2"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-1"
+ xlink:href="#XMLID_419_-67"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-1"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-2"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-4">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-6"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-9">
+ <stop
+ id="s1902-28"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-50"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-2"
+ xlink:href="#lg1900-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-2">
+ <stop
+ id="stop7486-9"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-6"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-2"
+ xlink:href="#linearGradient7484-2"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-4"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-7"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6383"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6385"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6377">
+ <stop
+ id="stop6379"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6381"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6375"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6367">
+ <stop
+ id="stop6369"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6371"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6373"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6365"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6361"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6363"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6357">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6359"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6351">
+ <stop
+ id="stop6353"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6355"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6349"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6341">
+ <stop
+ id="stop6343"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6345"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6347"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6339"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6335"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6337"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter6331"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6333"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient6325">
+ <stop
+ id="stop6327"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6329"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient6323"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6315">
+ <stop
+ id="stop6317"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6319"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop6321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6313"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter6309"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6311"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath6305">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path6307"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6299">
+ <stop
+ id="stop6301"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6303"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6297"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6289">
+ <stop
+ id="stop6291"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6293"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop6295"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6287"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter6283"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur6285"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6-5"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1-3"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1-9">
+ <stop
+ id="stop7324-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5236-4"
+ xlink:href="#linearGradient7322-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7-7">
+ <stop
+ id="s1903-7-5"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0-3"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5234-8"
+ xlink:href="#XMLID_419_-7-7"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6-3"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6-1">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2-5"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1-5">
+ <stop
+ id="s1902-2-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5232-2"
+ xlink:href="#lg1900-1-5"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3-3">
+ <stop
+ id="stop7486-7-1"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9-7"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5230-7"
+ xlink:href="#linearGradient7484-3-3"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5984"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5986"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5978">
+ <stop
+ id="stop5980"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5982"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5976"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5968">
+ <stop
+ id="stop5970"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5972"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5974"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5966"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5962"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5964"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5958">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5960"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5952">
+ <stop
+ id="stop5954"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5956"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5950"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5942">
+ <stop
+ id="stop5944"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5946"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5948"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5940"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5936"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5938"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter5932"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5934"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient5926">
+ <stop
+ id="stop5928"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5930"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5924"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5916">
+ <stop
+ id="stop5918"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5920"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop5922"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5914"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter5910"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5912"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath5906">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path5908"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5900">
+ <stop
+ id="stop5902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5904"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5898"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5890">
+ <stop
+ id="stop5892"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5894"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop5896"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5888"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter5884"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5886"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-2"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-8">
+ <stop
+ id="stop7324-6"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-8"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="14.494606"
+ fy="28.67547"
+ fx="22.315165"
+ cy="28.67547"
+ cx="22.315165"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient5846-3"
+ xlink:href="#linearGradient7322-8"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-6">
+ <stop
+ id="s1903-3"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-00"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-1"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="18.02874"
+ x2="208.65283"
+ y1="37.113522"
+ x1="240.48146"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5844-8"
+ xlink:href="#XMLID_419_-6"
+ inkscape:collect="always" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-9"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-9"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-5">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-8"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-0">
+ <stop
+ id="s1902-26"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-52"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ x2="225.54341"
+ y1="33.279999"
+ x1="234.81"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5842-8"
+ xlink:href="#lg1900-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-4">
+ <stop
+ id="stop7486-75"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-2"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-9"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.29771"
+ x2="212.93233"
+ y1="33.29771"
+ x1="231.07658"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5840-5"
+ xlink:href="#linearGradient7484-4"
+ inkscape:collect="always" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-5"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-5"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4553"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4555"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4547">
+ <stop
+ id="stop4549"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4551"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4545"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4537">
+ <stop
+ id="stop4539"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4541"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4543"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4535" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4531"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4533"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4527">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4529"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4521">
+ <stop
+ id="stop4523"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4525"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4519" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4511">
+ <stop
+ id="stop4513"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4515"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4517"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4509" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4505"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4507"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter4501"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4503"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient4495">
+ <stop
+ id="stop4497"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4499"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient4493"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4485">
+ <stop
+ id="stop4487"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4489"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="stop4491"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4483" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter4479"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4481"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath4475">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path4477"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4469">
+ <stop
+ id="stop4471"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4473"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4467" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4459">
+ <stop
+ id="stop4461"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop4463"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop4465"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4457" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter4453"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4455"
+ stdDeviation="8.2187489" />
+ </filter>
+ <filter
+ id="filter3968-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970-1"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322-1">
+ <stop
+ id="stop7324-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322-1"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576-6"
+ r="14.494606" />
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_-7">
+ <stop
+ id="s1903-7"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905-0"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907-5"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_-7"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574-1" />
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696-0"
+ height="1.3295043"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698-6"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035-6">
+ <path
+ d="m 9,14.568887 0,5.446791 c 0,3.8 6.49,6.88 14.49,6.88 8,0 14.48,-3.08 14.48,-6.88 l 0,-5.446791 -28.97,0 z"
+ id="path17037-2"
+ style="fill:#2e3436"
+ inkscape:connector-curvature="0" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900-1">
+ <stop
+ id="s1902-2"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900-1"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5372-3" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484-3">
+ <stop
+ id="stop7486-7"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939-9"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490-3"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484-3"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570-1" />
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605-3"
+ height="1.2617458"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607-9"
+ stdDeviation="8.2187489" />
+ </filter>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9v"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9v"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path10095"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#0093d9;stroke-width:0.62500000;fill:#0093d9" />
+ </marker>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5478" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5199" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5175" />
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ x1="234.81"
+ inkscape:collect="always"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient4899" />
+ <pattern
+ xlink:href="#pattern18096"
+ id="pattern7559"
+ patternTransform="matrix(-0.4732794,0,0,0.2435722,245.17945,810.58927)" />
+ <linearGradient
+ id="linearGradient3579">
+ <stop
+ id="stop3581"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3583"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(1.8817339,4.3553205e-6,-8.3755671e-5,12.649087,-349.11235,-9832.1102)"
+ xlink:href="#linearGradient3579"
+ cx="99.411484"
+ cy="846.42249"
+ gradientUnits="userSpaceOnUse"
+ fy="846.34479"
+ fx="55.217297"
+ id="radialGradient18146"
+ r="75" />
+ <pattern
+ width="32"
+ patternTransform="matrix(0.455007,0,0,0.455007,20.99995,116)"
+ patternUnits="userSpaceOnUse"
+ id="black-spots"
+ height="32">
+ <g
+ id="black-spot"
+ transform="translate(-448.3997,-513.505)"
+ inkscape:label="#g3039">
+ <path
+ id="path2961"
+ sodipodi:nodetypes="czzzz"
+ d="M 473.39967,529.50504 C 473.39967,534.47304 469.36767,538.50504 464.39967,538.50504 C 459.43167,538.50504 455.39967,534.47304 455.39967,529.50504 C 455.39967,524.53704 459.43167,520.50504 464.39967,520.50504 C 469.36767,520.50504 473.39967,524.53704 473.39967,529.50504 z "
+ style="opacity:0.1;fill:black" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#black-spots"
+ id="pattern4038"
+ patternTransform="matrix(0.361895,0,0,0.361895,-33.80556,922.2561)" />
+ <pattern
+ xlink:href="#pattern4038"
+ id="pattern4315"
+ patternTransform="matrix(0.361895,0,0,0.361895,253.6944,752.2561)" />
+ <pattern
+ xlink:href="#pattern4315"
+ id="pattern4396"
+ patternTransform="matrix(0.361895,0,0,0.361895,41.1944,774.2561)" />
+ <pattern
+ xlink:href="#pattern4396"
+ id="pattern4704"
+ patternTransform="matrix(0.369281,0,0,0.167673,358.678,807.3634)" />
+ <pattern
+ xlink:href="#pattern4704"
+ id="pattern3587"
+ patternTransform="matrix(-0.369281,0,0,0.1304123,49.607712,674.9142)" />
+ <pattern
+ xlink:href="#pattern3587"
+ id="pattern6248"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-21.53871,822.25127)" />
+ <pattern
+ xlink:href="#pattern6248"
+ id="pattern2505"
+ patternTransform="matrix(-0.3479763,0,0,0.1472112,-35.000248,822.25127)" />
+ <pattern
+ xlink:href="#pattern2505"
+ id="pattern4829"
+ patternTransform="matrix(-0.4861985,0,0,0.2614488,-192.25611,762.71923)" />
+ <pattern
+ xlink:href="#pattern4829"
+ id="pattern18096"
+ patternTransform="matrix(-0.5192722,0,0,0.2435722,255.93517,810.58927)" />
+ <linearGradient
+ id="linearGradient5721">
+ <stop
+ id="stop5723"
+ style="stop-color:#ac0000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5725"
+ style="stop-color:#f50606;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <marker
+ refX="0"
+ orient="auto"
+ refY="0"
+ id="TriangleInM"
+ style="overflow:visible">
+ <path
+ id="path4167"
+ d="M 5.77,0 L -2.88,5 L -2.88,-5 L 5.77,0 z"
+ style="fill:#555753"
+ transform="scale(-0.5,-0.5)" />
+ </marker>
+ <linearGradient
+ id="linearGradient6075">
+ <stop
+ id="stop6077"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6079"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3518">
+ <stop
+ id="stop3520"
+ style="stop-color:#000000;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3522"
+ style="stop-color:#000000;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.093614347"
+ width="1.1872287"
+ y="-0.43403015"
+ id="filter4009"
+ height="1.8680604">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur4011"
+ stdDeviation="3.9786096" />
+ </filter>
+ <pattern
+ xlink:href="#pattern18092"
+ id="pattern4156"
+ patternTransform="matrix(0.4083909,0,0,0.356123,-354.11689,547.24482)" />
+ <linearGradient
+ id="linearGradient3987-4">
+ <stop
+ id="stop3989-1"
+ style="stop-color:#e3dcc0;stop-opacity:0"
+ offset="0" />
+ <stop
+ id="stop3991-1"
+ style="stop-color:#e3dcc0;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <pattern
+ width="32"
+ patternTransform="matrix(0.375,0,0,0.375,379,400)"
+ patternUnits="userSpaceOnUse"
+ id="white-spots-2"
+ height="32">
+ <g
+ id="white-spot-3"
+ transform="translate(-484.3997,-513.505)"
+ inkscape:label="#g3035">
+ <path
+ d="M 509.39967,529.50504 C 509.39967,534.47304 505.36767,538.50504 500.39967,538.50504 C 495.43167,538.50504 491.39967,534.47304 491.39967,529.50504 C 491.39967,524.53704 495.43167,520.50504 500.39967,520.50504 C 505.36767,520.50504 509.39967,524.53704 509.39967,529.50504 z "
+ sodipodi:nodetypes="czzzz"
+ id="path3033-3"
+ style="opacity:0.3;fill:white" />
+ </g>
+ </pattern>
+ <pattern
+ xlink:href="#white-spots-2"
+ id="pattern4015-1"
+ patternTransform="matrix(0.375,0,0,0.375,379,437.7952)" />
+ <pattern
+ xlink:href="#pattern4015-1"
+ id="pattern4062-3"
+ patternTransform="matrix(0.349912,0,0,0.4713685,-128.11646,125.58505)" />
+ <pattern
+ xlink:href="#pattern4062-3"
+ id="pattern6159"
+ patternTransform="matrix(0.349912,0,0,0.5273435,0.6511897,640.41412)" />
+ <pattern
+ xlink:href="#pattern6159"
+ id="pattern2509"
+ patternTransform="matrix(0.3312501,0,0,0.4963236,0.6164603,638.17579)" />
+ <pattern
+ xlink:href="#pattern2509"
+ id="pattern2491"
+ patternTransform="matrix(0.9061767,0,0,0.9061767,-1355.2548,122.94984)" />
+ <pattern
+ xlink:href="#pattern2491"
+ id="pattern18092"
+ patternTransform="matrix(1.0388269,0,0,1.7996829,-2437.2069,574.63695)" />
+ <filter
+ width="1.1863066"
+ x="-0.093153283"
+ y="-0.29140311"
+ id="filter16947"
+ height="1.5828062">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur16949"
+ stdDeviation="1.5518534" />
+ </filter>
+ <linearGradient
+ id="linearGradient3931">
+ <stop
+ id="stop3933"
+ style="stop-color:#2e3436;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3935"
+ style="stop-color:#2e3436;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter3968">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3970"
+ stdDeviation="0.10634363" />
+ </filter>
+ <linearGradient
+ id="linearGradient7322">
+ <stop
+ id="stop7324"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7326"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="11.46"
+ y1="19.450001"
+ x2="214.33"
+ x1="224.31"
+ gradientUnits="userSpaceOnUse"
+ id="XMLID_419_">
+ <stop
+ id="s1903"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1905"
+ style="stop-color:#6d6d6d;stop-opacity:1"
+ offset="0.33000001" />
+ <stop
+ id="s1907"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#404040"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E9E9E9"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.2448103"
+ x="-0.12240516"
+ y="-0.16475213"
+ id="filter7696"
+ height="1.3295043">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur7698"
+ stdDeviation="0.82797329" />
+ </filter>
+ <clipPath
+ id="clipPath17035">
+ <path
+ d="M 9,14.568887 L 9,20.015678 C 9,23.815678 15.49,26.895678 23.49,26.895678 C 31.49,26.895678 37.97,23.815678 37.97,20.015678 L 37.97,14.568887 L 9,14.568887 z"
+ id="path17037"
+ style="opacity:1;fill:#2e3436" />
+ </clipPath>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="lg1900">
+ <stop
+ id="s1902"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="s1906"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.279999"
+ y1="33.279999"
+ x2="215.42999"
+ x1="228.35001"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7484">
+ <stop
+ id="stop7486"
+ style="stop-color:#858882;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3939"
+ style="stop-color:#6e6f6b;stop-opacity:1"
+ offset="0.36000001" />
+ <stop
+ id="stop7490"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#575757"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.33" />
+ <a:midPointStop
+ style="stop-color:#6D6D6D"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#D3D3D3"
+ offset="1" />
+ </linearGradient>
+ <filter
+ width="1.18705"
+ x="-0.093524978"
+ y="-0.13087288"
+ id="filter3605"
+ height="1.2617458">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3607"
+ stdDeviation="8.2187489" />
+ </filter>
+ <linearGradient
+ id="linearGradient3534">
+ <stop
+ id="stop3536"
+ style="stop-color:#888a85;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3538"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient3335">
+ <stop
+ id="stop3337"
+ style="stop-color:#555753;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop3339"
+ style="stop-color:#eeeeec;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7126">
+ <stop
+ id="stop7128"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7130"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="145.59"
+ y1="162.60001"
+ x2="609.32001"
+ x1="592.31"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient16859">
+ <stop
+ id="stop16861"
+ style="stop-color:#f2f2f2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop16863"
+ style="stop-color:#b5b5b5;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#F2F2F2"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#E5E5E5"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="170.16"
+ y1="170.16"
+ x2="613.84003"
+ x1="601.48999"
+ gradientUnits="userSpaceOnUse"
+ id="x5002_">
+ <stop
+ id="stop29134"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29136"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0.2" />
+ <stop
+ id="stop29138"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.20" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#999999"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(1.12,0,0,1.12,-649.08,-160.62)"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="x5004_">
+ <stop
+ id="stop29157"
+ style="stop-color:#d9d9d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop29159"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0" />
+ <a:midPointStop
+ style="stop-color:#D9D9D9"
+ offset="0.5" />
+ <a:midPointStop
+ style="stop-color:#FFFFFF"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ gradientTransform="matrix(2.0005884,0,0,0.5009881,-214.15585,-66.462114)"
+ xlink:href="#linearGradient3987-4"
+ cx="146.23947"
+ cy="830.26575"
+ gradientUnits="userSpaceOnUse"
+ fy="830.26575"
+ fx="146.23947"
+ id="radialGradient4153"
+ r="265" />
+ <filter
+ width="1.0437647"
+ x="-0.021882353"
+ y="-0.10145455"
+ id="filter5126"
+ height="1.2029091">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5128"
+ stdDeviation="1.1579412" />
+ </filter>
+ <linearGradient
+ x1="500.71109"
+ y1="244.95538"
+ gradientTransform="matrix(1.2450981,0,0,1.2450981,-93.721513,10.007569)"
+ xlink:href="#linearGradient3518"
+ x2="500.71109"
+ y2="311.5975"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5932" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient5934" />
+ <linearGradient
+ x1="529.6897"
+ y1="294.61005"
+ gradientTransform="matrix(0.944077,0,0,1.2450981,37.731315,12.80904)"
+ xlink:href="#linearGradient5721"
+ x2="529.6897"
+ y2="264.5452"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6596" />
+ <linearGradient
+ x1="277.90814"
+ y1="371.49814"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,84.01832,-264.05611)"
+ xlink:href="#linearGradient6075"
+ x2="257.22992"
+ y2="371.83398"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2462" />
+ <linearGradient
+ x1="294.08597"
+ y1="382.31308"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,-137.09795,-315.67491)"
+ xlink:href="#linearGradient6075"
+ x2="246.338"
+ y2="383.08859"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient2466" />
+ <linearGradient
+ x1="231.07658"
+ y1="33.29771"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#linearGradient7484"
+ x2="212.93233"
+ y2="33.29771"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3570" />
+ <linearGradient
+ x1="240.48146"
+ y1="37.113522"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ xlink:href="#XMLID_419_"
+ x2="208.65283"
+ y2="18.02874"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3574" />
+ <radialGradient
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ xlink:href="#linearGradient7322"
+ cx="22.315165"
+ cy="28.67547"
+ gradientUnits="userSpaceOnUse"
+ fy="28.67547"
+ fx="22.315165"
+ id="radialGradient3576"
+ r="14.494606" />
+ <linearGradient
+ x1="592.20001"
+ y1="156.45"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5004_"
+ x2="609.98999"
+ y2="174.23"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3614" />
+ <linearGradient
+ x1="600.74371"
+ y1="170.77318"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#x5002_"
+ x2="613.84003"
+ y2="170.16"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3616" />
+ <linearGradient
+ x1="599.39917"
+ y1="158.12231"
+ gradientTransform="matrix(0.2898773,0.8565172,1.0818369,-0.2295031,-323.82326,-445.09822)"
+ xlink:href="#linearGradient16859"
+ x2="605.57886"
+ y2="151.51437"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3618" />
+ <radialGradient
+ gradientTransform="matrix(1,0,0,0.4522501,0,18.71769)"
+ xlink:href="#linearGradient7126"
+ cx="29.256323"
+ cy="34.171967"
+ gradientUnits="userSpaceOnUse"
+ fy="34.171967"
+ fx="29.256323"
+ id="radialGradient3620"
+ r="20.016653" />
+ <linearGradient
+ x1="500.77838"
+ y1="78.13385"
+ gradientTransform="matrix(0.6231149,0,0,0.7353233,-280.80293,-9.807703)"
+ xlink:href="#linearGradient3335"
+ x2="500.77838"
+ y2="39.879005"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3622" />
+ <linearGradient
+ x1="37.213612"
+ y1="26.265114"
+ gradientTransform="matrix(0.9077599,0,0,0.9071973,3.9015111,3.6781471)"
+ xlink:href="#linearGradient3534"
+ x2="37.213612"
+ y2="41.366924"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3624" />
+ <radialGradient
+ xlink:href="#linearGradient7126"
+ cx="948"
+ cy="209.00021"
+ gradientUnits="userSpaceOnUse"
+ fy="209.00021"
+ fx="948"
+ id="radialGradient3626"
+ r="24" />
+ <radialGradient
+ gradientTransform="matrix(-5.1508322e-2,0.977161,-2.2237504,-0.1172188,164.9592,23.790713)"
+ xlink:href="#linearGradient3931"
+ cx="31.988766"
+ cy="61.259193"
+ gradientUnits="userSpaceOnUse"
+ fy="61.259193"
+ fx="31.988766"
+ id="radialGradient3628"
+ r="19.990965" />
+ <filter
+ x="-0.11675928"
+ width="1.2335186"
+ y="-0.25814009"
+ id="filter3712"
+ height="1.5162802">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur3714"
+ stdDeviation="2.4864777" />
+ </filter>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3746" />
+ <linearGradient
+ x1="277.4801"
+ y1="411.73941"
+ gradientTransform="matrix(0.9998681,1.6239512e-2,-1.6239512e-2,0.9998681,19.68022,-347.67491)"
+ xlink:href="#linearGradient6075"
+ x2="252.93071"
+ y2="412.13812"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient3766" />
+ <linearGradient
+ id="linearGradient5931-9">
+ <stop
+ id="stop5933-5"
+ style="stop-color:#a2a2a2;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5935-4"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-2">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8393-7"
+ stdDeviation="0.23516584" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-1">
+ <stop
+ id="stop5799-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5801-9"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-7">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10670-6"
+ stdDeviation="0.40041338" />
+ </filter>
+ <linearGradient
+ id="linearGradient10494-6">
+ <stop
+ id="stop10496-8"
+ style="stop-color:#ffffff;stop-opacity:0.75490195"
+ offset="0" />
+ <stop
+ id="stop10498-5"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-2">
+ <stop
+ id="stop5543-2"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5545-1"
+ style="stop-color:#7bd5ff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-4">
+ <stop
+ id="stop5559-2"
+ style="stop-color:#0093d9;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5561-3"
+ style="stop-color:#7bd5ff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8317">
+ <stop
+ id="stop8319"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8321"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ id="filter9827-6"
+ height="1.233731">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9829-1"
+ stdDeviation="13.567379" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-5">
+ <stop
+ id="stop5815-2"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5817-7"
+ style="stop-color:#eeeeee;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ id="filter5917-1"
+ height="1.3127669">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur5919-1"
+ stdDeviation="0.60257196" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-5">
+ <stop
+ id="stop5807-1"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5809-7"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <filter
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ id="filter9847-4"
+ height="1.4388067">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur9849-5"
+ stdDeviation="1.7113675" />
+ </filter>
+ <linearGradient
+ id="linearGradient7584-8">
+ <stop
+ id="stop7586-8"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7588-2"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ gradientTransform="matrix(0.9481763,0,0,0.9481763,560.55843,-440.53343)"
+ xlink:href="#linearGradient7584-8"
+ x2="20.999998"
+ y2="595.06226"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7733-4" />
+ <mask
+ id="mask7729-0">
+ <rect
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ width="103.35121"
+ id="rect7731-9"
+ style="fill:url(#linearGradient7733-4);fill-opacity:1" />
+ </mask>
+ <filter
+ id="filter10534">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10536"
+ stdDeviation="0.50670758" />
+ </filter>
+ <linearGradient
+ id="linearGradient10554">
+ <stop
+ id="stop10556"
+ style="stop-color:#a8a8a8;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10558"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7808">
+ <stop
+ id="stop7810"
+ style="stop-color:#ababab;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7812"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7359">
+ <stop
+ id="stop7361"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7363"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6478">
+ <stop
+ id="stop6480"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6482"
+ style="stop-color:#d3d7cf;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414">
+ <stop
+ id="stop6416"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6418"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685">
+ <stop
+ id="stop5687"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5689"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566">
+ <stop
+ id="stop10568"
+ style="stop-color:#666666;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop10570"
+ style="stop-color:#888a85;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur10488"
+ stdDeviation="0.36649474" />
+ </filter>
+ <filter
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ id="filter8323"
+ height="1.0124482">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8325"
+ stdDeviation="0.15442502" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669">
+ <stop
+ id="stop5671"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5673"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351">
+ <feGaussianBlur
+ inkscape:collect="always"
+ id="feGaussianBlur8353"
+ stdDeviation="0.21855907" />
+ </filter>
+ <linearGradient
+ id="linearGradient5677">
+ <stop
+ id="stop5679"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5681"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565">
+ <stop
+ id="stop5567"
+ style="stop-color:#999999;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5569"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573">
+ <stop
+ id="stop5575"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576">
+ <stop
+ id="stop7578"
+ style="stop-color:#898989;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop7580"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient8481">
+ <stop
+ id="stop8483"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop8485"
+ style="stop-color:#ffffff;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ gradientTransform="translate(0,-337)"
+ xlink:href="#linearGradient8481"
+ x2="596.48529"
+ y2="460.97229"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7574" />
+ <mask
+ id="mask7570">
+ <rect
+ height="111"
+ x="536"
+ y="60.362179"
+ width="86"
+ id="rect7572"
+ style="fill:url(#linearGradient7574);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="234.81"
+ y1="33.279999"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ xlink:href="#lg1900"
+ x2="225.54341"
+ y2="33.279999"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient6392" />
+ <linearGradient
+ id="linearGradient6398">
+ <stop
+ id="stop6400"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ x1="33.149971"
+ y1="49.1087"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7576"
+ x2="46.277946"
+ y2="19.512289"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7453" />
+ <linearGradient
+ x1="21.322929"
+ y1="44.46735"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="34.585835"
+ y2="30.312105"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7455" />
+ <linearGradient
+ x1="17.246363"
+ y1="51.641129"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7457" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7459" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7461" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7463" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7465" />
+ <linearGradient
+ x1="42.074207"
+ y1="42.648251"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,59.28011)"
+ xlink:href="#linearGradient5685"
+ x2="42.382099"
+ y2="30.0221"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7467" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6414"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7469" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7471" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient6398"
+ x2="610.89215"
+ y2="124.13597"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7473" />
+ <linearGradient
+ x1="603.48352"
+ y1="145.48944"
+ gradientTransform="translate(0,-29.000003)"
+ xlink:href="#linearGradient6414"
+ x2="603.48352"
+ y2="141.11491"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7475" />
+ <linearGradient
+ x1="41.126476"
+ y1="36.09766"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,55.780107)"
+ xlink:href="#linearGradient6478"
+ x2="44.599358"
+ y2="35.376236"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7477" />
+ <linearGradient
+ x1="53.072731"
+ y1="36.17104"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,64.680114)"
+ xlink:href="#linearGradient5565"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7479" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7481"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7483"
+ r="8.3085051" />
+ <linearGradient
+ x1="37.260498"
+ y1="27.37009"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient7808"
+ x2="17.47529"
+ y2="37.98819"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7485" />
+ <linearGradient
+ x1="27.247866"
+ y1="46.597134"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5573"
+ x2="20.776503"
+ y2="33.722939"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7487" />
+ <linearGradient
+ x1="16.030468"
+ y1="50.84045"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5565"
+ x2="6.7207007"
+ y2="25.829727"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7489" />
+ <linearGradient
+ x1="19.892136"
+ y1="35.069866"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5677"
+ x2="13.912579"
+ y2="38.493023"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7491" />
+ <linearGradient
+ x1="23.121851"
+ y1="33.643894"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient5669"
+ x2="48.511173"
+ y2="28.369732"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7493" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7495" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7497" />
+ <linearGradient
+ x1="48.126881"
+ y1="35.527008"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient10554"
+ x2="35.096169"
+ y2="33.830193"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7499" />
+ <linearGradient
+ x1="599.35095"
+ y1="96.853073"
+ xlink:href="#linearGradient5565"
+ x2="601.25159"
+ y2="112.46191"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7501" />
+ <linearGradient
+ x1="605.41681"
+ y1="103.70177"
+ xlink:href="#linearGradient10566"
+ x2="606.94116"
+ y2="113.69411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7503" />
+ <linearGradient
+ x1="603.25"
+ y1="140.36218"
+ xlink:href="#linearGradient6414"
+ x2="603.7171"
+ y2="144.12111"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7505" />
+ <linearGradient
+ x1="45.470558"
+ y1="35.187798"
+ gradientTransform="matrix(0.6503762,1.9259748,3.1308472,-0.7169076,461.93064,84.78011)"
+ xlink:href="#linearGradient6478"
+ x2="40.255276"
+ y2="36.286098"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7507" />
+ <linearGradient
+ x1="55.874207"
+ y1="35.072224"
+ gradientTransform="matrix(0.5872951,1.7391712,2.827181,-0.6473735,475.35417,90.180114)"
+ xlink:href="#linearGradient5565"
+ x2="37.686401"
+ y2="33.083126"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7509" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7511"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7513"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7515"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7517"
+ r="8.3085051" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7519" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7521" />
+ <linearGradient
+ x1="802.88586"
+ y1="70.580994"
+ xlink:href="#linearGradient8317"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7523" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7525" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7527"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7529"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7531" />
+ <linearGradient
+ x1="-32.349804"
+ y1="68.874535"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5805-5"
+ x2="-33.10799"
+ y2="66.058411"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7533" />
+ <linearGradient
+ x1="-31.529013"
+ y1="73.162025"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5813-5"
+ x2="-32.08812"
+ y2="69.928268"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7535" />
+ <linearGradient
+ x1="498.3277"
+ y1="143.48891"
+ xlink:href="#linearGradient8317"
+ x2="553.82892"
+ y2="87.987663"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7537" />
+ <linearGradient
+ x1="806.19238"
+ y1="67.561554"
+ xlink:href="#linearGradient5931-9"
+ x2="777.69415"
+ y2="57.769058"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7539" />
+ <linearGradient
+ x1="-33.330555"
+ y1="64.869919"
+ gradientTransform="matrix(1.5142659,7.3025328e-2,0,1.5018504,580.58851,46.687445)"
+ xlink:href="#linearGradient5557-4"
+ x2="-33.330555"
+ y2="19.587532"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7541" />
+ <radialGradient
+ gradientTransform="matrix(1.2348139,-3.1568708,3.7183643,-0.8413672,374.017,118.06465)"
+ xlink:href="#linearGradient5541-2"
+ cx="-11.992359"
+ cy="49.12331"
+ gradientUnits="userSpaceOnUse"
+ fy="49.12331"
+ fx="-11.992359"
+ id="radialGradient7543"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(-0.2726891,1.9344663,-1.6230761,-0.2287946,890.03812,-924.13616)"
+ xlink:href="#linearGradient10494-6"
+ cx="548.88446"
+ cy="124.24792"
+ gradientUnits="userSpaceOnUse"
+ fy="124.24792"
+ fx="548.88446"
+ id="radialGradient7545"
+ r="15.172215" />
+ <linearGradient
+ x1="-50.000641"
+ y1="35.501328"
+ xlink:href="#linearGradient5797-1"
+ x2="-17.546682"
+ y2="57.699898"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient7547" />
+ <radialGradient
+ gradientTransform="matrix(-2.5380798,-1.9868115,-7.6428562,-0.5295237,895.73911,119.97539)"
+ xlink:href="#linearGradient5541-2"
+ cx="-9.7009583"
+ cy="49.478912"
+ gradientUnits="userSpaceOnUse"
+ fy="49.478912"
+ fx="-9.7009583"
+ id="radialGradient7549"
+ r="9.4923868" />
+ <radialGradient
+ gradientTransform="matrix(0.5604948,1.2174777,3.3361275,-0.1439944,-164.90878,-535.94519)"
+ xlink:href="#linearGradient10494-6"
+ cx="544.67078"
+ cy="121.54527"
+ gradientUnits="userSpaceOnUse"
+ fy="121.54527"
+ fx="544.67078"
+ id="radialGradient7551"
+ r="15.172215" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7553"
+ r="8.3085051" />
+ <radialGradient
+ gradientTransform="matrix(0.8510635,0,0,0.8510635,71.9558,39.415337)"
+ xlink:href="#linearGradient7359"
+ cx="483.13071"
+ cy="264.64523"
+ gradientUnits="userSpaceOnUse"
+ fy="264.64523"
+ fx="483.13071"
+ id="radialGradient7555"
+ r="8.3085051" />
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2MendZ"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2MendZ"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path5723"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart9"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart9"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path5720"
+ style="stroke-linejoin:round;font-size:12.0;fill-rule:evenodd;stroke:#cc0000;stroke-width:0.62500000;fill:#cc0000" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Lstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Lstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(1.1) translate(1,0)"
+ id="path4722"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mstart"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mstart"
+ style="overflow:visible">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) translate(0,0)"
+ id="path4728"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow1Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow1Mend"
+ style="overflow:visible;">
+ <path
+ d="M 0.0,0.0 L 5.0,-5.0 L -12.5,0.0 L 5.0,5.0 L 0.0,0.0 z "
+ transform="scale(0.4) rotate(180) translate(10,0)"
+ id="path4713"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none;" />
+ </marker>
+ <marker
+ refX="0.0"
+ inkscape:stockid="Arrow2Mend"
+ refY="0.0"
+ orient="auto"
+ id="Arrow2Mend"
+ style="overflow:visible;">
+ <path
+ d="M 8.7185878,4.0337352 L -2.2072895,0.016013256 L 8.7185884,-4.0017078 C 6.9730900,-1.6296469 6.9831476,1.6157441 8.7185878,4.0337352 z "
+ transform="scale(0.6) rotate(180) translate(0,0)"
+ id="path4731"
+ style="font-size:12.0;fill-rule:evenodd;stroke-width:0.62500000;stroke-linejoin:round;" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="marker13197"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleInM">
+ <path
+ transform="scale(-0.4)"
+ style="fill-rule:evenodd;stroke:#000000;stroke-width:1.0pt;marker-start:none"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path13100" />
+ </marker>
+ <mask
+ id="mask7570-2-4">
+ <rect
+ width="86"
+ height="111"
+ x="536"
+ y="60.362179"
+ id="rect7572-2-4"
+ style="fill:url(#linearGradient7574-6-8);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="596.48529"
+ y1="416.72614"
+ x2="596.48529"
+ y2="460.97229"
+ id="linearGradient7574-6-8"
+ xlink:href="#linearGradient8481-3-6"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-337)" />
+ <linearGradient
+ id="linearGradient8481-3-6">
+ <stop
+ id="stop8483-80-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8485-3-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient7576-1-9">
+ <stop
+ id="stop7578-3-8"
+ style="stop-color: rgb(137, 137, 137); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7580-6-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-77-3">
+ <stop
+ id="stop5575-4-4"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5577-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5565-0-7">
+ <stop
+ id="stop5567-1-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5569-2-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5677-53-3">
+ <stop
+ id="stop5679-2-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5681-1-9"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8351-5-6"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur8353-2-5" />
+ </filter>
+ <linearGradient
+ id="linearGradient5669-6-4">
+ <stop
+ id="stop5671-0-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5673-7-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8323-5-4"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur8325-5-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient15360">
+ <stop
+ id="stop15362"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15364"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10486-9-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur10488-0-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient10566-93-6">
+ <stop
+ id="stop10568-8-1"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-5"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5685-1-1">
+ <stop
+ id="stop5687-8-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5689-7-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6414-3-4">
+ <stop
+ id="stop6416-21-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6418-9-7"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15381">
+ <stop
+ id="stop15383"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15385"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-9-1">
+ <stop
+ id="stop6400-0-7"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6402-3-2"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient15392">
+ <stop
+ id="stop15394"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15396"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="35.376236"
+ x2="44.599358"
+ y1="36.09766"
+ x1="41.126476"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12764-0"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient6478-4-1">
+ <stop
+ id="stop6480-2-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop6482-6-9"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="36.17104"
+ x1="53.072731"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12766-1"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15403">
+ <stop
+ id="stop15405"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15407"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12768-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7359-4-3">
+ <stop
+ id="stop7361-9-2"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12770-2"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15414">
+ <stop
+ id="stop15416"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15418"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="37.98819"
+ x2="17.47529"
+ y1="27.37009"
+ x1="37.260498"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12772-2"
+ xlink:href="#linearGradient7808-7-8"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient7808-7-8">
+ <stop
+ id="stop7810-7-1"
+ style="stop-color: rgb(171, 171, 171); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7812-0-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.722939"
+ x2="20.776503"
+ y1="46.597134"
+ x1="27.247866"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12774-7"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15425">
+ <stop
+ id="stop15427"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15429"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="50.84045"
+ x1="16.030468"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12776-5"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15432">
+ <stop
+ id="stop15434"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15436"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12778-6"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15439">
+ <stop
+ id="stop15441"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15443"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15445"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.21855907"
+ id="feGaussianBlur15447" />
+ </filter>
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12780-2"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15450">
+ <stop
+ id="stop15452"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15454"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15456"
+ x="-0.16664496"
+ width="1.3332899"
+ y="-0.0062240968"
+ height="1.0124482"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.15442502"
+ id="feGaussianBlur15458" />
+ </filter>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12782-6"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15461">
+ <stop
+ id="stop15463"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15465"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15467"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15469" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12784-4"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15472">
+ <stop
+ id="stop15474"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15476"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.830193"
+ x2="35.096169"
+ y1="35.527008"
+ x1="48.126881"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12786-7"
+ xlink:href="#linearGradient10554-1-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient10554-1-4">
+ <stop
+ id="stop10556-8-3"
+ style="stop-color: rgb(168, 168, 168); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10558-7-7"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12788-0"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15483">
+ <stop
+ id="stop15485"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15487"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter15489"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.36649474"
+ id="feGaussianBlur15491" />
+ </filter>
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12790-5"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15494">
+ <stop
+ id="stop15496"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15498"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="144.12111"
+ x2="603.7171"
+ y1="140.36218"
+ x1="603.25"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12792-4"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15501">
+ <stop
+ id="stop15503"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15505"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="36.286098"
+ x2="40.255276"
+ y1="35.187798"
+ x1="45.470558"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12794-3"
+ xlink:href="#linearGradient6478-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15508">
+ <stop
+ id="stop15510"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15512"
+ style="stop-color: rgb(211, 215, 207); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="33.083126"
+ x2="37.686401"
+ y1="35.072224"
+ x1="55.874207"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient12796-7"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15515">
+ <stop
+ id="stop15517"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15519"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10534-4-3"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.50670758"
+ id="feGaussianBlur10536-7-8" />
+ </filter>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12798-0"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15524">
+ <stop
+ id="stop15526"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15528"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12800-5"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15531">
+ <stop
+ id="stop15533"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15535"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12802-6"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15538">
+ <stop
+ id="stop15540"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15542"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient12804-8"
+ xlink:href="#linearGradient7359-4-3"
+ inkscape:collect="always" />
+ <linearGradient
+ id="linearGradient15545">
+ <stop
+ id="stop15547"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop15549"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-5">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-2"
+ style="fill:url(#linearGradient7733-2);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-2"
+ xlink:href="#linearGradient7584-0"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-0">
+ <stop
+ id="stop7586-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-43"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-2" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-8">
+ <stop
+ id="stop5807-8"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-1"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-5"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-6" />
+ </filter>
+ <filter
+ id="filter9827-2"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-3" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-9">
+ <stop
+ id="stop8319-5-1"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16018">
+ <stop
+ id="stop16020"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16022"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-8">
+ <stop
+ id="stop5559-1"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-8"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-1">
+ <stop
+ id="stop5543-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-9"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-0">
+ <stop
+ id="stop10496-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-1"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-8" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-0">
+ <stop
+ id="stop5799-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-6"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-0"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-0" />
+ </filter>
+ <filter
+ id="filter16044"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur16046" />
+ </filter>
+ <linearGradient
+ id="linearGradient16049">
+ <stop
+ id="stop16051"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16053"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16055"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur16057" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-8">
+ <stop
+ id="stop5815-5"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-4"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16064">
+ <stop
+ id="stop16066"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16068"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-4">
+ <stop
+ id="stop5933-8"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16075">
+ <stop
+ id="stop16077"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16079"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16082">
+ <stop
+ id="stop16084"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16086"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16089">
+ <stop
+ id="stop16091"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16093"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16095"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur16097" />
+ </filter>
+ <linearGradient
+ id="linearGradient16100">
+ <stop
+ id="stop16102"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16104"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter16106"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur16108" />
+ </filter>
+ <linearGradient
+ id="linearGradient16111">
+ <stop
+ id="stop16113"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16115"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16118">
+ <stop
+ id="stop16120"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop16122"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-4"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-2">
+ <stop
+ id="stop7361-9-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient16131">
+ <stop
+ id="stop16133"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop16135"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <mask
+ id="mask7729-57">
+ <rect
+ width="103.35121"
+ height="123.26292"
+ x="483.75613"
+ y="71.481766"
+ id="rect7731-0"
+ style="fill:url(#linearGradient7733-7);fill-opacity:1" />
+ </mask>
+ <linearGradient
+ x1="20.999998"
+ y1="539.95715"
+ x2="20.999998"
+ y2="595.06226"
+ id="linearGradient7733-7"
+ xlink:href="#linearGradient7584-00"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.948176,0,0,0.948176,560.558,-440.533)" />
+ <linearGradient
+ id="linearGradient7584-00">
+ <stop
+ id="stop7586-54"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7588-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter9847-44"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur9849-0" />
+ </filter>
+ <linearGradient
+ id="linearGradient5805-2">
+ <stop
+ id="stop5807-5"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5809-0"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter5917-3"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur5919-8" />
+ </filter>
+ <filter
+ id="filter9827-1"
+ x="-0.12330729"
+ width="1.2466146"
+ y="-0.11686549"
+ height="1.233731"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="13.567379"
+ id="feGaussianBlur9829-4" />
+ </filter>
+ <linearGradient
+ id="linearGradient8317-3-3">
+ <stop
+ id="stop8319-5-0"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop8321-8-4"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17377">
+ <stop
+ id="stop17379"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17381"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5557-0">
+ <stop
+ id="stop5559-9"
+ style="stop-color: rgb(0, 147, 217); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5561-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5541-7">
+ <stop
+ id="stop5543-5"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5545-0"
+ style="stop-color: rgb(123, 213, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10494-9">
+ <stop
+ id="stop10496-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop10498-8"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter10668-4"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur10670-9" />
+ </filter>
+ <linearGradient
+ id="linearGradient5797-6">
+ <stop
+ id="stop5799-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5801-0"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter8391-8"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur8393-3" />
+ </filter>
+ <filter
+ id="filter17403"
+ x="-0.12604854"
+ width="1.2520971"
+ y="-0.21940336"
+ height="1.4388067"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="1.7113675"
+ id="feGaussianBlur17405" />
+ </filter>
+ <linearGradient
+ id="linearGradient17408">
+ <stop
+ id="stop17410"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17412"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17414"
+ x="-0.09743309"
+ width="1.1948662"
+ y="-0.15638345"
+ height="1.3127669"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.60257196"
+ id="feGaussianBlur17416" />
+ </filter>
+ <linearGradient
+ id="linearGradient5813-2">
+ <stop
+ id="stop5815-6"
+ style="stop-color: rgb(153, 153, 153); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5817-71"
+ style="stop-color: rgb(238, 238, 238); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17423">
+ <stop
+ id="stop17425"
+ style="stop-color: rgb(204, 204, 204); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17427"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5931-0">
+ <stop
+ id="stop5933-52"
+ style="stop-color: rgb(162, 162, 162); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop5935-3"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient6398-4">
+ <stop
+ id="stop6400-7"
+ style="stop-color:#333333;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop6402-8"
+ style="stop-color:#555753;stop-opacity:0"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient10566-93-2">
+ <stop
+ id="stop10568-8-6"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop10570-2-8"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17442">
+ <stop
+ id="stop17444"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17446"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17448"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.40041338"
+ id="feGaussianBlur17450" />
+ </filter>
+ <linearGradient
+ id="linearGradient17453">
+ <stop
+ id="stop17455"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17457"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter17459"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ inkscape:collect="always"
+ stdDeviation="0.23516584"
+ id="feGaussianBlur17461" />
+ </filter>
+ <linearGradient
+ id="linearGradient17464">
+ <stop
+ id="stop17466"
+ style="stop-color: rgb(102, 102, 102); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17468"
+ style="stop-color: rgb(136, 138, 133); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17471">
+ <stop
+ id="stop17473"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0.754902;"
+ offset="0" />
+ <stop
+ id="stop17475"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <filter
+ id="filter7106-2"
+ color-interpolation-filters="sRGB">
+ <feGaussianBlur
+ id="feGaussianBlur7108-2"
+ stdDeviation="0.51373373"
+ inkscape:collect="always" />
+ </filter>
+ <linearGradient
+ id="linearGradient7359-4-1">
+ <stop
+ id="stop7361-9-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop7363-3-5"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient17484">
+ <stop
+ id="stop17486"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 1;"
+ offset="0" />
+ <stop
+ id="stop17488"
+ style="stop-color: rgb(255, 255, 255); stop-opacity: 0;"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17846"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17848"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="70.580994"
+ x1="802.88586"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17850"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17852"
+ xlink:href="#linearGradient5557-0"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17854"
+ xlink:href="#linearGradient5541-7"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17856"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17858"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="66.058411"
+ x2="-33.10799"
+ y1="68.874535"
+ x1="-32.349804"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17860"
+ xlink:href="#linearGradient5805-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="69.928268"
+ x2="-32.08812"
+ y1="73.162025"
+ x1="-31.529013"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17862"
+ xlink:href="#linearGradient5813-2"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="87.987663"
+ x2="553.82892"
+ y1="143.48891"
+ x1="498.3277"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17864"
+ xlink:href="#linearGradient8317-3-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.769058"
+ x2="777.69415"
+ y1="67.561554"
+ x1="806.19238"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17866"
+ xlink:href="#linearGradient5931-0"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="19.587532"
+ x2="-33.330555"
+ y1="64.869919"
+ x1="-33.330555"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17868"
+ xlink:href="#linearGradient6398-4"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.12331"
+ fx="-11.992359"
+ cy="49.12331"
+ cx="-11.992359"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17870"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="124.24792"
+ fx="548.88446"
+ cy="124.24792"
+ cx="548.88446"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17872"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="57.699898"
+ x2="-17.546682"
+ y1="35.501328"
+ x1="-50.000641"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17874"
+ xlink:href="#linearGradient5797-6"
+ inkscape:collect="always" />
+ <radialGradient
+ r="9.4923868"
+ fy="49.478912"
+ fx="-9.7009583"
+ cy="49.478912"
+ cx="-9.7009583"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17876"
+ xlink:href="#linearGradient10566-93-2"
+ inkscape:collect="always" />
+ <radialGradient
+ r="15.172215"
+ fy="121.54527"
+ fx="544.67078"
+ cy="121.54527"
+ cx="544.67078"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17878"
+ xlink:href="#linearGradient10494-9"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17880"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <radialGradient
+ r="8.3085051"
+ fy="264.64523"
+ fx="483.13071"
+ cy="264.64523"
+ cx="483.13071"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ gradientUnits="userSpaceOnUse"
+ id="radialGradient17882"
+ xlink:href="#linearGradient7359-4-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="21.046715"
+ x2="29.061579"
+ y1="39.151588"
+ x1="17.585274"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17958"
+ xlink:href="#linearGradient7576-1-9"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.312105"
+ x2="34.585835"
+ y1="44.46735"
+ x1="21.322929"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17960"
+ xlink:href="#linearGradient5573-77-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="25.829727"
+ x2="6.7207007"
+ y1="51.641129"
+ x1="17.246363"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17962"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="38.493023"
+ x2="13.912579"
+ y1="35.069866"
+ x1="19.892136"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17964"
+ xlink:href="#linearGradient5677-53-3"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="28.369732"
+ x2="48.511173"
+ y1="33.643894"
+ x1="23.121851"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17966"
+ xlink:href="#linearGradient5669-6-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17968"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="113.69411"
+ x2="606.94116"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17970"
+ xlink:href="#linearGradient10566-93-6"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="30.0221"
+ x2="42.382099"
+ y1="42.648251"
+ x1="42.074207"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17972"
+ xlink:href="#linearGradient5685-1-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17974"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="112.46191"
+ x2="601.25159"
+ y1="96.853073"
+ x1="599.35095"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17976"
+ xlink:href="#linearGradient5565-0-7"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="124.13597"
+ x2="610.89215"
+ y1="103.70177"
+ x1="605.41681"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17978"
+ xlink:href="#linearGradient6398-9-1"
+ inkscape:collect="always" />
+ <linearGradient
+ y2="141.11491"
+ x2="603.48352"
+ y1="145.48944"
+ x1="603.48352"
+ gradientTransform="translate(0,-29)"
+ gradientUnits="userSpaceOnUse"
+ id="linearGradient17980"
+ xlink:href="#linearGradient6414-3-4"
+ inkscape:collect="always" />
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk"
+ refX="0.0"
+ refY="0.0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ transform="scale(0.4)"
+ style="marker-start:none;stroke:#0093d9;stroke-width:1.0pt;fill:#0093d9;fill-rule:evenodd"
+ d="M 5.77,0.0 L -2.88,5.0 L -2.88,-5.0 L 5.77,0.0 z "
+ id="path19935" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-6"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-0" />
+ </marker>
+ <marker
+ style="overflow:visible"
+ id="TriangleOutMk-8"
+ refX="0"
+ refY="0"
+ orient="auto"
+ inkscape:stockid="TriangleOutMk">
+ <path
+ inkscape:connector-curvature="0"
+ transform="scale(0.4,0.4)"
+ style="fill:#0093d9;fill-rule:evenodd;stroke:#0093d9;stroke-width:1pt;marker-start:none"
+ d="m 5.77,0 -8.65,5 0,-10 8.65,5 z"
+ id="path19935-2" />
+ </marker>
+ <linearGradient
+ id="linearGradient5573-1">
+ <stop
+ id="stop5575-3"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ id="linearGradient5573-1-3">
+ <stop
+ id="stop5575-3-9"
+ style="stop-color:#cccccc;stop-opacity:1"
+ offset="0" />
+ <stop
+ id="stop5577-0-7"
+ style="stop-color:#ffffff;stop-opacity:1"
+ offset="1" />
+ </linearGradient>
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1"
+ id="linearGradient22462"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22464"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22466"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22468"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22470"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22472"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22474"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1"
+ id="linearGradient22476"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22478"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22480"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9"
+ id="linearGradient22482"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22484"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22486"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22488"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22490"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22492"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7"
+ id="linearGradient22494"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77"
+ id="linearGradient22496"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22498"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53"
+ id="linearGradient22500"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6"
+ id="linearGradient22502"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22504"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22506"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1"
+ id="linearGradient22508"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22510"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="linearGradient22512"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3"
+ id="linearGradient22514"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4"
+ id="linearGradient22516"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0"
+ id="linearGradient22518"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22520"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22522"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22524"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22526"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7576-1-9"
+ id="linearGradient22528"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.585274"
+ y1="39.151588"
+ x2="29.061579"
+ y2="21.046715" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22530"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="21.322929"
+ y1="44.46735"
+ x2="34.585835"
+ y2="30.312105" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22532"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="17.246363"
+ y1="51.641129"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22534"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22536"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22538"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22540"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5685-1-1"
+ id="linearGradient22542"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,59.2801)"
+ x1="42.074207"
+ y1="42.648251"
+ x2="42.382099"
+ y2="30.0221" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22544"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22546"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398-9-1"
+ id="linearGradient22548"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="610.89215"
+ y2="124.13597" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22550"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="translate(0,-29)"
+ x1="603.48352"
+ y1="145.48944"
+ x2="603.48352"
+ y2="141.11491" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22552"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,55.7801)"
+ x1="41.126476"
+ y1="36.09766"
+ x2="44.599358"
+ y2="35.376236" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22554"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,64.6801)"
+ x1="53.072731"
+ y1="36.17104"
+ x2="35.096169"
+ y2="33.830193" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22556"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22558"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7808-7-8"
+ id="linearGradient22560"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="37.260498"
+ y1="27.37009"
+ x2="17.47529"
+ y2="37.98819" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-77-3"
+ id="linearGradient22562"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="27.247866"
+ y1="46.597134"
+ x2="20.776503"
+ y2="33.722939" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22564"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="16.030468"
+ y1="50.84045"
+ x2="6.7207007"
+ y2="25.829727" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5677-53-3"
+ id="linearGradient22566"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="19.892136"
+ y1="35.069866"
+ x2="13.912579"
+ y2="38.493023" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5669-6-4"
+ id="linearGradient22568"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="23.121851"
+ y1="33.643894"
+ x2="48.511173"
+ y2="28.369732" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22570"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22572"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10554-1-4"
+ id="linearGradient22574"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="48.126881"
+ y1="35.527008"
+ x2="35.096169"
+ y2="33.830193" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22576"
+ gradientUnits="userSpaceOnUse"
+ x1="599.35095"
+ y1="96.853073"
+ x2="601.25159"
+ y2="112.46191" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93-6"
+ id="linearGradient22578"
+ gradientUnits="userSpaceOnUse"
+ x1="605.41681"
+ y1="103.70177"
+ x2="606.94116"
+ y2="113.69411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6414-3-4"
+ id="linearGradient22580"
+ gradientUnits="userSpaceOnUse"
+ x1="603.25"
+ y1="140.36218"
+ x2="603.7171"
+ y2="144.12111" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6478-4-1"
+ id="linearGradient22582"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.650376,1.92597,3.13085,-0.716908,461.931,84.7801)"
+ x1="45.470558"
+ y1="35.187798"
+ x2="40.255276"
+ y2="36.286098" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5565-0-7"
+ id="linearGradient22584"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.587295,1.73917,2.82718,-0.647373,475.354,90.1801)"
+ x1="55.874207"
+ y1="35.072224"
+ x2="37.686401"
+ y2="33.083126" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22586"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22588"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22590"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-3"
+ id="radialGradient22592"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22594"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22596"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22598"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557"
+ id="linearGradient22600"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541"
+ id="radialGradient22602"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22604"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22606"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805"
+ id="linearGradient22608"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813"
+ id="linearGradient22610"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3"
+ id="linearGradient22612"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931"
+ id="linearGradient22614"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient6398"
+ id="linearGradient22616"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22618"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22620"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797"
+ id="linearGradient22622"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10566-93"
+ id="radialGradient22624"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494"
+ id="radialGradient22626"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22628"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4"
+ id="radialGradient22630"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22632"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22634"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22636"
+ gradientUnits="userSpaceOnUse"
+ x1="802.88586"
+ y1="70.580994"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22638"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22640"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22642"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22644"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5805-8"
+ id="linearGradient22646"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-32.349804"
+ y1="68.874535"
+ x2="-33.10799"
+ y2="66.058411" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5813-8"
+ id="linearGradient22648"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-31.529013"
+ y1="73.162025"
+ x2="-32.08812"
+ y2="69.928268" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient8317-3-9"
+ id="linearGradient22650"
+ gradientUnits="userSpaceOnUse"
+ x1="498.3277"
+ y1="143.48891"
+ x2="553.82892"
+ y2="87.987663" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5931-4"
+ id="linearGradient22652"
+ gradientUnits="userSpaceOnUse"
+ x1="806.19238"
+ y1="67.561554"
+ x2="777.69415"
+ y2="57.769058" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5557-8"
+ id="linearGradient22654"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ x1="-33.330555"
+ y1="64.869919"
+ x2="-33.330555"
+ y2="19.587532" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22656"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.23481,-3.15687,3.71836,-0.841367,374.017,118.065)"
+ cx="-11.992359"
+ cy="49.12331"
+ fx="-11.992359"
+ fy="49.12331"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22658"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-0.272689,1.93447,-1.62308,-0.228795,890.038,-924.136)"
+ cx="548.88446"
+ cy="124.24792"
+ fx="548.88446"
+ fy="124.24792"
+ r="15.172215" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5797-0"
+ id="linearGradient22660"
+ gradientUnits="userSpaceOnUse"
+ x1="-50.000641"
+ y1="35.501328"
+ x2="-17.546682"
+ y2="57.699898" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5541-1"
+ id="radialGradient22662"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(-2.53808,-1.98681,-7.64286,-0.529524,895.739,119.975)"
+ cx="-9.7009583"
+ cy="49.478912"
+ fx="-9.7009583"
+ fy="49.478912"
+ r="9.4923868" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient10494-0"
+ id="radialGradient22664"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.560495,1.21748,3.33613,-0.143994,-164.909,-535.945)"
+ cx="544.67078"
+ cy="121.54527"
+ fx="544.67078"
+ fy="121.54527"
+ r="15.172215" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22666"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7359-4-2"
+ id="radialGradient22668"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(0.851063,0,0,0.851063,71.9558,39.4153)"
+ cx="483.13071"
+ cy="264.64523"
+ fx="483.13071"
+ fy="264.64523"
+ r="8.3085051" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573"
+ id="linearGradient22670"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1"
+ id="linearGradient22672"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient5573-1-3"
+ id="linearGradient22674"
+ gradientUnits="userSpaceOnUse"
+ x1="71"
+ y1="-130.55569"
+ x2="188"
+ y2="-130.55569" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7484-3"
+ id="linearGradient22700"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="231.07658"
+ y1="33.29771"
+ x2="212.93233"
+ y2="33.29771" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22702"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#XMLID_419_-7"
+ id="linearGradient22704"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.2,-5.2)"
+ x1="240.48146"
+ y1="37.113522"
+ x2="208.65283"
+ y2="18.02874" />
+ <radialGradient
+ inkscape:collect="always"
+ xlink:href="#linearGradient7322-1"
+ id="radialGradient22706"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.9021006,0,0,0.538973,-18.842698,6.3225458)"
+ cx="22.315165"
+ cy="28.67547"
+ fx="22.315165"
+ fy="28.67547"
+ r="14.494606" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient22752"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4754"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ <linearGradient
+ inkscape:collect="always"
+ xlink:href="#lg1900-1"
+ id="linearGradient4778"
+ gradientUnits="userSpaceOnUse"
+ gradientTransform="matrix(1.33,0,0,1.31,-274.61189,-4.9345764)"
+ x1="234.81"
+ y1="33.279999"
+ x2="225.54341"
+ y2="33.279999" />
+ </defs>
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ inkscape:label="Layer 1"
+ inkscape:groupmode="layer"
+ id="layer1"
+ transform="translate(-33.785574,76.85193)">
+ <g
+ id="g1758"
+ transform="translate(20.785574,15.148096)">
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:inline"
+ id="layer1-8"
+ inkscape:label="Layer 1">
+ <g
+ id="g51234">
+ <rect
+ y="4.111145"
+ x="158.35156"
+ height="268.39102"
+ width="575.39099"
+ id="rect23486"
+ style="fill:url(#pattern5698);fill-opacity:1;stroke:#000000;stroke-width:3.60897493;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <rect
+ style="opacity:0.69026549;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect23488"
+ width="570"
+ height="263"
+ x="160.35156"
+ y="7.5021667" />
+ <rect
+ width="0"
+ height="24.171429"
+ rx="60.428574"
+ ry="24.171429"
+ x="4432.2417"
+ y="5244.3931"
+ id="rect5314"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:12.08570004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="translate(5731.7105,647.6564)"
+ id="g8484-6" />
+ <g
+ transform="matrix(0.867051,0,0,0.867051,5533.8055,759.9764)"
+ id="g6374-4"
+ style="fill:#ffffff" />
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="5640.6602"
+ y="672.71167"
+ id="rect5314-1"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ transform="matrix(1.73,0,0,0.659171,5511.8225,1611.9864)"
+ style="opacity:0.30729232"
+ mask="url(#mask4631-8)"
+ id="g4596-3" />
+ <g
+ transform="translate(5456.1995,2052.0684)"
+ id="g3002-33" />
+ <g
+ transform="translate(5291.6877,1428.7067)"
+ id="g4898-8">
+ <g
+ id="g4900">
+ <g
+ id="g4902" />
+ </g>
+ </g>
+ <g
+ transform="translate(6200.2995,1255.4254)"
+ id="g3002-4" />
+ <g
+ transform="translate(6035.7875,632.0634)"
+ id="g4898-9">
+ <g
+ id="g4900-9">
+ <g
+ id="g4902-1" />
+ </g>
+ </g>
+ <text
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"
+ xml:space="preserve"
+ id="text19594"
+ y="1713.0334"
+ x="5721.2646"
+ sodipodi:linespacing="125%"><tspan
+ id="tspan19596"
+ y="1713.0334"
+ x="5721.2646" /></text>
+ <g
+ transform="translate(6137.2995,1486.4253)"
+ id="g3002-3" />
+ <g
+ transform="translate(5972.7875,863.0634)"
+ id="g4898-2">
+ <g
+ id="g4900-7">
+ <g
+ id="g4902-8" />
+ </g>
+ </g>
+ <g
+ transform="translate(5002.2995,1054.4254)"
+ id="g21694">
+ <text
+ sodipodi:linespacing="125%"
+ x="321.965"
+ y="658.60797"
+ id="text21702"
+ xml:space="preserve"
+ style="font-size:13.4364996px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:125%;text-anchor:middle;fill:#ffffff;fill-opacity:1;stroke:none;font-family:Interstate-Bold"><tspan
+ x="321.965"
+ y="658.60797"
+ id="tspan21704" /></text>
+ </g>
+ <rect
+ width="0"
+ height="6"
+ rx="15"
+ ry="6"
+ x="6394.4658"
+ y="1739.5555"
+ id="rect5314-3"
+ style="opacity:0.42290805;fill:#bfdce8;fill-opacity:0;stroke:#ffffff;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0.5" />
+ <g
+ id="g3002-35"
+ transform="translate(539.98213,665.63497)" />
+ <g
+ id="g4898-37"
+ transform="translate(375.47031,42.27285)">
+ <g
+ id="g4900-5">
+ <g
+ id="g4902-5" />
+ </g>
+ </g>
+ <g
+ id="g3002-4-44"
+ transform="translate(321.48515,123.56711)" />
+ <g
+ id="g4898-3"
+ transform="translate(156.97333,-499.79501)">
+ <g
+ id="g4900-3-7">
+ <g
+ id="g4902-3-9" />
+ </g>
+ </g>
+ <g
+ id="g9694"
+ transform="translate(4.49242,441.24827)" />
+ <g
+ id="g9696"
+ transform="translate(-160.01938,-182.11385)">
+ <g
+ id="g9698">
+ <g
+ id="g9700" />
+ </g>
+ </g>
+ <g
+ id="g11586"
+ transform="translate(531.70846,712.31515)" />
+ <g
+ id="g11591"
+ transform="translate(367.19664,88.95298)">
+ <g
+ id="g11593">
+ <g
+ id="g11595" />
+ </g>
+ </g>
+ <g
+ id="g13960"
+ transform="translate(945.16259,126.17676)" />
+ <g
+ id="g13962"
+ transform="translate(780.65077,-497.18536)">
+ <g
+ id="g13964">
+ <g
+ id="g13966" />
+ </g>
+ </g>
+ <g
+ style="fill:#5c3566"
+ transform="matrix(-0.58230043,0,0,1.2021785,341.20931,-1013.0128)"
+ id="g6425" />
+ <text
+ id="text13535"
+ y="196.70628"
+ x="902.75421"
+ style="font-size:40px;font-style:normal;font-weight:normal;fill:#000000;fill-opacity:1;stroke:none;font-family:Bitstream Vera Sans"
+ xml:space="preserve"><tspan
+ y="196.70628"
+ x="902.75421"
+ id="tspan13537"
+ sodipodi:role="line" /></text>
+ <g
+ transform="matrix(0.7309234,0,0,0.7309234,-1950.3862,158.36282)"
+ id="g4113" />
+ <g
+ transform="translate(-2126.5044,28.9977)"
+ id="g6262" />
+ <g
+ transform="matrix(1.1226825,0,0,0.96774932,348.66176,54.61629)"
+ id="g22104">
+ <g
+ id="g22106"
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)">
+ <g
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)"
+ mask="url(#mask7570-2)"
+ id="g22108"
+ style="opacity:0.53157899">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22110"
+ style="fill:url(#linearGradient22462);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22112"
+ style="fill:url(#linearGradient22464);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ id="path22114"
+ style="fill:url(#linearGradient22466);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22116"
+ style="fill:none;stroke:url(#linearGradient22468);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22118"
+ style="fill:none;stroke:url(#linearGradient22470);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,41.25)"
+ id="g22120">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22122"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22472);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22124"
+ style="fill:url(#linearGradient22474);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22126"
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient22476);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="translate(0,31)"
+ id="g22128">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22130"
+ style="fill:url(#linearGradient22478);fill-opacity:1;stroke:url(#linearGradient22480);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22132"
+ style="fill:url(#linearGradient22482);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22134"
+ style="fill:url(#linearGradient22484);fill-opacity:1;stroke:url(#linearGradient22486);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22136"
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient22488);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22138">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22140"
+ style="opacity:0.680851;fill:url(#radialGradient22490);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22142"
+ style="fill:url(#radialGradient22492);fill-opacity:1" />
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)"
+ id="g22144">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22146"
+ style="fill:url(#linearGradient22494);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22148"
+ style="fill:url(#linearGradient22496);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ id="path22150"
+ style="fill:url(#linearGradient22498);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22152"
+ style="fill:none;stroke:url(#linearGradient22500);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22154"
+ style="fill:none;stroke:url(#linearGradient22502);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5)" />
+ <g
+ transform="translate(0,10.25)"
+ id="g22156">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22158"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22504);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22160"
+ style="fill:url(#linearGradient22506);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22162"
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient22508);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ id="g22164">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22166"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22510);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22168"
+ style="fill:url(#linearGradient22512);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22170"
+ style="fill:url(#linearGradient22514);fill-opacity:1;stroke:url(#linearGradient22516);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22172"
+ style="fill:none;stroke:url(#linearGradient22518);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4)" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22174">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22176"
+ style="opacity:0.680851;fill:url(#radialGradient22520);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22178"
+ style="fill:url(#radialGradient22522);fill-opacity:1" />
+ </g>
+ <g
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)"
+ id="g22180">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22182"
+ style="opacity:0.680851;fill:url(#radialGradient22524);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22184"
+ style="fill:url(#radialGradient22526);fill-opacity:1" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <g
+ style="display:inline"
+ transform="matrix(-1.0164499,0,0,0.9032479,758.33167,1.03433)"
+ id="g22186">
+ <g
+ id="g22188"
+ transform="matrix(0.95549,0,0,0.95549,-131.63026,-97.114486)">
+ <g
+ transform="matrix(-0.871732,0,0,0.875699,945.308,163.109)"
+ mask="url(#mask7570-2-4)"
+ id="g22190"
+ style="opacity:0.53157899">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22192"
+ style="fill:url(#linearGradient22528);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22194"
+ style="fill:url(#linearGradient22530);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.24488,-5.533632 14.24488,-5.533632 L 579.37701,66.81781 z"
+ id="path22196"
+ style="fill:url(#linearGradient22532);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22198"
+ style="fill:none;stroke:url(#linearGradient22534);stroke-width:1.57957995;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5-6)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22200"
+ style="fill:none;stroke:url(#linearGradient22536);stroke-width:2.10610008;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5-4)" />
+ <g
+ transform="translate(0,41.25)"
+ id="g22202">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22204"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22538);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9-0)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22206"
+ style="fill:url(#linearGradient22540);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,127.61454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22208"
+ style="opacity:0.759843;fill:none;stroke:url(#linearGradient22542);stroke-width:1.05305004;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="translate(0,31)"
+ id="g22210">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22212"
+ style="fill:url(#linearGradient22544);fill-opacity:1;stroke:url(#linearGradient22546);stroke-width:2.10610008;stroke-miterlimit:4;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22214"
+ style="fill:url(#linearGradient22548);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,112.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22216"
+ style="fill:url(#linearGradient22550);fill-opacity:1;stroke:url(#linearGradient22552);stroke-width:0.63183099;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,126.56345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22218"
+ style="opacity:0.964567;fill:none;stroke:url(#linearGradient22554);stroke-width:0.95091498;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22220">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22222"
+ style="opacity:0.680851;fill:url(#radialGradient22556);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22224"
+ style="fill:url(#radialGradient22558);fill-opacity:1" />
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.875699,0,0,0.875699,947.549,115.264)"
+ id="g22226">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 547.04336,74.12912 -0.31771,58.18678 34.24767,27.60586 c 0,0 9.82102,-0.1632 19.18945,-2.57292 9.36843,-2.40973 12.97693,-5.61073 12.97693,-5.61073 l 0.32051,-58.608306 -34.05825,-26.212128 -32.3586,7.211444 z"
+ id="path22228"
+ style="fill:url(#linearGradient22560);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 581.03177,88.195275 c -0.004,20.446315 0.002,51.266475 -0.007,71.712905 11.38747,-0.13598 23.37442,-2.74467 32.63981,-7.59572 0.64357,-12.31248 0.24555,-35.41655 0.4895,-47.88923 0.0243,-3.65905 0.0486,-7.318106 0.0729,-10.977162 -11.04468,-2.0074 -22.1131,-3.969846 -33.19086,-5.87806 l -0.003,0.501813 -8.4e-4,0.125454 z"
+ id="path22230"
+ style="fill:url(#linearGradient22562);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 579.37701,66.81781 -32.20646,7.449329 35.13056,26.793401 c 0,0 9.30384,-0.40148 17.82367,-2.353188 8.49419,-1.951206 14.03777,-5.180079 14.03777,-5.180079 L 579.37701,66.81781 z"
+ id="path22232"
+ style="fill:url(#linearGradient22564);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 549.21783,75.035008 33.10876,26.045102 c 0,0 7.98803,0.51239 17.35473,-1.636393 8.98177,-2.061026 13.23279,-5.555485 13.23279,-5.555485"
+ id="path22234"
+ style="fill:none;stroke:url(#linearGradient22566);stroke-width:1.57599998;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8351-5-6)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 582.11919,101.4454 -0.22401,57.546"
+ id="path22236"
+ style="fill:none;stroke:url(#linearGradient22568);stroke-width:2.10133004;stroke-linecap:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter8323-5-4)" />
+ <g
+ transform="translate(0,10.25)"
+ id="g22238">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22240"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22570);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9-0)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22242"
+ style="fill:url(#linearGradient22572);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 590.5192,153.11454 0.13144,-20.38841 c 6.60302,-0.65471 13.63644,-1.59016 19.48888,-4.93065 l -0.12956,20.09689 c -5.90438,3.34577 -12.7526,4.86706 -19.49076,5.22217 z"
+ id="path22244"
+ style="opacity:0.62621304;fill:none;stroke:url(#linearGradient22574);stroke-width:1.05066001;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none" />
+ <g
+ id="g22246">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22248"
+ style="fill:#cccccc;fill-opacity:1;stroke:url(#linearGradient22576);stroke-width:2.10133004;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10486-9-0)" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 588.80251,111.42247 c -0.42832,-1.07033 -0.21221,-2.94633 0.1719,-3.39282 7.58714,-0.40828 14.82979,-1.91945 20.79619,-5.20639 0.53107,1.05337 0.43208,3.34523 0.0181,3.95537 -6.25269,3.21547 -14.33119,4.97391 -20.98616,4.64384 z"
+ id="path22250"
+ style="fill:url(#linearGradient22578);fill-opacity:1" />
+ </g>
+ <path
+ inkscape:connector-curvature="0"
+ d="m 605.62012,141.65295 c 0,2.17979 -1.76911,4.30646 -3.9489,4.74701 -2.17979,0.44056 -3.9489,-0.971 -3.9489,-3.15079 0,-2.17979 1.76911,-4.30645 3.9489,-4.74701 2.17979,-0.44055 3.9489,0.971 3.9489,3.15079 z"
+ id="path22252"
+ style="fill:url(#linearGradient22580);fill-opacity:1;stroke:url(#linearGradient22582);stroke-width:0.63039899;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 591.4707,152.06345 0.1187,-18.58768 c 5.96258,-0.59121 12.31381,-1.43593 17.59862,-4.45242 l -0.117,18.32444 c -5.3317,3.02126 -11.5157,4.39499 -17.60032,4.71566 z"
+ id="path22254"
+ style="fill:none;stroke:url(#linearGradient22584);stroke-width:0.94875801;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10534-4-3)" />
+ <g
+ transform="matrix(1.44587,0,0,1.44587,-117.545,-282.281)"
+ id="g22256">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22258"
+ style="opacity:0.680851;fill:url(#radialGradient22586);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22260"
+ style="fill:url(#radialGradient22588);fill-opacity:1" />
+ </g>
+ <g
+ transform="matrix(1.02462,0,0,1.02462,108.25,-131.553)"
+ id="g22262">
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22264"
+ style="opacity:0.680851;fill:url(#radialGradient22590);fill-opacity:1" />
+ <path
+ inkscape:connector-curvature="0"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22266"
+ style="fill:url(#radialGradient22592);fill-opacity:1" />
+ </g>
+ </g>
+ </g>
+ </g>
+ <g
+ transform="matrix(-0.6631863,0,0,0.67913371,418.88733,-193.95875)"
+ id="g22268">
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)"
+ mask="url(#mask7729)"
+ id="g22270"
+ style="opacity:0.15161288">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22272"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22274"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22276"
+ style="fill:url(#linearGradient22594);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22278"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ id="path22280"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22282"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22284"
+ style="fill:url(#linearGradient22596)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22286"
+ style="fill:url(#linearGradient22598);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22288"
+ style="fill:url(#linearGradient22600);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22290"
+ style="opacity:0.62254902;fill:url(#radialGradient22602);fill-opacity:1;stroke:url(#radialGradient22604);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22292"
+ style="fill:url(#linearGradient22606);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)"
+ id="g22294">
+ <path
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22296"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z"
+ id="path22298"
+ style="fill:#eeeeec"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z"
+ id="path22300"
+ style="fill:url(#linearGradient22608);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22302"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z"
+ id="path22304"
+ style="fill:url(#linearGradient22610);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366"
+ id="path22306"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z"
+ id="path22308"
+ style="fill:url(#linearGradient22612)"
+ inkscape:connector-curvature="0" />
+ <polygon
+ points="801.55,70.74 801.55,51.99 801.55,51.99 779.03,57.6 779.03,76.36 "
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ id="polygon22310"
+ style="fill:url(#linearGradient22614);fill-opacity:1" />
+ <path
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z"
+ id="path22312"
+ style="fill:url(#linearGradient22616);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z"
+ id="path22314"
+ style="opacity:0.96825412;fill:url(#radialGradient22618);fill-opacity:1;stroke:url(#radialGradient22620);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ id="path22316"
+ style="fill:url(#linearGradient22622);fill-opacity:1;filter:url(#filter8391)"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z"
+ id="path22318"
+ style="opacity:0.71957703;fill:url(#radialGradient22624);fill-opacity:1;stroke:url(#radialGradient22626);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106)"
+ inkscape:connector-curvature="0" />
+ </g>
+ <g
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)"
+ id="g22320">
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ id="path22322"
+ style="opacity:0.680851;fill:url(#radialGradient22628);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ <path
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ id="path22324"
+ style="fill:url(#radialGradient22630);fill-opacity:1"
+ inkscape:connector-curvature="0" />
+ </g>
+ </g>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk)"
+ d="m 284.84232,158.30666 105.0537,-1"
+ id="path22326"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <g
+ style="display:inline"
+ id="g22328"
+ transform="matrix(-0.6631863,0,0,0.67913371,236.98149,-215.92372)">
+ <g
+ style="opacity:0.15161288"
+ id="g22330"
+ mask="url(#mask7729-5)"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,469.611)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22332"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22334"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22632);fill-opacity:1"
+ id="path22336"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22338"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.6;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:9.12038898;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9827-2)"
+ id="path22340"
+ transform="matrix(0.27971,0,0,0.27971,1234.04,339.689)"
+ d="m -2399.7812,-930.90625 c -1.268,-0.006 -2.5207,0.11544 -3.7813,0.40625 -10.0602,2.37559 -205.3024,42.85038 -216.3125,45.625 -11.01,2.77461 -10.375,18.56253 -10.375,18.5625 0,0 0,160.88488 0,170.90625 0,24.66528 16.2812,33.93749 16.2812,33.9375 l 0.4063,-0.4375 0,0.6875 238.4375,-50.40625 0,-206.5625 -0.5312,0.125 0.125,-0.15625 c 0,0 -11.993,-12.63142 -24.25,-12.6875 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22342"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22634)"
+ id="path22344"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22636);fill-opacity:1"
+ id="polygon22346"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22638);fill-opacity:1"
+ id="path22348"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.62254902;fill:url(#radialGradient22640);fill-opacity:1;stroke:url(#radialGradient22642);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22350"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22644);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22352"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ </g>
+ <g
+ id="g22354"
+ transform="matrix(1.05466,0,0,1.05466,-591.196,390.512)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.54368902;fill:#000000;fill-opacity:1;stroke:#000000;stroke-width:1.69162905;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter9847-43)"
+ id="path22356"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -17.40756,71.794022 c 0,4.661543 -6.938903,9.302492 -15.474049,10.371957 -8.535146,1.069466 -15.459912,-1.83435 -15.459912,-6.495892 0,-4.650872 6.924766,-9.300722 15.459912,-10.370186 8.535146,-1.069466 15.474049,1.843249 15.474049,6.494121 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#eeeeec"
+ id="path22358"
+ d="m 554.22884,153.24013 c 0,7.00094 -10.50735,13.46424 -23.43183,14.44713 -12.92448,0.9829 -23.41042,-3.88388 -23.41042,-10.88482 0,-6.98491 10.48594,-13.46261 23.41042,-14.4455 12.92448,-0.9829 23.43183,3.89828 23.43183,10.88319 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22646);fill-opacity:1"
+ id="path22360"
+ d="m 550.05237,151.50845 c 0,5.1608 -8.52226,9.89422 -19.0082,10.58317 -10.50734,0.69035 -19.0296,-2.92323 -19.0296,-8.08402 0,-5.14695 8.52226,-9.89422 19.0296,-10.58457 10.48594,-0.68895 19.0082,2.93847 19.0082,8.08542 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:#ffffff;fill-opacity:1;filter:url(#filter5917-5)"
+ id="path22362"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -44.835878,72.015266 c -1.060184,1.455132 -0.594327,3.138079 0.536695,4.025399 2.156389,1.708398 5.082402,3.073433 10.724311,2.653611 1.026566,-0.07399 0.97974,0.843545 -0.04683,0.988165 -5.956482,0.82375 -12.111075,-0.757856 -13.59149,-3.219192 -0.94492,-1.558147 -0.408226,-3.73352 1.444395,-5.11258 0.781631,-0.590222 1.445597,-0.06097 0.932915,0.664597 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22648);fill-opacity:1"
+ id="path22364"
+ d="m 521.67761,146.90092 25.20492,-5.66761 c 4.94408,-0.96428 6.84054,9.51 2.60487,10.41331 l -26.1224,5.81121 c -3.22719,0.67383 -4.97361,-2.05733 -5.7435,-4.86826 l 4.05611,-0.69728 0,-4.99137 0,0 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:none;stroke:#ffffff;stroke-width:2.95566964;stroke-linecap:round"
+ id="path22366"
+ d="m 512.42636,147.01672 53.61501,-11.10044 0,-42.902366" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22650)"
+ id="path22368"
+ d="m 502.88993,154.67086 c 0,0 -4.56036,-2.59119 -4.56036,-9.49031 0,-2.80307 0,-47.808359 0,-47.808359 0,0 -0.1771,-4.411974 2.9025,-5.18806 3.0796,-0.776084 57.68835,-12.096956 60.50229,-12.761432 3.76095,-0.867648 7.84658,3.427868 7.84658,3.427868 l -66.69101,71.820293 z" />
+ <polygon
+ style="fill:url(#linearGradient22652);fill-opacity:1"
+ id="polygon22370"
+ transform="matrix(2.96153,0.142819,0,3.08118,-1804.12,-191.801)"
+ points="779.03,57.6 779.03,76.36 801.55,70.74 801.55,51.99 801.55,51.99 " />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22654);fill-opacity:1"
+ id="path22372"
+ d="m 564.03593,89.66154 -56.33869,11.92883 0,44.86258 56.33869,-11.92882 0,-44.86259 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.96825412;fill:url(#radialGradient22656);fill-opacity:1;stroke:url(#radialGradient22658);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter10668-2)"
+ id="path22374"
+ d="m 535.36042,140.66309 28.74795,-5.82814 -0.18444,-42.313671 C 537.9577,97.412364 535.34776,126.123 535.36042,140.66309 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#linearGradient22660);fill-opacity:1;filter:url(#filter8391-0)"
+ id="path22376"
+ transform="matrix(1.51427,0.0730253,0,1.50185,580.589,46.6874)"
+ d="m -52.386391,73.001455 0,-37.555659 c 0,-0.266399 0.332998,-0.737469 0.566909,-0.778079 L -9.0284478,23.467619 c 1.1533088,-0.307007 2.6618381,1.488411 1.5085279,1.795419 l -42.7742701,11.352311 0,36.918902 c 0.01949,1.312499 -2.092201,0.758585 -2.092201,-0.532796 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.71957703;fill:url(#radialGradient22662);fill-opacity:1;stroke:url(#radialGradient22664);stroke-width:1.6290437;stroke-miterlimit:4;stroke-dasharray:none;filter:url(#filter7106-8)"
+ id="path22378"
+ d="m 564.10819,134.19796 -55.77093,10.3176 -2.93951,-40.61617 c 25.54773,-1.27974 58.71044,16.45435 58.71044,30.29857 z" />
+ </g>
+ <g
+ id="g22380"
+ transform="matrix(1.46143,0,0,1.46143,-766.443,107.052)">
+ <path
+ inkscape:connector-curvature="0"
+ style="opacity:0.680851;fill:url(#radialGradient22666);fill-opacity:1"
+ id="path22382"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ <path
+ inkscape:connector-curvature="0"
+ style="fill:url(#radialGradient22668);fill-opacity:1"
+ id="path22384"
+ transform="matrix(0.425532,0,0,0.425532,277.543,152.03)"
+ d="m 491.43921,264.64523 c 7.1e-4,4.58916 -3.71934,8.30979 -8.3085,8.30979 -4.58917,0 -8.30922,-3.72063 -8.30851,-8.30979 -7.1e-4,-4.58916 3.71934,-8.30979 8.30851,-8.30979 4.58916,0 8.30921,3.72063 8.3085,8.30979 z" />
+ </g>
+ </g>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22386"
+ y="53.306671"
+ x="410.54709"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="53.306671"
+ x="410.54709"
+ id="tspan22388"
+ sodipodi:role="line">pam_sss</tspan><tspan
+ style="font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22390"
+ y="64.106674"
+ x="410.54709"
+ sodipodi:role="line">nss_sss</tspan></text>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline"
+ d="m 475.43325,166.30666 152.0537,0"
+ id="path22392"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22394"
+ y="190.30667"
+ x="227.5471"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="190.30667"
+ x="227.5471"
+ id="tspan22396"
+ sodipodi:role="line">client</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22398"
+ y="202.90668"
+ x="227.5471"
+ sodipodi:role="line">connects to SSSD</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;line-height:89.99999762%;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22400"
+ y="215.50668"
+ x="227.5471"
+ sodipodi:role="line">for authentication</tspan></text>
+ <path
+ style="fill:none;stroke:#0093d9;stroke-width:3;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:1;stroke-dasharray:none;stroke-dashoffset:0;marker-end:url(#TriangleOutMk);display:inline"
+ d="m 410.43325,153.30666 c -39.64564,-5.7457 -34.15972,-68.39453 11.0537,-61"
+ id="path22402"
+ inkscape:connector-curvature="0"
+ sodipodi:nodetypes="cc" />
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22404"
+ y="57.860947"
+ x="379.31958"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:end;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:end;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ id="tspan22406"
+ y="57.860947"
+ x="379.31958"
+ sodipodi:role="line">SSSD checks</tspan><tspan
+ id="tspan22408"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="70.460953"
+ x="379.31958"
+ sodipodi:role="line">IPA for user</tspan><tspan
+ id="tspan22410"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="83.060944"
+ x="379.31958"
+ sodipodi:role="line">& authentication</tspan><tspan
+ id="tspan22412"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="95.66095"
+ x="379.31958"
+ sodipodi:role="line">information</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="108.26094"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22676">+</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="120.86093"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22678">host-based</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="133.46094"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22680">access</tspan><tspan
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:end;line-height:89.99999762%;text-anchor:end;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="146.06094"
+ x="379.31958"
+ sodipodi:role="line"
+ id="tspan22682">control</tspan></text>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22414"
+ y="187.46527"
+ x="501.49048"
+ style="font-size:40px;font-style:normal;font-weight:normal;text-align:start;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;text-anchor:start;fill:#000000;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ id="tspan22416"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="187.46527"
+ x="501.49048"
+ sodipodi:role="line">continues with</tspan><tspan
+ id="tspan22418"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="200.06528"
+ x="501.49048"
+ sodipodi:role="line">typical directory </tspan><tspan
+ id="tspan22420"
+ style="font-size:14px;font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;text-align:start;line-height:89.99999762%;text-anchor:start;font-family:Century Gothic;-inkscape-font-specification:Century Gothic"
+ y="212.66528"
+ x="501.49048"
+ sodipodi:role="line">service request</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22422"
+ y="144.30667"
+ x="176.5471"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="144.30667"
+ x="176.5471"
+ id="tspan22424"
+ sodipodi:role="line">client</tspan></text>
+ <text
+ sodipodi:linespacing="125%"
+ id="text22426"
+ y="217.19727"
+ x="644.96118"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="217.19727"
+ x="644.96118"
+ id="tspan22428"
+ sodipodi:role="line">IPA</tspan></text>
+ <text
+ sodipodi:linespacing="89.999998%"
+ id="text22430"
+ y="211.19727"
+ x="439.15646"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:89.99999762%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ xml:space="preserve"><tspan
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="211.19727"
+ x="439.15646"
+ id="tspan22432"
+ sodipodi:role="line">SSSD with</tspan><tspan
+ id="tspan22434"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="225.59726"
+ x="439.15646"
+ sodipodi:role="line">an IPA</tspan><tspan
+ id="tspan22436"
+ style="font-size:16px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;text-align:center;line-height:89.99999762%;text-anchor:middle;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold"
+ y="239.99725"
+ x="439.15646"
+ sodipodi:role="line">backend</tspan></text>
+ <g
+ transform="translate(-58,502)"
+ id="g22438">
+ <path
+ sodipodi:type="arc"
+ style="fill:url(#linearGradient22670);fill-opacity:1;stroke:none"
+ id="path22440"
+ sodipodi:cx="129.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:rx="58.5"
+ sodipodi:ry="59.5"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="260.96118"
+ y="-295.8027"
+ id="text22442"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22444"
+ x="260.96118"
+ y="-295.8027"
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">1</tspan></text>
+ </g>
+ <g
+ transform="translate(76.28658,329.71341)"
+ id="g22446"
+ style="display:inline">
+ <path
+ sodipodi:type="arc"
+ style="fill:url(#linearGradient22672);fill-opacity:1;stroke:none"
+ id="path22448"
+ sodipodi:cx="129.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:rx="58.5"
+ sodipodi:ry="59.5"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="260.96118"
+ y="-295.8027"
+ id="text22450"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22452"
+ x="260.96118"
+ y="-295.8027"
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">2</tspan></text>
+ </g>
+ <g
+ transform="translate(288.28658,446.71341)"
+ id="g22454"
+ style="display:inline">
+ <path
+ sodipodi:type="arc"
+ style="fill:url(#linearGradient22674);fill-opacity:1;stroke:none"
+ id="path22456"
+ sodipodi:cx="129.5"
+ sodipodi:cy="-130.55569"
+ sodipodi:rx="58.5"
+ sodipodi:ry="59.5"
+ d="m 188,-130.55569 c 0,32.860938 -26.19134,59.499995 -58.5,59.499995 -32.308658,0 -58.5,-26.639057 -58.5,-59.499995 0,-32.86095 26.191342,-59.5 58.5,-59.5 32.30866,0 58.5,26.63905 58.5,59.5 z"
+ transform="matrix(0.21367521,0,0,0.21008403,240.58958,-275.97908)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-weight:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#0093d9;fill-opacity:1;stroke:none;display:inline;font-family:Sans"
+ x="260.96118"
+ y="-295.8027"
+ id="text22458"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan22460"
+ x="260.96118"
+ y="-295.8027"
+ style="font-size:24px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;fill:#0093d9;fill-opacity:1;font-family:Century Gothic;-inkscape-font-specification:Century Gothic Bold">3</tspan></text>
+ </g>
+ <rect
+ style="opacity:1;fill:#ffffff;fill-opacity:1;stroke:none"
+ id="rect4788"
+ width="155"
+ height="39"
+ x="331"
+ y="69.944305"
+ transform="translate(217.5471,-83.637645)" />
+ <text
+ xml:space="preserve"
+ style="font-size:40px;font-style:normal;font-variant:normal;font-weight:bold;font-stretch:normal;line-height:125%;letter-spacing:0px;word-spacing:0px;fill:#000000;fill-opacity:1;stroke:none;font-family:Aharoni;-inkscape-font-specification:Aharoni Bold"
+ x="553.54712"
+ y="13.306661"
+ id="text4784"
+ sodipodi:linespacing="125%"><tspan
+ sodipodi:role="line"
+ id="tspan4786"
+ x="553.54712"
+ y="13.306661"
+ style="font-size:28px">SSSD + IPA</tspan></text>
+ </g>
+ </g>
+ <g
+ transform="translate(-204.5471,-8.3623809)"
+ style="display:none"
+ inkscape:label="sdfsdf"
+ id="layer2">
+ <rect
+ rx="26.574863"
+ ry="26.574863"
+ y="92.362144"
+ x="-308.57144"
+ height="951.42859"
+ width="1620"
+ id="rect26435"
+ style="opacity:0.22325583;fill:#180e00;fill-opacity:1;fill-rule:nonzero;stroke:#211601;stroke-width:2.10500002;stroke-linecap:round;stroke-linejoin:miter;stroke-miterlimit:4;stroke-opacity:0.09661835;stroke-dasharray:none;stroke-dashoffset:0;marker:none;visibility:visible;display:inline;overflow:visible;enable-background:accumulate" />
+ </g>
+ </g>
+ </g>
+</svg>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-add.png
new file mode 100644
index 0000000..5125759
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-domain.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-domain.png
new file mode 100644
index 0000000..2a75c8c
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-domain.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-list.png
new file mode 100644
index 0000000..501319b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroup-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroups-menu.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroups-menu.png
new file mode 100644
index 0000000..c92a983
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/netgroups-menu.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/nis-members.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/nis-members.png
new file mode 100644
index 0000000..736f1d9
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/nis-members.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy-global.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy-global.png
new file mode 100644
index 0000000..330648d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy-global.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy-page.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy-page.png
new file mode 100644
index 0000000..317bf91
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy-page.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy1a.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy1a.png
new file mode 100644
index 0000000..41cfaa1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy1a.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy1b.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy1b.png
new file mode 100644
index 0000000..88449b7
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy1b.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy2.png
new file mode 100644
index 0000000..be27e3d
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-policy2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-reset1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-reset1.png
new file mode 100644
index 0000000..c69270f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-reset1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-reset2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-reset2.png
new file mode 100644
index 0000000..73f1746
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/pwd-reset2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/rhsm-web-consumer-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/rhsm-web-consumer-add.png
new file mode 100644
index 0000000..3fb9011
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/rhsm-web-consumer-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-add.png
new file mode 100644
index 0000000..373b31b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-list.png
new file mode 100644
index 0000000..4cd7863
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-permission-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-permission-add.png
new file mode 100644
index 0000000..6788192
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-permission-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-permission-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-permission-list.png
new file mode 100644
index 0000000..aa43414
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-permission-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-add.png
new file mode 100644
index 0000000..53056d8
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-addperm.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-addperm.png
new file mode 100644
index 0000000..3a73635
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-addperm.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-addperm2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-addperm2.png
new file mode 100644
index 0000000..fe2bc83
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-addperm2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-list.png
new file mode 100644
index 0000000..ebf2f15
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-priv-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-privadd.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-privadd.png
new file mode 100644
index 0000000..f97b844
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-privadd.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-privlist.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-privlist.png
new file mode 100644
index 0000000..8986891
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-privlist.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-user-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-user-list.png
new file mode 100644
index 0000000..ef95778
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-user-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-users-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-users-add.png
new file mode 100644
index 0000000..6490aad
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/role-users-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-add.png
new file mode 100644
index 0000000..13dfdbd
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-edit.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-edit.png
new file mode 100644
index 0000000..79acadf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-edit.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-list.png
new file mode 100644
index 0000000..9c5dad5
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/selfservice-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/server-config-users.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/server-config-users.png
new file mode 100644
index 0000000..51fd005
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/server-config-users.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/server-config.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/server-config.png
new file mode 100644
index 0000000..8bcde98
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/server-config.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-add1.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-add1.png
new file mode 100644
index 0000000..9a2c840
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-add1.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-add2.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-add2.png
new file mode 100644
index 0000000..9ea203f
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-add2.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-cert.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-cert.png
new file mode 100644
index 0000000..4944f87
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/service-cert.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/services-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/services-list.png
new file mode 100644
index 0000000..cd10513
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/services-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmd-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmd-list.png
new file mode 100644
index 0000000..b50aa62
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmd-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmd-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmd-new.png
new file mode 100644
index 0000000..46cc319
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmd-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png
new file mode 100644
index 0000000..da89bb1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-addsvc.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-list.png
new file mode 100644
index 0000000..a93e9ac
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-new.png
new file mode 100644
index 0000000..7f25beb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png
new file mode 100644
index 0000000..d0cf030
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-cmdgrp-svc-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-allow-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-allow-add.png
new file mode 100644
index 0000000..3bc23f4
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-allow-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-allow.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-allow.png
new file mode 100644
index 0000000..a6eaa46
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-allow.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-host-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-host-add.png
new file mode 100644
index 0000000..6c95cbf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-host-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-host.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-host.png
new file mode 100644
index 0000000..f227abe
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-host.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-new.png
new file mode 100644
index 0000000..52e270a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-opt-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-opt-new.png
new file mode 100644
index 0000000..3130dd7
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-opt-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-opt.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-opt.png
new file mode 100644
index 0000000..4ddfcc4
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-opt.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-runas-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-runas-add.png
new file mode 100644
index 0000000..c609767
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-runas-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-runas.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-runas.png
new file mode 100644
index 0000000..3116d3b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-runas.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-user-add.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-user-add.png
new file mode 100644
index 0000000..d0f483a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-user-add.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-user.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-user.png
new file mode 100644
index 0000000..32f272e
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rule-user.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rules-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rules-list.png
new file mode 100644
index 0000000..ba69f58
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/sudo-rules-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-full-form.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-full-form.png
new file mode 100644
index 0000000..576f296
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-full-form.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-full-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-full-list.png
new file mode 100644
index 0000000..4410e3a
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-full-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-tabs.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-tabs.png
new file mode 100644
index 0000000..724dedf
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/ui-tabs.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/undo-button.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/undo-button.png
new file mode 100644
index 0000000..6cab61b
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/undo-button.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/update-link.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/update-link.png
new file mode 100644
index 0000000..9ca93ed
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/update-link.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-acctsettings.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-acctsettings.png
new file mode 100644
index 0000000..d8e9411
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-acctsettings.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-addcontact.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-addcontact.png
new file mode 100644
index 0000000..4a5bfe2
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-addcontact.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-additional-attr.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-additional-attr.png
new file mode 100644
index 0000000..cef03d6
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-additional-attr.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-attr.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-attr.png
new file mode 100644
index 0000000..d1b75e1
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-attr.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-delete.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-delete.png
new file mode 100644
index 0000000..02a26f8
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-delete.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-list.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-list.png
new file mode 100644
index 0000000..5626398
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-list.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-new.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-new.png
new file mode 100644
index 0000000..2ff6b02
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-new.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-objectclass-change.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-objectclass-change.png
new file mode 100644
index 0000000..27e5f39
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-objectclass-change.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-search.png b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-search.png
new file mode 100644
index 0000000..99786fb
Binary files /dev/null and b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/images/user-search.png differ
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/index.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/index.html
index de3a98e..d1a8fe5 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/index.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/index.html
@@ -1,16 +1,16 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>FreeIPA: Identity/Policy Management</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><meta name="description" content="Identity and policy management — for both users and machines — is a core function for almost any enterprise environment. IPA provides a way to create an identity domain that allows machines to enroll to a domain and immediately access identity information reuqired for single sign-on and authentication services, as well as policy settings that govern authorization and access. This manual covers all aspects of installing, configuring, and managing IPA domains, including both servers and
clients. This guide is intended for IT and systems administrators." /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>FreeIPA: Identity/Policy Management</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><meta name="description" content="Identity and policy management — for both users and machines — is a core function for almost any enterprise environment. IPA provides a way to create an identity domain that allows machines to enroll to a domain and immediately access identity information reuqired for single sign-on and authentication services, as well as policy settings that govern authorization and access. This manual covers all aspects of installing, configuring, and managing IPA domains, including both servers and
clients. This guide is intended for IT and systems administrators." /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="next" href="Preface.html" title="Preface" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"></li><li class="next"><a accesskey="n" href="Preface.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="book" id="id4472204" lang="en-US"><div class="titlepage"><div><div class="producttitle"><span class="productname">Fedora</span> <span class="productnumber">15</span></div><div
><h1 id="id4472204" class="title">FreeIPA: Identity/Policy Management</h1></div><div><h2 class="subtitle">Managing Identity and Authorization Policies for Linux-Based Enterprise Networks</h2></div><p class="edition">Edition 2.1.1</p><div><h3 class="corpauthor">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="next" href="Preface.html" title="Preface" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"></li><li class="next"><a accesskey="n" href="Preface.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="book" id="id1141442" lang="en-US"><div class="titlepage"><div><div class="producttitle" font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-
align="center"><span class="productname">Fedora</span> <span class="productnumber">15</span></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h1 id="id1141442" class="title">FreeIPA: Identity/Policy Management</h1></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h2 class="subtitle">Managing Identity and Authorization Policies for Linux-Based Enterprise Networks</h2></div><p class="edition">Edition 2.1.2</p><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><h3 class="corpauthor">
<span class="inlinemediaobject"><object data="Common_Content/images/title_logo.svg" type="image/svg+xml"> </object></span>
- </h3></div><div><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></h3><code class="email"><a class="email" href="mailto:dlackey at redhat.com">dlackey at redhat.com</a></code></div></div></div><hr /><div><div id="id3232548" class="legalnotice"><h1 class="legalnotice">Legal Notice</h1><div class="para">
+ </h3></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div class="authorgroup"><div class="author"><h3 class="author"><span class="firstname">Ella Deon</span> <span class="surname">Lackey</span></h3><code class="email"><a class="email" href="mailto:dlackey at redhat.com">dlackey at redhat.com</a></code></div></div></div><hr /><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div id="id743535" class="legalnotice"><h1 class="legalnotice">Legal Notice</h1><div class="para">
Copyright <span class="trademark"></span>© 2011 Red Hat.
</div><div class="para">
The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution–Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC-BY-SA is available at <a href="http://creativecommons.org/licenses/by-sa/3.0/">http://creativecommons.org/licenses/by-sa/3.0/</a>. The original authors of this document, and Red Hat, designate the Fedora Project as the "Attribution Party" for purposes of CC-BY-SA. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version.
@@ -23,7 +23,11 @@
</div><div class="para">
<span class="trademark">Linux</span>® is the registered trademark of Linus Torvalds in the United States and other countries.
</div><div class="para">
+ <span class="trademark">Java</span>® is a registered trademark of Oracle and/or its affiliates.
+ </div><div class="para">
+ <span class="trademark">XFS</span>® is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/or other countries.
+ </div><div class="para">
All other trademarks are the property of their respective owners.
- </div></div></div><div><div class="abstract"><h6>Abstract</h6><div class="para">
+ </div></div></div><div font-family="sans-serif,Symbol,ZapfDingbats" font-weight="bold" font-size="12pt" text-align="center"><div class="abstract"><h6>Abstract</h6><div class="para">
Identity and policy management — for both users and machines — is a core function for almost any enterprise environment. IPA provides a way to create an identity domain that allows machines to enroll to a domain and immediately access identity information reuqired for single sign-on and authentication services, as well as policy settings that govern authorization and access. This manual covers all aspects of installing, configuring, and managing IPA domains, including both servers and clients. This guide is intended for IT and systems administrators.
- </div></div></div></div><hr /></div><div class="toc"><dl><dt><span class="preface"><a href="Preface.html">Preface</a></span></dt><dd><dl><dt><span class="section"><a href="Preface.html#audience">1. Audience and Purpose</a></span></dt><dt><span class="section"><a href="Document_Conventions.html">2. Examples and Formatting</a></span></dt><dd><dl><dt><span class="section"><a href="Document_Conventions.html#bracketsexamples">2.1. Brackets</a></span></dt><dt><span class="section"><a href="Document_Conventions.html#tool-locations">2.2. Client Tool Information</a></span></dt><dt><span class="section"><a href="Document_Conventions.html#guide-formatting">2.3. Text Formatting and Styles</a></span></dt></dl></dd><dt><span class="section"><a href="feedback.html">3. Giving Feedback</a></span></dt><dt><span class="section"><a href="doc-history.html">4. Document Change History</a></span></dt></dl></dd><dt><span class="chapter"><a href="introduction.html">1. Introduction to FreeIPA</a></s
pan></dt><dd><dl><dt><span class="section"><a href="introduction.html#ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</a></span></dt><dd><dl><dt><span class="section"><a href="introduction.html#ipadefined">1.1.1. A Working Definition for FreeIPA</a></span></dt><dt><span class="section"><a href="introduction.html#comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-linux-services.html">1.2. Bringing Linux Services Together</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-linux-services.html#Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#Directory_Server">1.2.2. Data Storage: 389 Directory Server</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#certificate-services">1.2.3. Authentication: Dogtag Certificate System</a></span></dt><dt><span class="section"><a href="ipa-l
inux-services.html#dns">1.2.4. Server/Client Discovery: DNS</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#NTP">1.2.5. Management: NTP</a></span></dt></dl></dd><dt><span class="section"><a href="service-interactions.html">1.3. Relationships Between Servers and Clients</a></span></dt><dd><dl><dt><span class="section"><a href="service-interactions.html#ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</a></span></dt><dt><span class="section"><a href="service-interactions.html#ipa-clients">1.3.2. About FreeIPA Clients</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="installing-ipa.html">2. Installing a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardw
are Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#prerequisites">2.1.3. System Prerequisites</a></span></dt></dl></dd><dt><span class="section"><a href="Installing_the_IPA_Server_Packages.html">2.2. Installing the FreeIPA Server Packages</a></span></dt><dt><span class="section"><a href="creating-server.html">2.3. Creating a FreeIPA Server Instance</a></span></dt><dd><dl><dt><span class="section"><a href="creating-server.html#install-command">2.3.1. About ipa-server-install</a></span></dt><dt><span class="section"><a href="creating-server.html#install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</a></span></dt><dt><span class="section"><a href="creating-server.html#install-examples">2.3.3. Examples of Creating the FreeIPA Server</a></span></dt><dt><spa
n class="section"><a href="creating-server.html#troubleshooting-install">2.3.4. Troubleshooting Installation Problems</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_up_IPA_Replicas.html">2.4. Setting up FreeIPA Replicas</a></span></dt><dd><dl><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#installing-replica">2.4.1. Prepping and Installing the Replica Server</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#creating-the-replica">2.4.2. Creating the Replica</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</a></span></dt></dl></dd><dt><span class="section"><a href="Uninstalling_IPA_Servers.html">2.5. Uninstalling FreeIPA Servers and Replicas</a></span></dt></dl></dd><dt><span class="chapter"><a href="setting-up-clients.html">3. Setting up Systems as FreeIPA Clients</a></span></dt><dd><dl><dt><span class="se
ction"><a href="setting-up-clients.html#what-happens-clients">3.1. What Happens in Client Setup</a></span></dt><dt><span class="section"><a href="Installing_the_IPA_Client_on_Linux.html">3.2. Configuring a Fedora System as a FreeIPA Client</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html">3.3. Configuring a Solaris System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html">3.4. Configuring an HP-UX System as a FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on
_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</a></span></dt><dt><span
class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#hp-test">3.4.7. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html">3.5. Configuring an AIX System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring
Kerberos Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#testing-config-on-mac">3.6.5. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="troubleshooting-client-install.html">3.7. Troubleshooting Client Installations</a></span></dt><dt><span class="secti
on"><a href="uninstalling-clients.html">3.8. Uninstalling a FreeIPA Client</a></span></dt></dl></dd><dt><span class="chapter"><a href="basic-usage.html">4. Basic Usage</a></span></dt><dd><dl><dt><span class="section"><a href="basic-usage.html#running-scripts">4.1. Running FreeIPA Tools</a></span></dt><dt><span class="section"><a href="logging-in.html">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="logging-in.html#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="logging-in.html#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="logging-in.html#checking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="logging-in.html#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="opening-the-web-ui.h
tml">4.3. Opening the FreeIPA Web UI</a></span></dt><dt><span class="section"><a href="config-browser.html">4.4. Configuring the Browser</a></span></dt><dt><span class="section"><a href="Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System.html">4.5. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="Enabling_UsernamePassword_Authentication_in_Your_Browser.html">4.6. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="Troubleshooting-UI.html">4.7. Troubleshooting UI Connection Problems</a></span></dt></dl></dd><dt><span class="chapter"><a href="users.html">5. Identity: Managing Users and User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="users.html#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="users.html#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="sec
tion"><a href="users.html#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="users.html#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="managing-users.html">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="managing-users.html#about-user-entries">5.2.1. About User Entries</a></span></dt><dt><span class="section"><a href="managing-users.html#adding-users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="managing-users.html#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="managing-users.html#Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="managing-users.html#Configuring_IPA_Users-Deleting_IPA_Users">5.2.5. Deleting Users</a></span
></dt></dl></dd><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">5.3. Specifying Default User Settings</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#config-show">5.3.1. Showing the Settings Configuration</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#adding-custom-objclasses">5.3.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-limits">5.3.3. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-fields">5.3.4. Setting Search Attributes</a></span></dt></dl></dd><dt><span class="section"><a href="changing-pwds.html">5.4. Changing Passwords</a></span></dt><dt><span class="section"><a href
="user-pwdpolicy.html">5.5. Defining Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="user-pwdpolicy.html#about-pwd-policy">5.5.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#viewing-the_Password_Policy">5.5.2. Viewing Password Policies</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#The_IPA_Password_Policy-Editing_the_Password_Policy">5.5.3. Editing the Global Password Policy</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#Setting_Different_Password_Policies_for_Different_User_Groups">5.5.4. Setting Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies">5.5.5. Setting the Priority of Group Password Policies</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#The_IPA_Pa
ssword_Policy-Using_SSH_for_Password_Authentication">5.5.6. Enabling a Password Change Dialog</a></span></dt></dl></dd><dt><span class="section"><a href="user-groups.html">5.6. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Creating_IPA_Groups">5.6.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="user-groups.html#adding-members">5.6.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Deleting_IPA_Groups">5.6.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="searching.html">5.7. Searching for Users and Groups</a></span></dt></dl></dd><dt><span class="chapter"><a href="kerberos.html">6. Identity: Managing the Kerberos Domain</a></span></dt><dd><dl><dt><span class="section"><a href="kerberos.html#about-kerberos">6.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href=
"kerberos.html#about-principal-names">6.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="kerberos.html#about-keytabs">6.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="kerb-policies.html">6.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="kerb-policies.html#kerb-policies-global">6.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="kerb-policies.html#user-ticket-policies">6.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html">6.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="kerberos-pwd-cache.html">6.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="removing-keytabs.html">6.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="Kerberos_Errors.h
tml">6.6. Troubleshooting Kerberos Errors</a></span></dt></dl></dd><dt><span class="chapter"><a href="automount.html">7. Identity: Using Automount</a></span></dt><dd><dl><dt><span class="section"><a href="automount.html#about-automount">7.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="configuring-automount.html">7.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Configuring_autofs_on_Linux">7.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Solaris_automount">7.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="adding-locations.html">7.3. Configuring Locations</a></span></dt><dt><span class="section"><a href="configuring-maps.html">7.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-maps.html
#Configuring_Direct_Maps">7.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#Configuring_Indirect_Maps">7.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#importing-maps">7.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="active-directory.html">8. Identity: Integrating with Microsoft Active Directory</a></span></dt><dd><dl><dt><span class="section"><a href="active-directory.html#about-active-directory">8.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="active-directory.html#about-sync">8.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="active-directory.html#about-sync-schema">8.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="active-directory.html#Windows_Sync-Schema_Di
fferences-users">8.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_up_Active_Directory.html">8.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="password-sync.html">8.3. Exempting Active Directory Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html">8.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="managing-sync-agmt.html#exporting-ad-cert">8.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Creating_Synchronization_Agreements">8.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Modifying_Synchronization_Agreements">8.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt
><span class="section"><a href="managing-sync-agmt.html#changing-subtree">8.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Deleting_Synchronization_Agreements">8.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">8.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Microsoft_Windows.html">8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></dd><dt><span class="chapter"><a href="nis.html">9. Identity: Integrating with NIS Domains and Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="nis.html#about-nis">9.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="adding-netgroups.html">9.2. Adding Netgroups</a></span></dt><dt><span class="section"><a href="Exposi
ng_Automount_Maps_to_NIS_Clients.html">9.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html">9.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="migrating-from-nis.html#creating-netgroup-entries">9.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html#nis-migr-exporting-data">9.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="Working_with_DNS.html">10. Identity: Managing DNS</a></span></dt><dd><dl><dt><span class="section"><a href="Working_with_DNS.html#about-dns">10.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="enabling-dns.html">10.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="bind-dyndb-ldap-config.html">10.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section
"><a href="changing-forwarder.html">10.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="finding-dns-zones.html">10.5. Finding and Displaying DNS Zones</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html">10.6. Adding DNS Zones</a></span></dt><dt><span class="section"><a href="modifying-dns-zones.html">10.7. Modifying DNS Zones</a></span></dt><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html">10.8. Enabling Dynamic DNS Updates</a></span></dt><dt><span class="section"><a href="enabling-zones.html">10.9. Enabling and Disabling Zones</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">10.10. Adding Records to DNS Zones</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">10.11. Deleting Records from DNS Zones</a></span></dt><dt><span class="section"><a hre
f="dns-resolve.html">10.12. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></dd><dt><span class="chapter"><a href="hosts.html">11. Policy: Managing Hosts, Services, and Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="hosts.html#about-hosts">11.1. About Hosts and Services in FreeIPA</a></span></dt><dt><span class="section"><a href="adding-host-entry.html">11.2. Adding Host Entries</a></span></dt><dt><span class="section"><a href="managing-services.html">11.3. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="managing-services.html#adding-service-entry">11.3.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="managing-services.html#request-service-service">11.3.2. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="managing-services.html#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">11.3.3. Configurin
g an NFS Service</a></span></dt><dt><span class="section"><a href="managing-services.html#Creating_an_IPA_Service-Using_NSS">11.3.4. Storing Certificates in NSS Databases</a></span></dt></dl></dd><dt><span class="section"><a href="host-disable.html">11.4. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="host-groups.html">11.5. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="host-groups.html#creating-host-groups">11.5.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="host-groups.html#hg-adding-members">11.5.2. Adding Group Members</a></span></dt></dl></dd><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html">11.6. Extending the Permissions of FreeIPA Managed Hosts</a></span></dt><dd><dl><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#Delegating_Service_Management">11.6.1. Delegating Service Management</a></span></d
t><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#Delegating_Host_Management">11.6.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#accessing-service">11.6.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="configuring-host-access.html">11.7. Configuring Host-Based Access Control</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-host-access.html#HBAC_Service_Groups">11.7.1. Defining Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dt><span class="section"><a href="configuring-host-access.html#hbac-rules">11.7.2. Setting Host-Based Access Control Rules</a></span></dt><dt><span class="section"><a href="configuring-host-access.html#hbac-testing">11.7.3. Testing Host-Based Access Control Rules</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="sudo
.html">12. Policy: Using sudo</a></span></dt><dd><dl><dt><span class="section"><a href="sudo.html#about-sudo">12.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="defining-sudocmds.html">12.2. Setting up sudo Commands and Command Groups</a></span></dt><dt><span class="section"><a href="defining-sudorules.html">12.3. Defining sudo Rules</a></span></dt><dt><span class="section"><a href="example-configuring-sudo.html">12.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">12.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">12.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="server-config.html">13. Configuring the FreeIPA Server</a></span></
dt><dd><dl><dt><span class="section"><a href="server-config.html#default.conf">13.1. About default.conf</a></span></dt><dt><span class="section"><a href="managing-access-to-ipa.html">13.2. Defining Access Controls within FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="managing-access-to-ipa.html#Server_side_Access_Control">13.2.1. Server-side Access Control</a></span></dt><dt><span class="section"><a href="managing-access-to-ipa.html#creating-roles">13.2.2. Creating Roles</a></span></dt><dt><span class="section"><a href="managing-access-to-ipa.html#self-service">13.2.3. Defining Self-Service Settings</a></span></dt></dl></dd><dt><span class="section"><a href="disabling-anon-binds.html">13.3. Disabling Anonymous Binds</a></span></dt><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html">13.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes
.html#id-ranges-at-install">13.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#Assigning_UIDs_and_GIDs-Adding_New_Ranges">13.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Certificates_and_Certificate_Authorities.html">13.5. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="Using_OCSP.html">13.6. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="Using_OCSP.html#ocsp-interval">13.6.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="Using_OCSP.html#ocsp-location">13.6.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-apache.html">13.7. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="ipa-cluster.html">13.8. Using F
reeIPA in a Cluster</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-cluster.html#Implementing_IPA_in_a_Clustered_Environment-Configuring_Kerberos_Credentials_for_a_Clustered_Environment">13.8.1. Configuring Kerberos Credentials for a Clustered Environment</a></span></dt><dt><span class="section"><a href="ipa-cluster.html#Implementing_IPA_in_a_Clustered_Environment-Using_the_Same_Service_Principal_for_Multiple_Services">13.8.2. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="logging.html">13.9. Checking FreeIPA Server Logs</a></span></dt><dt><span class="section"><a href="dns-multihomed.html">13.10. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="promoting-replica.html">13.11. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dt><span class="section"><a href="upgrading-server.html">13.12. Testing Before Upgrading the FreeIPA Server</a>
</span></dt></dl></dd><dt><span class="chapter"><a href="managing-clients.html">14. Managing Client Machines in the FreeIPA Domain</a></span></dt><dd><dl><dt><span class="section"><a href="managing-clients.html#about-machine-auth">14.1. About Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="enrolling-machines.html">14.2. Enrolling Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a href="enrolling-machines.html#Enrollment_with_Separation_of_Duties">14.2.1. Performing a Split Enrollment</a></span></dt><dt><span class="section"><a href="enrolling-machines.html#bulk-enrollment">14.2.2. Performing a Bulk or Kickstart Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="renaming-machines.html">14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration</a></span></dt><dt><span class="section"><a href="manually-unconfig-machines.html">14.4. Manually Unconfiguring Client Machines</a></span></dt><dt><
span class="section"><a href="Client_Problems.html">14.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="certmongerX.html">14.6. Working with certmonger</a></span></dt><dd><dl><dt><span class="section"><a href="certmongerX.html#certmonger-req">14.6.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="certmongerX.html#Working_with_certmonger-Using_certmonger_with_NSS">14.6.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="certmongerX.html#certmonger-tracking-certs">14.6.3. Tracking Certificates with certmonger</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="Migrating_from_a_Directory_Server_to_IPA.html">15. Migrating from a Directory Server to IPA</a></span></dt><dd><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA.html#Overview-Assumptions">15.1. Understanding Red Hat Directory Server to FreeIPA Migratio
n</a></span></dt><dt><span class="section"><a href="Overview-Recommended_Sequence_of_Steps.html">15.2. Recommended Sequence of Steps</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html">15.3. Performing a Server-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_1_Migrating_Existing_Data_to_IPA">15.3.1. Step 1: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_2_Updating_the_Client_Configuration">15.3.2. Step 2: Updating the Client Configuration</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based
_Migration-Phase_3_Installing_and_Configuring_SSSD">15.3.3. Step 3: Installing and Configuring SSSD</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_4_Migrating_Users">15.3.4. Step 4: Migrating Users</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.html#Performing_a_Server_based_Migration-Phase_5_Decommission_the_DS">15.3.5. Step 5: Decommission the DS</a></span></dt></dl></dd><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html">15.4. Performing a Client-based Migration</a></span></dt><dd><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_1_Installing_and_Configuring_SSSD">15.4.1. Step 1: Installing an
d Configuring SSSD</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_2_Migrating_Existing_Data_to_IPA">15.4.2. Step 2: Migrating Existing Data to IPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_3_Migrate_SSSD_Clients_from_LDAP_to_IPA">15.4.3. Step 3: Migrate SSSD Clients from LDAP to IPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_4_Reconfigure_non_SSSD_Clients">15.4.4. Step 4: Reconfigure non-SSSD Clients</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html#Performing_a_Client_based_Migration-Phase_5_Decommission_the_Di
rectory_Server">15.4.5. Step 5: Decommission the Directory Server</a></span></dt></dl></dd></dl></dd><dt><span class="appendix"><a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html">A. Frequently Asked Questions</a></span></dt><dt><span class="appendix"><a href="tools-reference.html">B. FreeIPA Tools Reference</a></span></dt><dd><dl><dt><span class="section"><a href="tools-reference.html#special-chars">B.1. Using Special Characters</a></span></dt><dt><span class="section"><a href="ipa.html">B.2. ipa</a></span></dt><dd><dl><dt><span class="section"><a href="ipa.html#ipa-location">B.2.1. Location</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-syntax">B.2.2. Syntax</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-topics">B.2.3. Help Topics</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-global-options">B.2.4. Global Options</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-return-codes">B.2.
5. Return Codes</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-commands">B.2.6. Commands</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-dns.html">B.3. ipa DNS Commands</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-dns.html#ipa-command-dnszone-add">B.3.1. ipa dnszone-add</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-command-host.html">B.4. ipa Host Commands</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-command-host.html#ipa-host-add">B.4.1. ipa host-add</a></span></dt></dl></dd><dt><span class="section"><a href="server-tools.html">B.5. Server Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="server-tools.html#ipa-replica-install">B.5.1. ipa-replica-install</a></span></dt><dt><span class="section"><a href="server-tools.html#ipa-replica-prepare">B.5.2. ipa-replica-prepare</a></span></dt><dt><span class="section"><a href="server-tools.html#ipa-server-install">B.5.3. ipa-server-inst
all</a></span></dt></dl></dd><dt><span class="section"><a href="client-tools.html">B.6. Client Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="client-tools.html#ipa-client-install">B.6.1. ipa-client-install</a></span></dt></dl></dd></dl></dd><dt><span class="glossary"><a href="Glossary.html">Glossary</a></span></dt><dt><span class="index"><a href="ix01.html">Index</a></span></dt></dl></div></div><ul class="docnav"><li class="previous"></li><li class="next"><a accesskey="n" href="Preface.html"><strong>Next</strong>Preface</a></li></ul></body></html>
+ </div></div></div></div><hr /></div><div class="toc"><dl><dt><span class="preface"><a href="Preface.html">Preface</a></span></dt><dd><dl><dt><span class="section"><a href="Preface.html#audience">1. Audience and Purpose</a></span></dt><dt><span class="section"><a href="Document_Conventions.html">2. Examples and Formatting</a></span></dt><dd><dl><dt><span class="section"><a href="Document_Conventions.html#bracketsexamples">2.1. Brackets</a></span></dt><dt><span class="section"><a href="Document_Conventions.html#tool-locations">2.2. Client Tool Information</a></span></dt><dt><span class="section"><a href="Document_Conventions.html#guide-formatting">2.3. Text Formatting and Styles</a></span></dt></dl></dd><dt><span class="section"><a href="feedback.html">3. Giving Feedback</a></span></dt><dt><span class="section"><a href="doc-history.html">4. Document Change History</a></span></dt></dl></dd><dt><span class="chapter"><a href="introduction.html">1. Introduction to FreeIPA</a></s
pan></dt><dd><dl><dt><span class="section"><a href="introduction.html#ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</a></span></dt><dd><dl><dt><span class="section"><a href="introduction.html#ipadefined">1.1.1. A Working Definition for FreeIPA</a></span></dt><dt><span class="section"><a href="introduction.html#comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-linux-services.html">1.2. Bringing Linux Services Together</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-linux-services.html#Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#Directory_Server">1.2.2. Data Storage: 389 Directory Server</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#certificate-services">1.2.3. Authentication: Dogtag Certificate System</a></span></dt><dt><span class="section"><a href="ipa-l
inux-services.html#dns">1.2.4. Server/Client Discovery: DNS</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#NTP">1.2.5. Management: NTP</a></span></dt></dl></dd><dt><span class="section"><a href="service-interactions.html">1.3. Relationships Between Servers and Clients</a></span></dt><dd><dl><dt><span class="section"><a href="service-interactions.html#ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</a></span></dt><dt><span class="section"><a href="service-interactions.html#ipa-clients">1.3.2. About FreeIPA Clients</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="installing-ipa.html">2. Installing a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardw
are Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#prerequisites">2.1.3. System Prerequisites</a></span></dt></dl></dd><dt><span class="section"><a href="Installing_the_IPA_Server_Packages.html">2.2. Installing the FreeIPA Server Packages</a></span></dt><dt><span class="section"><a href="creating-server.html">2.3. Creating a FreeIPA Server Instance</a></span></dt><dd><dl><dt><span class="section"><a href="creating-server.html#install-command">2.3.1. About ipa-server-install</a></span></dt><dt><span class="section"><a href="creating-server.html#install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</a></span></dt><dt><span class="section"><a href="creating-server.html#install-examples">2.3.3. Examples of Creating the FreeIPA Server</a></span></dt><dt><spa
n class="section"><a href="creating-server.html#troubleshooting-install">2.3.4. Troubleshooting Installation Problems</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_up_IPA_Replicas.html">2.4. Setting up FreeIPA Replicas</a></span></dt><dd><dl><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#installing-replica">2.4.1. Prepping and Installing the Replica Server</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#creating-the-replica">2.4.2. Creating the Replica</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</a></span></dt></dl></dd><dt><span class="section"><a href="Uninstalling_IPA_Servers.html">2.5. Uninstalling FreeIPA Servers and Replicas</a></span></dt></dl></dd><dt><span class="chapter"><a href="setting-up-clients.html">3. Setting up Systems as FreeIPA Clients</a></span></dt><dd><dl><dt><span class="se
ction"><a href="setting-up-clients.html#what-happens-clients">3.1. What Happens in Client Setup</a></span></dt><dt><span class="section"><a href="Installing_the_IPA_Client_on_Linux.html">3.2. Configuring a Fedora System as a FreeIPA Client</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html">3.3. Configuring a Solaris System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html">3.4. Configuring an HP-UX System as a FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on
_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_PAM">3.4.4. Configuring PAM</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</a></span></dt><dt><span
class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#hp-test">3.4.7. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html">3.5. Configuring an AIX System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2. Configuring the AIX Client</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring
Kerberos Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#testing-config-on-mac">3.6.5. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="troubleshooting-client-install.html">3.7. Troubleshooting Client Installations</a></span></dt><dt><span class="secti
on"><a href="uninstalling-clients.html">3.8. Uninstalling a FreeIPA Client</a></span></dt></dl></dd><dt><span class="chapter"><a href="basic-usage.html">4. Basic Usage</a></span></dt><dd><dl><dt><span class="section"><a href="basic-usage.html#about-client-tools">4.1. About the FreeIPA Client Tools</a></span></dt><dd><dl><dt><span class="section"><a href="basic-usage.html#about-cli-tools">4.1.1. About the FreeIPA Command-Line Tools</a></span></dt><dt><span class="section"><a href="basic-usage.html#ipa-ui">4.1.2. Looking at the FreeIPA UI</a></span></dt></dl></dd><dt><span class="section"><a href="logging-in.html">4.2. Logging into FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="logging-in.html#logging-in-kinit">4.2.1. Logging into FreeIPA</a></span></dt><dt><span class="section"><a href="logging-in.html#switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</a></span></dt><dt><span class="section"><a href="logging-in.html#c
hecking-current-creds">4.2.3. Checking the Current Logged in User</a></span></dt><dt><span class="section"><a href="logging-in.html#caching-tickets">4.2.4. Caching User Kerberos Tickets</a></span></dt></dl></dd><dt><span class="section"><a href="using-the-ui.html">4.3. Using the FreeIPA Web UI</a></span></dt><dd><dl><dt><span class="section"><a href="using-the-ui.html#opening-the-web-ui">4.3.1. Opening the FreeIPA Web UI</a></span></dt><dt><span class="section"><a href="using-the-ui.html#config-browser">4.3.2. Configuring the Browser</a></span></dt><dt><span class="section"><a href="using-the-ui.html#Using_a_Browser_on_Another_System">4.3.3. Using a Browser on Another System</a></span></dt><dt><span class="section"><a href="using-the-ui.html#Enabling_UsernamePassword_Authentication_in_Your_Browser">4.3.4. Enabling Username/Password Authentication in Your Browser</a></span></dt><dt><span class="section"><a href="using-the-ui.html#Troubleshooting-UI">4.3.5. Troubleshooting UI
Connection Problems</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="users.html">5. Identity: Managing Users and User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="users.html#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="users.html#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="users.html#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="users.html#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="managing-users.html">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="managing-users.html#about-user-entries">5.2.1. About User Entries</a></span></dt><dt><span class="section"><a href="managing-users.html#adding-users">5.2.2. Adding Users</a></span></dt
><dt><span class="section"><a href="managing-users.html#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="managing-users.html#Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="managing-users.html#Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="changing-pwds.html">5.3. Changing Passwords</a></span></dt><dd><dl><dt><span class="section"><a href="changing-pwds.html#pwd-reset-ui">5.3.1. From the Web UI</a></span></dt><dt><span class="section"><a href="changing-pwds.html#pwd-reset-cmd">5.3.2. From the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html">5.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#id-ranges-at-install">5.4.1. Abou
t ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#Assigning_UIDs_and_GIDs-Adding_New_Ranges">5.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="user-groups.html">5.5. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Creating_IPA_Groups">5.5.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="user-groups.html#adding-members">5.5.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Deleting_IPA_Groups">5.5.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="searching.html">5.6. Searching for Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="searching.html#user-search-ui">5.6.1. With the UI</a></span></dt><dt><span class="section"><a href="searching.htm
l#user-search-cmd">5.6.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">5.7. Specifying Default User and Group Settings</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#config-show">5.7.1. Viewing the Settings Configuration</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#adding-custom-objclasses">5.7.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#adding-custom-objclasses-groups">5.7.3. Applying Custom Object Classes to New Group Entries</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-limits">5.7.4. Setting Default Search Limits</a></span></dt><dt><span class="section">
<a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-fields">5.7.5. Setting User Search Attributes</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-fields-groups">5.7.6. Setting Group Search Attributes</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="hosts.html">6. Identity: Managing Hosts and Services</a></span></dt><dd><dl><dt><span class="section"><a href="hosts.html#about-hosts">6.1. About Hosts, Services, and Machine Identity and Authentication</a></span></dt><dt><span class="section"><a href="adding-host-entry.html">6.2. Adding Host Entries</a></span></dt><dd><dl><dt><span class="section"><a href="adding-host-entry.html#adding-host-entry-ui">6.2.1. Adding Host Entries from the Web UI</a></span></dt><dt><span class="section"><a href="adding-host-entry.html#adding-host-entry-cmd">6.2.2. Adding Host Entries from the Command Line</a></span></dt></dl></dd><dt><spa
n class="section"><a href="enrolling-machines.html">6.3. Enrolling Clients Manually</a></span></dt><dd><dl><dt><span class="section"><a href="enrolling-machines.html#Enrollment_with_Separation_of_Duties">6.3.1. Performing a Split Enrollment</a></span></dt><dt><span class="section"><a href="enrolling-machines.html#bulk-enrollment">6.3.2. Performing a Bulk or Kickstart Enrollment</a></span></dt></dl></dd><dt><span class="section"><a href="manually-unconfig-machines.html">6.4. Manually Unconfiguring Client Machines</a></span></dt><dt><span class="section"><a href="Client_Problems.html">6.5. Debugging Client Connection Problems</a></span></dt><dt><span class="section"><a href="managing-services.html">6.6. Managing Services</a></span></dt><dd><dl><dt><span class="section"><a href="managing-services.html#adding-service-entry">6.6.1. Adding and Editing Service Entries and Keytabs</a></span></dt><dt><span class="section"><a href="managing-services.html#request-service-service">6.6.2
. Adding Services and Certificates for Services</a></span></dt><dt><span class="section"><a href="managing-services.html#Configuring_an_NFS_Service_Principal_on_the_IPA_Server">6.6.3. Configuring an NFS Service</a></span></dt><dt><span class="section"><a href="managing-services.html#Creating_an_IPA_Service-Using_NSS">6.6.4. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="managing-services.html#ipa-cluster">6.6.5. Configuring Clustered Services</a></span></dt><dt><span class="section"><a href="managing-services.html#Using_the_Same_Service_Principal_for_Multiple_Services">6.6.6. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="host-disable.html">6.7. Disabling Host and Service Entries</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html">6.8. Extending Access Permissions over Other Hosts and Services</a></span></dt><dd><dl><
dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#Delegating_Service_Management">6.8.1. Delegating Service Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#Delegating_Host_Management">6.8.2. Delegating Host Management</a></span></dt><dt><span class="section"><a href="Extending_the_Permissions_of_IPA_Managed_Hosts.html#accessing-service">6.8.3. Accessing Delegated Services</a></span></dt></dl></dd><dt><span class="section"><a href="renaming-machines.html">6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration</a></span></dt><dt><span class="section"><a href="host-groups.html">6.10. Managing Host Groups</a></span></dt><dd><dl><dt><span class="section"><a href="host-groups.html#creating-host-groups">6.10.1. Creating Host Groups</a></span></dt><dt><span class="section"><a href="host-groups.html#hg-adding-members">6.10.2. Adding Group Members</a></span></dt></dl></dd
></dl></dd><dt><span class="chapter"><a href="active-directory.html">7. Identity: Integrating with Microsoft Active Directory</a></span></dt><dd><dl><dt><span class="section"><a href="active-directory.html#about-active-directory">7.1. About Active Directory, FreeIPA, and Identity Management</a></span></dt><dd><dl><dt><span class="section"><a href="active-directory.html#about-sync">7.1.1. About Active Directory Synchronization</a></span></dt><dt><span class="section"><a href="active-directory.html#about-sync-schema">7.1.2. Attributes Which Are Synchronized</a></span></dt><dt><span class="section"><a href="active-directory.html#Windows_Sync-Schema_Differences-users">7.1.3. User Schema Differences between FreeIPA and Active Directory</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_up_Active_Directory.html">7.2. Setting up Active Directory for Synchronization</a></span></dt><dt><span class="section"><a href="password-sync.html">7.3. Exempting Active Directory
Users from Password Synchronization</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html">7.4. Managing Synchronization Agreements</a></span></dt><dd><dl><dt><span class="section"><a href="managing-sync-agmt.html#exporting-ad-cert">7.4.1. Obtaining the Active Directory CA Certificate</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Creating_Synchronization_Agreements">7.4.2. Creating Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Modifying_Synchronization_Agreements">7.4.3. Changing the Behavior for Syncing User Account Attributes</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#changing-subtree">7.4.4. Changing the Synchronized Windows Subtree</a></span></dt><dt><span class="section"><a href="managing-sync-agmt.html#Deleting_Synchronization_Agreements">7.4.5. Deleting Synchronization Agreements</a></span></dt><dt><span class="section"><a href="managi
ng-sync-agmt.html#Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">7.4.6. Winsync Agreement Failures</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Microsoft_Windows.html">7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></span></dt></dl></dd><dt><span class="chapter"><a href="Working_with_DNS.html">8. Identity: Managing DNS</a></span></dt><dd><dl><dt><span class="section"><a href="Working_with_DNS.html#about-dns">8.1. About DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="enabling-dns.html">8.2. Configuring DNS in FreeIPA</a></span></dt><dt><span class="section"><a href="bind-dyndb-ldap-config.html">8.3. Configuring the bind-dyndb-ldap Plug-in</a></span></dt><dt><span class="section"><a href="changing-forwarder.html">8.4. Changing Recursive Queries Against Forwarders</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html">8.5. Adding DNS Zones</a></span></dt><dd><dl><
dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html#Managing_DNS_Zones-Adding_DNS_Zones-ui">8.5.1. Adding DNS Zones from the Web UI</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_DNS_Zones.html#Managing_DNS_Zones-Adding_DNS_Zones-cmd">8.5.2. Adding DNS Zones from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="modifying-dns-zones.html">8.6. Modifying DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="modifying-dns-zones.html#editing-dns-zone-ui">8.6.1. Editing the Zone Configuration in the Web UI</a></span></dt><dt><span class="section"><a href="modifying-dns-zones.html#editing-dns-zone-cmd">8.6.2. Editing the Zone Configuration in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html">8.7. Enabling Dynamic DNS Updates</a></span></dt><dd><dl><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DN
S_Updates.html#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-ui">8.7.1. Enabling Dynamic DNS Updates in the Web UI</a></span></dt><dt><span class="section"><a href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html#Adding_DNS_Zones-Using_Dynamic_DNS_Updates-cmd">8.7.2. Enabling Dynamic DNS Updates in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="enabling-zones.html">8.8. Enabling and Disabling Zones</a></span></dt><dd><dl><dt><span class="section"><a href="enabling-zones.html#enabling-zones-ui">8.8.1. Disabling Zones in the Web UI</a></span></dt><dt><span class="section"><a href="enabling-zones.html#enabling-zones-cmd">8.8.2. Disabling Zones in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">8.9. Adding Records to DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-ui">8.9.1. Adding
DNS Resource Records from the Web UI</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">8.9.2. Adding DNS Resource Records from the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">8.10. Deleting Records from DNS Zones</a></span></dt><dd><dl><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-ui">8.10.1. Deleting Records with the Web UI</a></span></dt><dt><span class="section"><a href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html#Managing_DNS_Zones-Deleting_Records_from_DNS_Zones-cmd">8.10.2. Deleting Records with the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="dns-resolve.html">8.11. Resolving Hostnames in the FreeIPA Domain</a></span></dt></dl></dd><dt><span class="chapter"><a href="automount
.html">9. Policy: Using Automount</a></span></dt><dd><dl><dt><span class="section"><a href="automount.html#about-automount">9.1. About Automount and FreeIPA</a></span></dt><dt><span class="section"><a href="configuring-automount.html">9.2. Configuring Automount</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Configuring_autofs_on_Linux">9.2.1. Configuring autofs on Fedora</a></span></dt><dt><span class="section"><a href="configuring-automount.html#Configuring_Automount-Solaris_automount">9.2.2. Configuring Automount on Solaris</a></span></dt></dl></dd><dt><span class="section"><a href="adding-locations.html">9.3. Configuring Locations</a></span></dt><dd><dl><dt><span class="section"><a href="adding-locations.html#configuring-locations-ui">9.3.1. Configuring Locations through the Web UI</a></span></dt><dt><span class="section"><a href="adding-locations.html#configuring-locations-cmd">9.3.2. Configuring Locations throu
gh the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="configuring-maps.html">9.4. Configuring Maps</a></span></dt><dd><dl><dt><span class="section"><a href="configuring-maps.html#Configuring_Direct_Maps">9.4.1. Configuring Direct Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#Configuring_Indirect_Maps">9.4.2. Configuring Indirect Maps</a></span></dt><dt><span class="section"><a href="configuring-maps.html#importing-maps">9.4.3. Importing Automount Maps</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="nis.html">10. Policy: Integrating with NIS Domains and Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="nis.html#about-nis">10.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="adding-netgroups.html">10.2. Creating Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="adding-netgroups.html#add-netgroup">10.2.1. Adding Netgroups</a></span></dt><dt
><span class="section"><a href="adding-netgroups.html#add-netgroup-members">10.2.2. Adding Netgroup Members</a></span></dt></dl></dd><dt><span class="section"><a href="Exposing_Automount_Maps_to_NIS_Clients.html">10.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html">10.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="migrating-from-nis.html#creating-netgroup-entries">10.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html#nis-migr-exporting-data">10.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="user-pwdpolicy.html">11. Policy: Defining Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="user-pwdpolicy.html#about-pwd-policy">11.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href
="viewing-the_Password_Policy.html">11.2. Viewing Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="viewing-the_Password_Policy.html#viewing-global">11.2.1. Viewing the Global Password Policy</a></span></dt><dt><span class="section"><a href="viewing-the_Password_Policy.html#viewing-group-pwd-policies">11.2.2. Viewing Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="viewing-the_Password_Policy.html#viewing-pwdpolicy-user">11.2.3. Viewing the Password Policy in Effect for a User</a></span></dt></dl></dd><dt><span class="section"><a href="The_IPA_Password_Policy-Editing_the_Password_Policy.html">11.3. Editing the Global Password Policy</a></span></dt><dd><dl><dt><span class="section"><a href="The_IPA_Password_Policy-Editing_the_Password_Policy.html#edit-global-policy-ui">11.3.1. With the UI</a></span></dt><dt><span class="section"><a href="The_IPA_Password_Policy-Editing_the_Password_Policy.html#edit-global-policy-cmd">11
.3.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_Different_Password_Policies_for_Different_User_Groups.html">11.4. Creating Group-Level Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="Setting_Different_Password_Policies_for_Different_User_Groups.html#creating-group-policy-ui">11.4.1. With the Web UI</a></span></dt><dt><span class="section"><a href="Setting_Different_Password_Policies_for_Different_User_Groups.html#creating-group-policy-cmd">11.4.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_the_Priority_of_Password_Policies.html">11.5. Changing the Priority of Group Password Policies</a></span></dt><dt><span class="section"><a href="Setting_Account-lockout_Policies.html">11.6. Setting Account Lockout Policies</a></span></dt><dt><span class="section"><a href="Using_SSH_for_Password_Authentication.html">11.7. Enabling a Password Change Dialog</a></span></dt
></dl></dd><dt><span class="chapter"><a href="kerberos.html">12. Policy: Managing the Kerberos Domain</a></span></dt><dd><dl><dt><span class="section"><a href="kerberos.html#about-kerberos">12.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href="kerberos.html#about-principal-names">12.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="kerberos.html#about-keytabs">12.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="kerb-policies.html">12.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="kerb-policies.html#kerb-policies-global">12.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="kerb-policies.html#user-ticket-policies">12.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html">12.3. Refreshing Kerberos Tic
kets</a></span></dt><dt><span class="section"><a href="kerberos-pwd-cache.html">12.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="removing-keytabs.html">12.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="Kerberos_Errors.html">12.6. Troubleshooting Kerberos Errors</a></span></dt></dl></dd><dt><span class="chapter"><a href="sudo.html">13. Policy: Using sudo</a></span></dt><dd><dl><dt><span class="section"><a href="sudo.html#about-sudo">13.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="defining-sudocmds.html">13.2. Setting up sudo Commands and Command Groups</a></span></dt><dd><dl><dt><span class="section"><a href="defining-sudocmds.html#adding-sudo-cmds">13.2.1. Adding sudo Commands</a></span></dt><dt><span class="section"><a href="defining-sudocmds.html#adding-sudo-cmdgrp">13.2.2. Adding sudo Command Groups</a></span></dt></dl></dd><dt><span class="section"><a href="defining-sudorules.html">13.3.
Defining sudo Rules</a></span></dt><dd><dl><dt><span class="section"><a href="defining-sudorules.html#sudo-rules-ui">13.3.1. Defining sudo Rules in the Web UI</a></span></dt><dt><span class="section"><a href="defining-sudorules.html#sudo-rules-cmd">13.3.2. Defining sudo Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="example-configuring-sudo.html">13.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">13.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">13.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="configuring-host-access.html">14. Policy: Configuring Host-Based Access Control</a></span></dt><dd><dl><dt><span class="
section"><a href="configuring-host-access.html#about-hbac">14.1. About Host-Based Access Control</a></span></dt><dt><span class="section"><a href="HBAC_Service_Groups.html">14.2. Creating Host-Based Access Control Entries for Services and Service Groups</a></span></dt><dd><dl><dt><span class="section"><a href="HBAC_Service_Groups.html#adding-hbac-svc">14.2.1. Adding HBAC Services</a></span></dt><dt><span class="section"><a href="HBAC_Service_Groups.html#adding-hbac-svcgrp">14.2.2. Adding Service Groups</a></span></dt></dl></dd><dt><span class="section"><a href="hbac-rules.html">14.3. Defining Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="hbac-rules.html#hbac-rules-ui">14.3.1. Setting Host-Based Access Control Rules in the Web UI</a></span></dt><dt><span class="section"><a href="hbac-rules.html#hbac-rules-cmd">14.3.2. Setting Host-Based Access Control Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a hr
ef="hbac-testing.html">14.4. Testing Host-Based Access Control Rules</a></span></dt><dd><dl><dt><span class="section"><a href="hbac-testing.html#hbac-limits">14.4.1. The Limits of Host-Based Access Control Configuration</a></span></dt><dt><span class="section"><a href="hbac-testing.html#hbac-test-examples">14.4.2. Test Scenarios for Host-Based Access Control</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="server-access-controls.html">15. Configuration: Defining Access Control within FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="server-access-controls.html#about-ipa-access-controls">15.1. About Access Controls for FreeIPA Entries</a></span></dt><dt><span class="section"><a href="self-service.html">15.2. Defining Self-Service Settings</a></span></dt><dd><dl><dt><span class="section"><a href="self-service.html#self-service-ui">15.2.1. Creating Self-Service Rules from the Web UI</a></span></dt><dt><span class="section"><a href="self-serv
ice.html#self-service-cli">15.2.2. Creating Self-Service Rules from the Command Line</a></span></dt><dt><span class="section"><a href="self-service.html#self-service-edit">15.2.3. Editing Self-Service Rules</a></span></dt></dl></dd><dt><span class="section"><a href="delegating-users.html">15.3. Delegating Permissions over Users</a></span></dt><dd><dl><dt><span class="section"><a href="delegating-users.html#delegating-attributes-ui">15.3.1. Delegating Access to User Groups in the Web UI</a></span></dt><dt><span class="section"><a href="delegating-users.html#delegating-attributes-cli">15.3.2. Delegating Access to User Groups in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="defining-roles.html">15.4. Defining Role-Based Access Controls</a></span></dt><dd><dl><dt><span class="section"><a href="defining-roles.html#creating-roles">15.4.1. Creating Roles</a></span></dt><dt><span class="section"><a href="defining-roles.html#creating-perms">15.4.2. Crea
ting New Permissions</a></span></dt><dt><span class="section"><a href="defining-roles.html#creating-priv">15.4.3. Creating New Privileges</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="server-config.html">16. Configuring the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="server-config.html#ipa-files">16.1. FreeIPA Files and Logs</a></span></dt><dd><dl><dt><span class="section"><a href="server-config.html#file-ref">16.1.1. A Reference of FreeIPA Server Configuration Files and Directories</a></span></dt><dt><span class="section"><a href="server-config.html#default.conf">16.1.2. About default.conf and Context Configuration Files</a></span></dt><dt><span class="section"><a href="server-config.html#logging">16.1.3. Checking FreeIPA Server Logs</a></span></dt></dl></dd><dt><span class="section"><a href="disabling-anon-binds.html">16.2. Disabling Anonymous Binds</a></span></dt><dt><span class="section"><a href="Configuring_Certificat
es_and_Certificate_Authorities.html">16.3. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="Using_OCSP.html">16.4. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="Using_OCSP.html#ocsp-interval">16.4.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="Using_OCSP.html#ocsp-location">16.4.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-apache.html">16.5. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="dns-multihomed.html">16.6. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="promoting-replica.html">16.7. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="promoting-replica.html#promoting-pki">16.7.1. Promoting a Replica with a Dogtag Certificate System C
A</a></span></dt><dt><span class="section"><a href="promoting-replica.html#promoting-selfsigned">16.7.2. Promoting a Replica with a Self-Signed CA</a></span></dt></dl></dd><dt><span class="section"><a href="upgrading-server.html">16.8. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></dd><dt><span class="chapter"><a href="Migrating_from_a_Directory_Server_to_IPA.html">17. Migrating from a 389 Directory Server to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA.html#Overview-Assumptions">17.1. Understanding 389 Directory Server to FreeIPA Migration</a></span></dt><dt><span class="section"><a href="migration-considerations.html">17.2. Migration Considerations</a></span></dt><dt><span class="section"><a href="Overview-Recommended_Sequence_of_Steps.html">17.3. Migration Sequence</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Server_based_Migration.ht
ml">17.4. Scenario 1: Migrating Directly to FreeIPA</a></span></dt><dt><span class="section"><a href="Migrating_from_a_Directory_Server_to_IPA-Performing_a_Client_based_Migration.html">17.5. Scenario 2: Using SSSD as Part of Migration</a></span></dt></dl></dd><dt><span class="chapter"><a href="certmongerX.html">18. Working with certmonger</a></span></dt><dd><dl><dt><span class="section"><a href="certmongerX.html#certmonger-req">18.1. Requesting a Certificate with certmonger</a></span></dt><dt><span class="section"><a href="Working_with_certmonger-Using_certmonger_with_NSS.html">18.2. Storing Certificates in NSS Databases</a></span></dt><dt><span class="section"><a href="certmonger-tracking-certs.html">18.3. Tracking Certificates with certmonger</a></span></dt></dl></dd><dt><span class="appendix"><a href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html">A. Frequently Asked Questions</a></span></dt><dt><span class="appendix"><a href="tools-reference.h
tml">B. FreeIPA Tools Reference</a></span></dt><dd><dl><dt><span class="section"><a href="tools-reference.html#special-chars">B.1. Using Special Characters</a></span></dt><dt><span class="section"><a href="ipa.html">B.2. ipa</a></span></dt><dd><dl><dt><span class="section"><a href="ipa.html#ipa-location">B.2.1. Location</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-syntax">B.2.2. Syntax</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-topics">B.2.3. Help Topics</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-global-options">B.2.4. Global Options</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-return-codes">B.2.5. Return Codes</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-commands">B.2.6. Commands</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-dns.html">B.3. ipa DNS Commands</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-dns.html#ipa-command-dnszone-add">B.3.1. ipa dn
szone-add</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-command-host.html">B.4. ipa Host Commands</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-command-host.html#ipa-host-add">B.4.1. ipa host-add</a></span></dt></dl></dd><dt><span class="section"><a href="server-tools.html">B.5. Server Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="server-tools.html#ipa-replica-install">B.5.1. ipa-replica-install</a></span></dt><dt><span class="section"><a href="server-tools.html#ipa-replica-prepare">B.5.2. ipa-replica-prepare</a></span></dt><dt><span class="section"><a href="server-tools.html#ipa-server-install">B.5.3. ipa-server-install</a></span></dt></dl></dd><dt><span class="section"><a href="client-tools.html">B.6. Client Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="client-tools.html#ipa-client-install">B.6.1. ipa-client-install</a></span></dt></dl></dd></dl></dd><dt><span class="glossary"><a href="Glossary.html"
>Glossary</a></span></dt><dt><span class="index"><a href="ix01.html">Index</a></span></dt></dl></div></div><ul class="docnav"><li class="previous"></li><li class="next"><a accesskey="n" href="Preface.html"><strong>Next</strong>Preface</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html
index 404d141..fb81074 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/installing-ipa.html
@@ -1,25 +1,25 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 2. Installing a FreeIPA Server</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 2. Installing a FreeIPA Server</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="service-interactions.html" title="1.3. Relationships Between Servers and Clients" /><link rel="next" href="Installing_the_IPA_Server_Packages.html" title="2.2. Installing the FreeIPA Server Packages" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="service-interactions.htm
l"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Installing_the_IPA_Server_Packages.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="installing-ipa" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 2. Installing a FreeIPA Server</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#prerequisites">2.1.3. System Prerequisites</a></span></dt></dl></dd><dt><span class="section"><a href="Instal
ling_the_IPA_Server_Packages.html">2.2. Installing the FreeIPA Server Packages</a></span></dt><dt><span class="section"><a href="creating-server.html">2.3. Creating a FreeIPA Server Instance</a></span></dt><dd><dl><dt><span class="section"><a href="creating-server.html#install-command">2.3.1. About ipa-server-install</a></span></dt><dt><span class="section"><a href="creating-server.html#install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</a></span></dt><dt><span class="section"><a href="creating-server.html#install-examples">2.3.3. Examples of Creating the FreeIPA Server</a></span></dt><dt><span class="section"><a href="creating-server.html#troubleshooting-install">2.3.4. Troubleshooting Installation Problems</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_up_IPA_Replicas.html">2.4. Setting up FreeIPA Replicas</a></span></dt><dd><dl><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#installing-replica">2.4.
1. Prepping and Installing the Replica Server</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#creating-the-replica">2.4.2. Creating the Replica</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</a></span></dt></dl></dd><dt><span class="section"><a href="Uninstalling_IPA_Servers.html">2.5. Uninstalling FreeIPA Servers and Replicas</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="service-interactions.html" title="1.3. Relationships Between Servers and Clients" /><link rel="next" href="Installing_the_IPA_Server_Packages.html" title="2.2. Installing the FreeIPA Server Packages" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="service-interactions.ht
ml"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Installing_the_IPA_Server_Packages.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="installing-ipa" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 2. Installing a FreeIPA Server</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</a></span></dt><dt><span class="section"><a href="installing-ipa.html#prerequisites">2.1.3. System Prerequisites</a></span></dt></dl></dd><dt><span class="section"><a href="Insta
lling_the_IPA_Server_Packages.html">2.2. Installing the FreeIPA Server Packages</a></span></dt><dt><span class="section"><a href="creating-server.html">2.3. Creating a FreeIPA Server Instance</a></span></dt><dd><dl><dt><span class="section"><a href="creating-server.html#install-command">2.3.1. About ipa-server-install</a></span></dt><dt><span class="section"><a href="creating-server.html#install-interactive">2.3.2. Setting up a FreeIPA Server: Basic Interactive Installation</a></span></dt><dt><span class="section"><a href="creating-server.html#install-examples">2.3.3. Examples of Creating the FreeIPA Server</a></span></dt><dt><span class="section"><a href="creating-server.html#troubleshooting-install">2.3.4. Troubleshooting Installation Problems</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_up_IPA_Replicas.html">2.4. Setting up FreeIPA Replicas</a></span></dt><dd><dl><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#installing-replica">2.4
.1. Prepping and Installing the Replica Server</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#creating-the-replica">2.4.2. Creating the Replica</a></span></dt><dt><span class="section"><a href="Setting_up_IPA_Replicas.html#troubleshooting-replica-install">2.4.3. Troubleshooting Replica Installation</a></span></dt></dl></dd><dt><span class="section"><a href="Uninstalling_IPA_Servers.html">2.5. Uninstalling FreeIPA Servers and Replicas</a></span></dt></dl></div><div class="para">
The FreeIPA domain is defined and managed by a FreeIPA <span class="emphasis"><em>server</em></span> which is essentially a domain controller. There can be multiple domain controllers within a domain for load-balancing and failover tolerance. These additional servers are called <span class="emphasis"><em>replicas</em></span> of the master FreeIPA server.
</div><div class="para">
Both FreeIPA servers and replicas only run on Fedora systems. For both servers and replicas, the necessary packages must be installed and then the FreeIPA server or replica itself is configured through setup scripts, which configure all of the requisite services.
- </div><div class="section" id="Preparing_for_an_IPA_Installation"><div class="titlepage"><div><div><h2 class="title" id="Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</h2></div></div></div><div class="para">
+ </div><div class="section" id="Preparing_for_an_IPA_Installation"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="Preparing_for_an_IPA_Installation">2.1. Preparing to Install the FreeIPA Server</h2></div></div></div><div class="para">
Before you install FreeIPA, ensure that the installation environment is suitably configured. You also need to provide certain information during the installation and configuration procedures, including realm names and certain usernames and passwords. This section describes the information that you need to provide.
- </div><div class="section" id="Preparing_for_an_IPA_Installation-Hardware_Requirements"><div class="titlepage"><div><div><h3 class="title" id="Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</h3></div></div></div><div class="para">
+ </div><div class="section" id="Preparing_for_an_IPA_Installation-Hardware_Requirements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Preparing_for_an_IPA_Installation-Hardware_Requirements">2.1.1. Hardware Requirements</h3></div></div></div><div class="para">
A basic user entry is about 1 KB in size, as is a simple host entry with a certificate. The structure of the directory tree and the number of indexes in the Directory Server instance can impact the hardware required for the best performance. <a class="xref" href="installing-ipa.html#tab.Minimum_hardware_requirements_for_IPA">Table 2.1, “Minimum Hardware Requirements”</a> lists the recommended minimums. For customized systems, additional indexes, or larger user entries, it is more effective to increase the RAM than to increase the disk space because the Directory Server stores much of its data in cache. Add info for disk layout/size recommendations, from https://www.redhat.com/archives/freeipa-users/2011-May/msg00012.html
</div><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
The Directory Server instance used by the FreeIPA server can be tuned to increase performance. For tuning information, see the Directory Server documentation at <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Performance_Tuning_Guide/system-tuning.html">http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Performance_Tuning_Guide/system-tuning.html</a>.
</div></div></div><div class="para">
The system requirements for both 32-bit and 64-bit platforms are the same.
- </div><div class="table" id="tab.Minimum_hardware_requirements_for_IPA"><h6>Table 2.1. Minimum Hardware Requirements</h6><div class="table-contents"><table summary="Minimum Hardware Requirements" border="1"><colgroup><col width="25%" align="center" /><col width="25%" align="center" /><col width="25%" align="center" /><col width="25%" align="center" /></colgroup><thead><tr><th align="center">
+ </div><div class="table" id="tab.Minimum_hardware_requirements_for_IPA"><h6>Table 2.1. Minimum Hardware Requirements</h6><div class="table-contents"><table summary="Minimum Hardware Requirements" border="1"><colgroup><col width="25%" align="center" class="Col1" /><col width="25%" align="center" class="Col2" /><col width="25%" align="center" class="Col3" /><col width="25%" align="center" class="Col4" /></colgroup><thead><tr><th align="center">
Minimum Hardware Requirements
</th><th align="center">
10,000 - 250,000 Entries
@@ -47,21 +47,35 @@
4 GB
</td><td align="center">
8 GB
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Preparing_for_an_IPA_Installation-Software_Requirements"><div class="titlepage"><div><div><h3 class="title" id="Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Preparing_for_an_IPA_Installation-Software_Requirements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Preparing_for_an_IPA_Installation-Software_Requirements">2.1.2. Software Requirements</h3></div></div></div><div class="para">
Most of the packages that a FreeIPA server depends on are installed as dependencies when the FreeIPA packages are installed. There are some packages, however, which are required before installing the FreeIPA packages:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Kerberos 1.9
</div></li><li class="listitem"><div class="para">
The <span class="package">named</span> and <span class="package">bind-dyndb-ldap</span> packages for DNS
- </div></li></ul></div></div><div class="section" id="prerequisites"><div class="titlepage"><div><div><h3 class="title" id="prerequisites">2.1.3. System Prerequisites</h3></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="prerequisites"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="prerequisites">2.1.3. System Prerequisites</h3></div></div></div><div class="para">
The FreeIPA server is set up using a configuration script, and this script makes certain assumption about the host system. If the system does not meet these prerequisites, then server configuration may fail.
- </div><div class="section" id="prereq-ds"><div class="titlepage"><div><div><h4 class="title" id="prereq-ds">2.1.3.1. Directory Server</h4></div></div></div><div class="para">
+ </div><div class="section" id="hostname-requirements"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="hostname-requirements">2.1.3.1. Hostname Requirements</h4></div></div></div><div class="para">
+ Regardless of whether the DNS is within the FreeIPA server or external, the server host must have DNS properly configured:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The hostname must be a fully-qualified domain name. For example, <code class="systemitem">ipa.example.com</code>.
+ </div></li><li class="listitem"><div class="para">
+ The server's machine name must be set and resolve to its public IP address. The fully-qualified domain name cannot resolve to the loopback address. It must resolve to the machine's public IP address, not to <code class="systemitem">127.0.0.1</code>. The output of the <code class="command">hostname</code> command cannot be <code class="systemitem">localhost</code> or <code class="systemitem">localhost6</code>.
+ </div></li><li class="listitem"><div class="para">
+ The reverse of the address that the hostname resolves to must match the hostname.
+ </div></li><li class="listitem"><div class="para">
+ The DNS must be correctly configured to resolve forward and reverse addresses. The DNS does not need to be on the same machine as the FreeIPA server, but it does need to be fully functional.
+ </div><div class="para">
+ If you do not have a functional DNS, you can use the <code class="option">--setup-dns</code> option when you install FreeIPA to configure a suitable DNS automatically.
+ </div></li><li class="listitem"><div class="para">
+ The installation process checks that the FreeIPA server name is a DNS A record and that its reverse and forward addresses match. This check is not performed if a FreeIPA DNS server is installed using the <code class="option">--setup-dns</code> option because the script assumes that the FreeIPA server will use itself as a DNS.
+ </div></li></ul></div></div><div class="section" id="prereq-ds"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-ds">2.1.3.2. Directory Server</h4></div></div></div><div class="para">
There must not be any instances of 389 Directory Server installed on the host machine.
- </div></div><div class="section" id="prereq-system"><div class="titlepage"><div><div><h4 class="title" id="prereq-system">2.1.3.2. System Files </h4></div></div></div><div class="para">
+ </div></div><div class="section" id="prereq-system"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-system">2.1.3.3. System Files </h4></div></div></div><div class="para">
The server script overwrites system files to set up the FreeIPA domain. The system should be clean, without custom configuration for services like DNS and Kerberos, before configuring the FreeIPA server.
- </div></div><div class="section" id="prereq-ports"><div class="titlepage"><div><div><h4 class="title" id="prereq-ports">2.1.3.3. System Ports</h4></div></div></div><div class="para">
+ </div></div><div class="section" id="prereq-ports"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-ports">2.1.3.4. System Ports</h4></div></div></div><div class="para">
FreeIPA uses a number of ports to communicate with its services. These ports, listed in <a class="xref" href="installing-ipa.html#tab.ipa-ports">Table 2.2, “FreeIPA Ports”</a>, must be open and available for FreeIPA to work. They cannot be in use by another service or blocked by a firewall. To make sure that these ports are available, try <code class="command">iptables</code> to list the available ports or <code class="command">nc</code>, <code class="command">telnet</code>, or <code class="command">nmap</code> to connect to a port or run a port scan.
- </div><div class="table" id="tab.ipa-ports"><h6>Table 2.2. FreeIPA Ports</h6><div class="table-contents"><table summary="FreeIPA Ports" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="table" id="tab.ipa-ports"><h6>Table 2.2. FreeIPA Ports</h6><div class="table-contents"><table summary="FreeIPA Ports" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th>
Service
</th><th>
Ports
@@ -89,37 +103,23 @@
</td><td>
53
</td></tr><tr><td>
- NTP<sup>[<a id="id3248298" href="#ftn.id3248298" class="footnote">b</a>]</sup>
+ NTP<sup>[<a id="id791778" href="#ftn.id791778" class="footnote">b</a>]</sup>
</td><td>
123
</td></tr><tr><td>
Dogtag Certificate System
</td><td>
- <table border="0" summary="Simple list" class="simplelist"><tr><td>9180 (OCSP responder, non-SSL)</td></tr><tr><td>9443 (agents)</td></tr><tr><td>9444 (users, SSL)</td></tr><tr><td>9445 (administrators)</td></tr><tr><td>9446 (users, client authentication)</td></tr><tr><td>9701 (Tomcat)</td></tr><tr><td>7389 (interal LDAP database)</td></tr></table>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>9180 (OCSP responder, non-SSL)</td></tr><tr><td>9443 (agents)</td></tr><tr><td>9444 (users, SSL)</td></tr><tr><td>9445 (administrators)</td></tr><tr><td>9446 (users, client authentication)</td></tr><tr><td>9701 (Tomcat)</td></tr><tr><td>7389 (internal LDAP database)</td></tr></table>
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote" id="ft.udp-tcp"><p><sup>[<a id="ftn.ft.udp-tcp" href="#ft.udp-tcp" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="2"><div class="footnote" id="ft.udp-tcp"><div class="para"><sup>[<a id="ftn.ft.udp-tcp" href="#ft.udp-tcp" class="para">a</a>] </sup>
This service uses both TCP and UDP ports.
- </p></div><div class="footnote"><p><sup>[<a id="ftn.id3248298" href="#id3248298" class="para">b</a>] </sup>
+ </div></div><div class="footnote"><div class="para"><sup>[<a id="ftn.id791778" href="#id791778" class="para">b</a>] </sup>
This service uses UDP ports only.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="prereq-ntp"><div class="titlepage"><div><div><h4 class="title" id="prereq-ntp">2.1.3.4. NTP</h4></div></div></div><div class="para">
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="prereq-ntp"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="prereq-ntp">2.1.3.5. NTP</h4></div></div></div><div class="para">
If a server is being installed on a virtual machine, that server <span class="emphasis"><em>should not</em></span> run an NTP server. To disable NTP for FreeIPA, use the <code class="option">--no-ntp</code> option.
- </div></div><div class="section" id="Preparing_for_an_IPA_Installation-DNS"><div class="titlepage"><div><div><h4 class="title" id="Preparing_for_an_IPA_Installation-DNS">2.1.3.5. DNS</h4></div></div></div><div class="para">
+ </div></div><div class="section" id="Preparing_for_an_IPA_Installation-DNS"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Preparing_for_an_IPA_Installation-DNS">2.1.3.6. DNS</h4></div></div></div><div class="para">
FreeIPA uses DNS for the FreeIPA clients to find (<span class="emphasis"><em>discover</em></span>) the FreeIPA servers. The DNS service can be managed by FreeIPA itself, or FreeIPA can use an existing DNS server. Without a properly configured and working DNS, server discovery for clients and FreeIPA services like, LDAP, Kerberos, and SSL may fail to work.
- </div><div class="section" id="dns-requirements"><div class="titlepage"><div><div><h5 class="title" id="dns-requirements">2.1.3.5.1. DNS Requirements</h5></div></div></div><div class="para">
- Regardless of whether the DNS is within the FreeIPA server or external, the server host must have DNS properly configured:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The server's machine name must be set and resolve to its public IP address. The fully-qualified domain name cannot resolve to the loopback address. It must resolve to the machine's public IP address, not to <code class="systemitem">127.0.0.1</code>. The output of the <code class="command">hostname</code> command cannot be <code class="systemitem">localhost</code> or <code class="systemitem">localhost6</code>.
- </div></li><li class="listitem"><div class="para">
- The hostname must be fully qualified. For example, <code class="systemitem">ipa.example.com</code>.
- </div></li><li class="listitem"><div class="para">
- The reverse of the address that the hostname resolves to must match the hostname.
- </div></li><li class="listitem"><div class="para">
- The DNS must be correctly configured to resolve forward and reverse addresses. The DNS does not need to be on the same machine as the FreeIPA server, but it does need to be fully functional.
- </div><div class="para">
- If you do not have a functional DNS, you can use the <code class="option">--setup-dns</code> option when you install FreeIPA to automatically configure a suitable DNS.
- </div></li><li class="listitem"><div class="para">
- The installation process checks that the FreeIPA server name is a DNS A record and that its reverse and forward addresses match. This check is not performed if a FreeIPA DNS server is installed using the <code class="option">--setup-dns</code> option because the script assumes that the FreeIPA server will use itself as a DNS.
- </div></li></ul></div></div><div class="section" id="dns-file"><div class="titlepage"><div><div><h5 class="title" id="dns-file">2.1.3.5.2. The FreeIPA-Generated DNS File</h5></div></div></div><div class="para">
+ </div><div class="section" id="dns-file"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="dns-file">2.1.3.6.1. The FreeIPA-Generated DNS File</h5></div></div></div><div class="para">
To help create and configure a suitable DNS setup, the FreeIPA installation script creates a sample zone file. During the installation, FreeIPA displays a message similar to the following:
</div><pre class="screen">Sample zone file for bind has been created in /tmp/sample.zone.F_uMf4.db
</pre><div class="para">
@@ -136,7 +136,7 @@ _kerberos._udp IN SRV 0 100 88 ipaserver.example.com
_kerberos-master._tcp IN SRV 0 100 88 ipaserver.example.com
_kerberos-master._udp IN SRV 0 100 88 ipaserver.example.com
_kpasswd._tcp IN SRV 0 100 464 ipaserver.example.com
-_kpasswd._udp IN SRV 0 100 464 ipaserver.example.com</pre></div><div class="section" id="DNS-IPA_DNS_and_NSCD"><div class="titlepage"><div><div><h5 class="title" id="DNS-IPA_DNS_and_NSCD">2.1.3.5.3. IPA, DNS, and NSCD</h5></div></div></div><div class="para">
+_kpasswd._udp IN SRV 0 100 464 ipaserver.example.com</pre></div><div class="section" id="DNS-IPA_DNS_and_NSCD"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="DNS-IPA_DNS_and_NSCD">2.1.3.6.2. IPA, DNS, and NSCD</h5></div></div></div><div class="para">
<span class="emphasis"><em>It is strongly recommended</em></span> that you avoid or restrict the use of <code class="systemitem">nscd</code> (Name Service Caching Daemon) in a FreeIPA deployment. The <code class="systemitem">nscd</code> service is extremely useful for reducing the load on the server, and for making clients more responsive, but there can be problems when a system is also using SSSD, which performs its own caching.
</div><div class="para">
<code class="systemitem">nscd</code> caches authentication and identity information for all services that perform queries through nsswitch, including <code class="command">getent</code>. Because <code class="systemitem">nscd</code> performs both positive and negative caching, if a request determines that a specific FreeIPA user does not exist, it marks this as a negative cache. Values stored in the cache remain until the cache expires, regardless of any changes that may occur on the server. The results of such caching is that new users and memberships may not be visible, and users and memberships that have been removed may still be visible.
@@ -146,16 +146,16 @@ _kpasswd._udp IN SRV 0 100 464 ipaserver.example.com</pre></div
negative-time-to-live group 60
positive-time-to-live hosts 3600
negative-time-to-live hosts 20
-</pre></div><div class="section" id="DNS-DNS_and_Kerberos"><div class="titlepage"><div><div><h5 class="title" id="DNS-DNS_and_Kerberos">2.1.3.5.4. DNS and Kerberos</h5></div></div></div><div class="para">
- The Kerberos server requires a valid DNS A record, and reverse DNS needs to work correctly. It is safe to use CNAMEs if they point to the A name that corresponds to the principal name used to create SPNs (service principal names) for the host. Avoid the use of DDNS names, however.
+</pre></div><div class="section" id="DNS-DNS_and_Kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="DNS-DNS_and_Kerberos">2.1.3.6.3. DNS and Kerberos</h5></div></div></div><div class="para">
+ The Kerberos server requires a valid DNS A record, and reverse DNS needs to work correctly. It is safe to use CNAMEs if they point to the A name that corresponds to the principal name used to create service principal names (SPN) for the host. Avoid the use of DDNS names, however.
</div><div class="para">
If necessary, add the hostname to the <code class="filename">/etc/hosts</code> file, as long as the fully qualified hostname must be listed first. For example:
<pre class="programlisting">10.0.0.1 ipa.example.com ipa</pre>
The realm name does not have to match any or all of the domain name. For example, the domain name can be <code class="systemitem">example.com</code> and the realm name can be <code class="systemitem">TESTIPA</code>. It is only a convention that they match. FreeIPA adds the appropriate domain to realm mapping in the <code class="filename">/etc/krb5.conf</code> file.
</div><div class="para">
A typical resolver looks in the <code class="filename">/etc/hosts</code> file first and DNS second. If <code class="systemitem">nscd</code> is running this may also cause issues because it caches lookups. The FreeIPA installer does not kill <code class="systemitem">nscd</code> until after the installation process has started, so there can be cached entries that interfere with any changes to the <code class="filename">/etc/hosts</code>. If you need to edit the <code class="filename">/etc/hosts</code> file, kill the <code class="systemitem">nscd</code> daemon first.
- </div></div><div class="section" id="dns-and-forwarders"><div class="titlepage"><div><div><h5 class="title" id="dns-and-forwarders">2.1.3.5.5. FreeIPA DNS and DNS Forwarders</h5></div></div></div><div class="para">
- There is an option to configure DNS <span class="emphasis"><em>forwarders</em></span> as part of the FreeIPA DNS configuration. This is beneficial if there is limited direct access to root name servers, such as an organization's main DNS server or even an externam DNS server.
+ </div></div><div class="section" id="dns-and-forwarders"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="dns-and-forwarders">2.1.3.6.4. FreeIPA DNS and DNS Forwarders</h5></div></div></div><div class="para">
+ There is an option to configure DNS <span class="emphasis"><em>forwarders</em></span> as part of the FreeIPA DNS configuration. This is beneficial if there is limited direct access to root name servers, such as an organization's main DNS server or even an external DNS server.
</div><div class="para">
Either interactively or through the install argument, forwarders can be listed as a comma-separated list of IP addresses.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
@@ -166,7 +166,7 @@ negative-time-to-live hosts 20
forwarders { 10.16.36.29; };
<strong class="userinput"><code>allow-recursion { any; };</code></strong></pre><div class="para">
This default behavior can be changed by changing the <code class="command">allow-recursion</code> statement. The name server documentation has more details on editing configuration statements.
- </div></div></div><div class="section" id="Preparing_for_an_IPA_Installation-Configuring_Networking"><div class="titlepage"><div><div><h4 class="title" id="Preparing_for_an_IPA_Installation-Configuring_Networking">2.1.3.6. Networking</h4></div></div></div><div class="section" id="Configuring_Networking-Configuring_Networking_Services"><div class="titlepage"><div><div><h5 class="title" id="Configuring_Networking-Configuring_Networking_Services">2.1.3.6.1. Configuring Networking Services</h5></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Preparing_for_an_IPA_Installation-Configuring_Networking"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Preparing_for_an_IPA_Installation-Configuring_Networking">2.1.3.7. Networking</h4></div></div></div><div class="section" id="Configuring_Networking-Configuring_Networking_Services"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="Configuring_Networking-Configuring_Networking_Services">2.1.3.7.1. Configuring Networking Services</h5></div></div></div><div class="para">
The default networking service used by Fedora is NetworkManager, and due to the way this service works, it can cause problems with FreeIPA and the KDC. Consequently, it is highly recommended that you use the <code class="systemitem">network</code> service to manage the networking requirements in a FreeIPA environment and disable the NetworkManager service.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Boot the machine into single-user mode and run the following commands:
@@ -180,7 +180,7 @@ negative-time-to-live hosts 20
Ensure that static networking is correctly configured.
</div></li><li class="listitem"><div class="para">
Restart the system.
- </div></li></ol></div></div><div class="section" id="Configuring_Networking-Configuring_the_etchosts_File"><div class="titlepage"><div><div><h5 class="title" id="Configuring_Networking-Configuring_the_etchosts_File">2.1.3.6.2. Configuring the /etc/hosts File</h5></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Configuring_Networking-Configuring_the_etchosts_File"><div class="titlepage"><div><div keep-together.within-column="always"><h5 class="title" id="Configuring_Networking-Configuring_the_etchosts_File">2.1.3.7.2. Configuring the /etc/hosts File</h5></div></div></div><div class="para">
You need to ensure that your <code class="filename">/etc/hosts</code> file is configured correctly. A misconfigured file can prevent the FreeIPA command-line tools from functioning correctly and can prevent the FreeIPA web interface from connecting to the FreeIPA server.
</div><div class="para">
Configure the <code class="filename">/etc/hosts</code> file to list the FQDN for the FreeIPA server <span class="emphasis"><em>before</em></span> any aliases. Also ensure that the hostname is not part of the <code class="literal">localhost</code> entry. The following is an example of a valid hosts file:
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/introduction.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/introduction.html
index beb0392..28e3051 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/introduction.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/introduction.html
@@ -1,21 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 1. Introduction to FreeIPA</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 1. Introduction to FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="doc-history.html" title="4. Document Change History" /><link rel="next" href="ipa-linux-services.html" title="1.2. Bringing Linux Services Together" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="doc-history.html"><strong>Prev</strong></a></li><li class="next"><a accessk
ey="n" href="ipa-linux-services.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="introduction" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 1. Introduction to FreeIPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="introduction.html#ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</a></span></dt><dd><dl><dt><span class="section"><a href="introduction.html#ipadefined">1.1.1. A Working Definition for FreeIPA</a></span></dt><dt><span class="section"><a href="introduction.html#comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-linux-services.html">1.2. Bringing Linux Services Together</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-linux-services.html#Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#Dire
ctory_Server">1.2.2. Data Storage: 389 Directory Server</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#certificate-services">1.2.3. Authentication: Dogtag Certificate System</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#dns">1.2.4. Server/Client Discovery: DNS</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#NTP">1.2.5. Management: NTP</a></span></dt></dl></dd><dt><span class="section"><a href="service-interactions.html">1.3. Relationships Between Servers and Clients</a></span></dt><dd><dl><dt><span class="section"><a href="service-interactions.html#ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</a></span></dt><dt><span class="section"><a href="service-interactions.html#ipa-clients">1.3.2. About FreeIPA Clients</a></span></dt></dl></dd></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="doc-history.html" title="4. Document Change History" /><link rel="next" href="ipa-linux-services.html" title="1.2. Bringing Linux Services Together" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="doc-history.html"><strong>Prev</strong></a></li><li class="next"><a access
key="n" href="ipa-linux-services.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="introduction" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 1. Introduction to FreeIPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="introduction.html#ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</a></span></dt><dd><dl><dt><span class="section"><a href="introduction.html#ipadefined">1.1.1. A Working Definition for FreeIPA</a></span></dt><dt><span class="section"><a href="introduction.html#comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-linux-services.html">1.2. Bringing Linux Services Together</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-linux-services.html#Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#Dir
ectory_Server">1.2.2. Data Storage: 389 Directory Server</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#certificate-services">1.2.3. Authentication: Dogtag Certificate System</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#dns">1.2.4. Server/Client Discovery: DNS</a></span></dt><dt><span class="section"><a href="ipa-linux-services.html#NTP">1.2.5. Management: NTP</a></span></dt></dl></dd><dt><span class="section"><a href="service-interactions.html">1.3. Relationships Between Servers and Clients</a></span></dt><dd><dl><dt><span class="section"><a href="service-interactions.html#ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</a></span></dt><dt><span class="section"><a href="service-interactions.html#ipa-clients">1.3.2. About FreeIPA Clients</a></span></dt></dl></dd></dl></div><div class="para">
Red Hat FreeIPA is a way to create identity stores, centralized authentication, domain control for Kerberos and DNS services, and authorization policies — all on Linux systems, using native Linux tools. While centralized identity/policy/authorization software is hardly new, FreeIPA is one of the only options that supports Linux/Unix domains.
</div><div class="para">
FreeIPA provides a unifying skin for standards-defined, common network services, including PAM, LDAP, Kerberos, DNS, NTP, and certificate services, and it allows Red Hat Enterprise Linux systems to serve as the domain controllers.
</div><div class="para">
FreeIPA defines a domain, with servers and clients who share centrally-managed services, like Kerberos and DNS. This chapter first explains what FreeIPA is. This chapter also covers how all of these services work together within the domain and how servers and clients work with each other.
- </div><div class="section" id="ipa-v-ldap"><div class="titlepage"><div><div><h2 class="title" id="ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</h2></div></div></div><div class="para">
- At the most basic level, FreeIPA is a domain controller for Linux and Unix machines. FreeIPA defines the domain, using controlling servers and enrolled clien machines. This provides centralized structure that has previously been unavailable to Linux/Unix environments, and it does it using native Linux applications and protocols.
- </div><div class="section" id="ipadefined"><div class="titlepage"><div><div><h3 class="title" id="ipadefined">1.1.1. A Working Definition for FreeIPA</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-v-ldap"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-v-ldap">1.1. FreeIPA v. LDAP: A More Focused Type of Service</h2></div></div></div><div class="para">
+ At the most basic level, FreeIPA is a domain controller for Linux and Unix machines. FreeIPA defines the domain, using controlling servers and enrolled client machines. This provides centralized structure that has previously been unavailable to Linux/Unix environments, and it does it using native Linux applications and protocols.
+ </div><div class="section" id="ipadefined"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipadefined">1.1.1. A Working Definition for FreeIPA</h3></div></div></div><div class="para">
Security information frequently relates to <span class="emphasis"><em>identities</em></span> of users, machines, and services. Once the identity is verified, then access to services and resources can be controlled.
</div><div class="para">
For efficiency, risk management, and ease of administration, IT administrators try to manage identities as centrally as possible and to unite identity management with authentication and authorization policies. Historically, Linux environments have had a very difficult time establishing this centralized management. There are a number of different protocols (such as NIS and Kerberos) which define domains, while other applications store data (such as LDAP) and still others manage access (such as sudo). None of these applications talk to each other or use the same management tools. Every application had to be administered separately and it had to be managed locally. The only way to get a consistent identity policy was to copy configuration files around manually or to try to develop a proprietary application to manage identities and policies.
@@ -32,23 +32,23 @@
</div></li></ul></div><div class="para">
In a sense, FreeIPA isn't making administrators do something new; it is helping them do it better. There are a few ways to illustrate that.
</div><div class="para">
- On one extreme is the <span class="emphasis"><em>low control</em></span> environment. Little Example Corp. has several Linux and Unix servers, but each one is administred separately. All passwords are kept on the local machine, so there is no central identity or authentication process. Tim the IT Guy just has to manage users on every machine, set authentication and authorization policies separately, and maintain local passwords. With FreeIPA, things come to order. There is a simple way to have central user, password, and policy stores, so Tim the IT only has to maintain the identities on one machine (the FreeIPA server) and users and policies are uniformly applied to all machines. Using host-based access control, delegation, and other rules, he can even set different access levels for laptops and remote users.
+ On one extreme is the <span class="emphasis"><em>low control</em></span> environment. Little Example Corp. has several Linux and Unix servers, but each one is administered separately. All passwords are kept on the local machine, so there is no central identity or authentication process. Tim the IT Guy just has to manage users on every machine, set authentication and authorization policies separately, and maintain local passwords. With FreeIPA, things come to order. There is a simple way to have central user, password, and policy stores, so Tim the IT only has to maintain the identities on one machine (the FreeIPA server) and users and policies are uniformly applied to all machines. Using host-based access control, delegation, and other rules, he can even set different access levels for laptops and remote users.
</div><div class="para">
In the middle is the <span class="emphasis"><em>medium control</em></span> environment. Mid-Example Corp. has several Linux and Unix servers, but Bill the IT Guy has tried to maintain a greater degree of control by creating a NIS domain for machines, an LDAP directory for users, and Kerberos for authentication. While his environment is well under control, every application has to be maintained separately, using different tools. He also has to update all of the services manually whenever a new machine is added to his infrastructure or when one is taken offline. In this situation, FreeIPA greatly reduces his administrative overhead because it integrates all of the different applications together seamlessly, using a single and simplified tool set. It also makes it possible for him to implement single sign-on services for all of the machines in his domain.
</div><div class="para">
On the other extreme is <span class="emphasis"><em>absent control</em></span> environment. At Big Example Corp., most of the systems are Windows based and are managed in a tightly-knit Active Directory forest. However, development, production, and other teams have many Linux and Unix systems — which are basically excluded from the Windows controlled environment. FreeIPA brings native control to the Linux/Unix servers, using their native tools and applications — something that is not possible in an Active Directory forest. Additionally, because FreeIPA is Windows-aware, data can be synchronized between Active Directory and FreeIPA, preserving a centralized user store.
</div><div class="para">
FreeIPA provides a very simple solution to a very common, very specific problem: identity management.
- </div></div><div class="section" id="comparing"><div class="titlepage"><div><div><h3 class="title" id="comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="comparing"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="comparing">1.1.2. Contrasting FreeIPA with a Standard LDAP Directory</h3></div></div></div><div class="para">
The closest relative to FreeIPA is a standard LDAP directory like 389 Directory Server or a hybrid directory like Active Directory, but there are some intrinsic differences between what they do and what they're <span class="emphasis"><em>indended</em></span> to do.
</div><div class="para">
- First, it helps to understand what a directory service is. A directory service is a collection of software, hardware, and processes that stores information. While directory services can be highly specific (for example, DNS is a directory service because it stores information on hostnames), a global directory service can store and retrieve any kind of information. LDAP directories like 389 Directory Server are global directories. They have a flexible schema that supports entries for users, machines, network entities, physical equipment, and buildings, and that schema can be customized to define entries of almost anything. Because of its extensiblity, LDAP servers like 389 Directory Server are frequently used as backends that store data for other applications. 389 Directory Server not only contains information, it organizes information. LDAP directories uses a hierarchical structure, a <span class="emphasis"><em>directory tree</em></span>, that organize entries into parent
entries (suffixes or branches) and child entries. Directory trees can be very complex, with a lot of branch points, or very simple (flat) with few branch points.
+ First, it helps to understand what a directory service is. A directory service is a collection of software, hardware, and processes that stores information. While directory services can be highly specific (for example, DNS is a directory service because it stores information on hostnames), a global directory service can store and retrieve any kind of information. LDAP directories like 389 Directory Server are global directories. They have a flexible schema that supports entries for users, machines, network entities, physical equipment, and buildings, and that schema can be customized to define entries of almost anything. Because of its extensibility, LDAP servers like 389 Directory Server are frequently used as backends that store data for other applications. 389 Directory Server not only contains information, it organizes information. LDAP directories uses a hierarchical structure, a <span class="emphasis"><em>directory tree</em></span>, that organize entries into paren
t entries (suffixes or branches) and child entries. Directory trees can be very complex, with a lot of branch points, or very simple (flat) with few branch points.
</div><div class="para">
The primary feature of an LDAP directory is its generality. It can be made to fit into a variety of applications.
</div><div class="para">
FreeIPA, on the other hand, has a very specific purpose and fits a very specific application. It is not a general LDAP directory, it is not a backend, and it is not a general policy server. It is not generic.
</div><div class="para">
- FreeIPA focuses on identities (user and machine) and policies that relate to those identities and their interactions. While it uses an LDAP backend to store its data, FreeIPA has a higlhy-customized and specific set of schema that defines a particular set of identity-related entries and defines them in detail. It has a relatively flat and simple directory tree because it has only a handful of entry types and relationships that are relevant to its purpose. It has rules and limitations on how the FreeIPA server can be deployed because it can only be deployed for a specific purpose: managing identities. IPA and AD need to be carefully segmented
+ FreeIPA focuses on identities (user and machine) and policies that relate to those identities and their interactions. While it uses an LDAP backend to store its data, FreeIPA has a highly-customized and specific set of schema that defines a particular set of identity-related entries and defines them in detail. It has a relatively flat and simple directory tree because it has only a handful of entry types and relationships that are relevant to its purpose. It has rules and limitations on how the FreeIPA server can be deployed because it can only be deployed for a specific purpose: managing identities. IPA and AD need to be carefully segmented
</div><div class="para">
The restrictions on FreeIPA also give it a great deal of administrative simplicity. It has a simple installation process, a unified set of commands, and a clearly defined role in the overall IT infrastructure. A FreeIPA domain is easy to configure, easy to join, and easy to manage, and the functions that it serves — particularly identity/authentication tasks like enterprise-wide single sign-on —are also easier to do with FreeIPA than with a more general-purpose directory service.
</div><div class="table" id="tab.ipa-v-ldap"><h6>Table 1.1. FreeIPA Compared to 389 Directory Server</h6><div class="table-contents"><table summary="FreeIPA Compared to 389 Directory Server" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
@@ -106,7 +106,7 @@
</td><td>
Web-based UI and special Python command-line tools
</td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- LDAP directories like 389 Directory Server have flexibility and adaptibility which makes them a perfect backend to any number of applications. 389 Directory Server is a <span class="emphasis"><em>global directory service</em></span> because it can be adapted to meet a number of different needs. Its primary purpose is to store and retrieve data efficiently.
+ LDAP directories like 389 Directory Server have flexibility and adaptability which makes them a perfect backend to any number of applications. 389 Directory Server is a <span class="emphasis"><em>global directory service</em></span> because it can be adapted to meet a number of different needs. Its primary purpose is to store and retrieve data efficiently.
</div><div class="para">
FreeIPA fills a very different niche. It is optimized to perform a single task very effectively. It stores user information and authentication and authorization policies, as well as other information related to access, like host information. Its single purpose is to manage identities.
</div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="doc-history.html"><strong>Prev</strong>4. Document Change History</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="ipa-linux-services.html"><strong>Next</strong>1.2. Bringing Linux Services Together</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-apache.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-apache.html
index 93f1e86..e106460 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-apache.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-apache.html
@@ -1,32 +1,29 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.7. Setting a FreeIPA Server as an Apache Virtual Host</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.5. Setting a FreeIPA Server as an Apache Virtual Host</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="Using_OCSP.html" title="13.6. Configuring OCSP Responders" /><link rel="next" href="ipa-cluster.html" title="13.8. Using FreeIPA in a Cluster" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Using_OCSP.html"><strong>Prev</strong></a></li><li class="next">
<a accesskey="n" href="ipa-cluster.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa-apache"><div class="titlepage"><div><div><h2 class="title" id="ipa-apache">13.7. Setting a FreeIPA Server as an Apache Virtual Host</h2></div></div></div><div class="para">
- If you have a standard Apache instance running on port 80, you can configure FreeIPA to run on a secondary port, for example, on port 8089. You should be aware, however, that in this configuration, FreeIPA does not use <code class="systemitem">SSL</code>; all requests will use standard <code class="systemitem">HTTP</code>.
- </div><div class="para">
- The following procedure assumes that FreeIPA is configured to run on port 80, and that you want to move it to port 8089.
- </div><div class="orderedlist"><h6>To configure FreeIPA to run on port 8089:</h6><ol><li class="listitem"><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="Using_OCSP.html" title="16.4. Configuring OCSP Responders" /><link rel="next" href="dns-multihomed.html" title="16.6. Setting DNS Entries for Multi-Homed Servers" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Using_OCSP.html"><strong>Prev</strong></a><
/li><li class="next"><a accesskey="n" href="dns-multihomed.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa-apache"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-apache">16.5. Setting a FreeIPA Server as an Apache Virtual Host</h2></div></div></div><div class="para">
+ If a standard Apache instance is already running on port 80, then the FreeIPA server can be configured to run on a secondary port, such as port 8089.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ In this configuration, FreeIPA uses standard HTTP, not a secure connection using SSL.
+ </div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Do not use port 8080. This port is used by the FreeIPA web UI.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Log in as the <code class="systemitem">root</code> user.
</div></li><li class="listitem"><div class="para">
- Edit the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file. Add the following three lines to the beginning of the file:
+ Edit the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file so that it is formatted as an Apache virtual host. Add three lines to the beginning of the file to set the new port number for the FreeIPA web service and to create the root <code class="command"><VirtualHost></code> element.
</div><pre class="programlisting">Listen 8089
NameVirtualHost *:8089
<VirtualHost *:8089>
</pre></li><li class="listitem"><div class="para">
- Add the following line to the end of the file:
- </div><pre class="programlisting"></VirtualHost>
-</pre><div class="para">
- This wraps the entire FreeIPA configuration in a virtual host, and ensures that Apache is listening to that port.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- You cannot use port 8080. This port is used by the <code class="systemitem">ipa_webgui</code> service.
- </div></div></div></li><li class="listitem"><div class="para">
- Comment out the following rewrite rules from the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file:
+ Close the <code class="command"><VirtualHost></code> element by adding this line to the end of the file:
+ </div><pre class="programlisting"></VirtualHost></pre></li><li class="listitem"><div class="para">
+ Comment out the rewrite rules from the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file:
</div><pre class="programlisting">----------------------------------------------------------------------
# Redirect to the fully-qualified hostname. Not redirecting to secure
# port so configuration files can be retrieved without requiring SSL.
@@ -40,11 +37,9 @@ RewriteCond %{REQUEST_URI} !^/(errors|config|favicon.ico)
RewriteRule ^/(.*) https://host.foo.com/$1 [L,R=301,NC]
---------------------------------------------------------------------
</pre></li><li class="listitem"><div class="para">
- Reload the <code class="systemitem">httpd</code> service.
+ Restart the <code class="systemitem">httpd</code> service.
</div><div class="para">
<pre class="screen"># service httpd reload</pre>
- </div></li></ol></div><div class="para">
- This configures FreeIPA to run on port 8089, leaving port 80 free for your normal web site.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Using_OCSP.html"><strong>Prev</strong>13.6. Configuring OCSP Responders</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="ipa-cluster.html"><strong>Next</strong>13.8. Using FreeIPA in a Cluster</a></li></ul></body></html>
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Using_OCSP.html"><strong>Prev</strong>16.4. Configuring OCSP Responders</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="dns-multihomed.html"><strong>Next</strong>16.6. Setting DNS Entries for Multi-Homed Servers</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-command-host.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-command-host.html
index 631cc28..fd88334 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-command-host.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-command-host.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.4. ipa Host Commands</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.4. ipa Host Commands</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="ipa-dns.html" title="B.3. ipa DNS Commands" /><link rel="next" href="server-tools.html" title="B.5. Server Scripts" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-dns.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="server-tools
.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa-command-host"><div class="titlepage"><div><div><h2 class="title" id="ipa-command-host">B.4. ipa Host Commands</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="ipa-dns.html" title="B.3. ipa DNS Commands" /><link rel="next" href="server-tools.html" title="B.5. Server Scripts" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-dns.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="server-tool
s.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa-command-host"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-command-host">B.4. ipa Host Commands</h2></div></div></div><div class="para">
This is a collection of subcommands which manage the client, or host, configuration within the FreeIPA domain.
- </div><div class="section" id="ipa-host-add"><div class="titlepage"><div><div><h3 class="title" id="ipa-host-add">B.4.1. ipa host-add</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-host-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-host-add">B.4.1. ipa host-add</h3></div></div></div><div class="para">
Adds a new FreeIPA client machine to the domain manually. This is done as part of the enrollment process.
- </div><div class="section" id="ipa-host-add-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-host-add-syntax">B.4.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa host-add</code>
+ </div><div class="section" id="ipa-host-add-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-host-add-syntax">B.4.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa host-add</code>
<em class="replaceable"><code>hostname</code></em>
[
--desc="<em class="replaceable"><code>description</code></em>"
@@ -35,7 +35,7 @@
--no-reverse
] [
--ip-address=<em class="replaceable"><code>IPaddress</code></em>
- ]</p></div></div><div class="section" id="ipa-host-add-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-host-add-options">B.4.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-host-add-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-host-add-options">B.4.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Command
</th><th>
Description
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-dns.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-dns.html
index 4fcbf67..6424360 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-dns.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-dns.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.3. ipa DNS Commands</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.3. ipa DNS Commands</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="ipa.html" title="B.2. ipa" /><link rel="next" href="ipa-command-host.html" title="B.4. ipa Host Commands" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ipa-command-host.html"><st
rong>Next</strong></a></li></ul><div class="section" id="ipa-dns"><div class="titlepage"><div><div><h2 class="title" id="ipa-dns">B.3. ipa DNS Commands</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="ipa.html" title="B.2. ipa" /><link rel="next" href="ipa-command-host.html" title="B.4. ipa Host Commands" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ipa-command-host.html"><s
trong>Next</strong></a></li></ul><div class="section" id="ipa-dns"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-dns">B.3. ipa DNS Commands</h2></div></div></div><div class="para">
There are a collection of commands used to add and manage DNS zones and DNS records.
- </div><div class="section" id="ipa-command-dnszone-add"><div class="titlepage"><div><div><h3 class="title" id="ipa-command-dnszone-add">B.3.1. ipa dnszone-add</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-command-dnszone-add"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-command-dnszone-add">B.3.1. ipa dnszone-add</h3></div></div></div><div class="para">
Creates a new DNS zone in the FreeIPA server.
- </div><div class="section" id="ipa-dnszone-add-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-dnszone-add-syntax">B.3.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa dnszone-add</code>
+ </div><div class="section" id="ipa-dnszone-add-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-dnszone-add-syntax">B.3.1.1. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa dnszone-add</code>
<em class="replaceable"><code>zoneName</code></em>
[
--name-server=<em class="replaceable"><code>name</code></em>
@@ -41,7 +41,7 @@
--allow-dynupdate
] [
--force
- ]</p></div></div><div class="section" id="ipa-dnszone-add-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-dnszone-add-options">B.3.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-dnszone-add-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-dnszone-add-options">B.3.1.2. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Description
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-linux-services.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-linux-services.html
index abb450b..82e2ce7 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-linux-services.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa-linux-services.html
@@ -1,43 +1,43 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>1.2. Bringing Linux Services Together</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>1.2. Bringing Linux Services Together</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /><link rel="prev" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /><link rel="next" href="service-interactions.html" title="1.3. Relationships Between Servers and Clients" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="introduction.html"><strong>Prev</strong></a></
li><li class="next"><a accesskey="n" href="service-interactions.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa-linux-services"><div class="titlepage"><div><div><h2 class="title" id="ipa-linux-services">1.2. Bringing Linux Services Together</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /><link rel="prev" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /><link rel="next" href="service-interactions.html" title="1.3. Relationships Between Servers and Clients" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="introduction.html"><strong>Prev</strong></a><
/li><li class="next"><a accesskey="n" href="service-interactions.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa-linux-services"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-linux-services">1.2. Bringing Linux Services Together</h2></div></div></div><div class="para">
FreeIPA unifies disparate yet related Linux services into a single management environment. From there, it establishes a simple, easy way to bring host machines into the domain of those services.
</div><div class="para">
A FreeIPA server is, at its core, an identity and authentication server. The primary FreeIPA server, essentially a domain controller, uses a Kerberos server and KDC for authentication. An LDAP backend contains all of the domain information, including users, client machines, and domain configuration.
- </div><div class="figure" id="fig.server1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-server.png" width="600" alt="The FreeIPA Server: Unifying Services" /></div></div><h6>Figure 1.1. The FreeIPA Server: Unifying Services</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.server1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-server.png" width="444" alt="The FreeIPA Server: Unifying Services" /></div></div><h6>Figure 1.1. The FreeIPA Server: Unifying Services</h6></div><br class="figure-break" /><div class="para">
Other services are included to provide support for the core identity/authentication functions. DNS is used for machine discovery and for connecting to other clients in the domain. NTP is used to synchronize all domain clocks so that logging, certificates, and operations can occur as expected. A certificate service provides certificates for Kerberos-aware services. All of these additional services work together under the control of the FreeIPA server.
</div><div class="para">
The FreeIPA server also has a set of tools which are used to manage all of the FreeIPA-associated services. Rather than managing the LDAP server, KDC, or DNS settings individually, using different tools on local machines, FreeIPA has a single management toolset (CLI and web UI) that allows centralized and cohesive administration of the domain.
- </div><div class="section" id="Kerberos_KDC"><div class="titlepage"><div><div><h3 class="title" id="Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</h3></div></div></div><div class="para">
- Kerberos is an autnentication protocol. Kerberos uses symmetric key cryptography to generate <span class="emphasis"><em>tickets</em></span> to users. Kerberos-aware applications check the ticket cache (a <span class="emphasis"><em>keytab</em></span>) and authenticate users with valid tickets.
+ </div><div class="section" id="Kerberos_KDC"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Kerberos_KDC">1.2.1. Authentication: Kerberos KDC</h3></div></div></div><div class="para">
+ Kerberos is an authentication protocol. Kerberos uses symmetric key cryptography to generate <span class="emphasis"><em>tickets</em></span> to users. Kerberos-aware applications check the ticket cache (a <span class="emphasis"><em>keytab</em></span>) and authenticate users with valid tickets.
</div><div class="para">
- Kerberos authentication is significatly safer than normal password-based authentication because passwords are never sent over the network — even when services are accessed on other machines.
+ Kerberos authentication is significantly safer than normal password-based authentication because passwords are never sent over the network — even when services are accessed on other machines.
</div><div class="para">
In FreeIPA, the Kerberos administration server is set up on the FreeIPA domain controller, and all of the Kerberos data are stored in FreeIPA's backend Directory Server. The Directory Server instance defines and enforces access controls for the Kerberos data.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Th FreeIPA Kerberos server is managed through FreeIPA tools instead of Kerberos tools because all of its data are stored in the Directory Server instance. The KDC is unaware of the Directory Server, so managing the KDC with Kerberos tools does not effect the FreeIPA configuration.
- </div></div></div></div><div class="section" id="Directory_Server"><div class="titlepage"><div><div><h3 class="title" id="Directory_Server">1.2.2. Data Storage: 389 Directory Server</h3></div></div></div><div class="para">
+ </div></div></div></div><div class="section" id="Directory_Server"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Directory_Server">1.2.2. Data Storage: 389 Directory Server</h3></div></div></div><div class="para">
FreeIPA contains an internal 389 Directory Server instance. All of the Kerberos information, user accounts, groups, services, policy information, DNS zone and host entries, and all other information in FreeIPA is stored in this 389 Directory Server instance.
</div><div class="para">
When multiple servers are configured, they can talk to each other because 389 Directory Server supports <span class="emphasis"><em>multi-master replication</em></span>. Agreements are automatically configured between the initial server and any additional <span class="emphasis"><em>replicas</em></span> which are added to the domain.
- </div></div><div class="section" id="certificate-services"><div class="titlepage"><div><div><h3 class="title" id="certificate-services">1.2.3. Authentication: Dogtag Certificate System</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="certificate-services"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="certificate-services">1.2.3. Authentication: Dogtag Certificate System</h3></div></div></div><div class="para">
Kerberos can use certificates along with keytabs for authentication, and some services require certificates for secure communication. FreeIPA includes a certificate authority, through Dogtag Certificate System, with the server. This CA issues certificates to the server, replicas, and hosts and services within the FreeIPA domain.
</div><div class="para">
The CA can be a root CA or it can have its policies defined by another, external CA (so that it is <span class="emphasis"><em>subordinate</em></span> to that CA). Whether the CA is a root or subordinate CA is determined when the FreeIPA server is set up.
- </div></div><div class="section" id="dns"><div class="titlepage"><div><div><h3 class="title" id="dns">1.2.4. Server/Client Discovery: DNS</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="dns"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="dns">1.2.4. Server/Client Discovery: DNS</h3></div></div></div><div class="para">
FreeIPA defines a domain — multiple machines with different users and services, each accessing shared resources and using shared identity, authentication, and policy configuration. The clients need to be able to contact each other, as FreeIPA servers. Additionally, services like Kerberos depend on hostnames to identify their principal identities.
</div><div class="para">
Hostnames are associated with IP address using the <span class="emphasis"><em>Domain Name Service</em></span> (DNS). DNS maps hostnames to IP addresses and IP addresses to hostnames, providing a resource that clients can use when they need to look up a host. From the time a client is enrolled in the FreeIPA domain, it uses DNS to locate the FreeIPA server and then all of the services and clients within the domain.
</div><div class="para">
Multiple DNS servers are usually configured, each one working as an authoritative resource for machines within a specific domain. Having the FreeIPA server also be a DNS server is optional, but it is strongly recommended. When the FreeIPA server also manages DNS, there is tight integration between the DNS zones and the FreeIPA clients and the DNS configuration can be managed using native FreeIPA tools. Even if a FreeIPA server is a DNS server, other external DNS servers can still be used.
- </div></div><div class="section" id="NTP"><div class="titlepage"><div><div><h3 class="title" id="NTP">1.2.5. Management: NTP</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="NTP"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="NTP">1.2.5. Management: NTP</h3></div></div></div><div class="para">
Many services require that servers and clients have the same time, within a certain variance. For example, Kerberos tickets use time stamps to determine their validity. If the times between the server and client skew outside the allowed range, then any Kerberos tickets are invalidated.
</div><div class="para">
Clocks are synchronized over a network using <span class="emphasis"><em>Network Time Protocol</em></span> (NTP). A central server acts as an authoritative clock and all of the clients which reference that NTP server sync their times to match.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa.html
index 8ffd13c..38b881e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ipa.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.2. ipa</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.2. ipa</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="next" href="ipa-dns.html" title="B.3. ipa DNS Commands" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="tools-reference.html"><strong>Prev</strong></a></li><li class="next"><a acce
sskey="n" href="ipa-dns.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa"><div class="titlepage"><div><div><h2 class="title" id="ipa">B.2. ipa</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="next" href="ipa-dns.html" title="B.3. ipa DNS Commands" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="tools-reference.html"><strong>Prev</strong></a></li><li class="next"><a acc
esskey="n" href="ipa-dns.html"><strong>Next</strong></a></li></ul><div class="section" id="ipa"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa">B.2. ipa</h2></div></div></div><div class="para">
The primary FreeIPA command-line tool is the <code class="command">ipa</code> command. This command has several dozen subcommands, grouped by configuration areas, to give specific control over different areas of the FreeIPA domain configuration. These subcommands are really plug-ins, that are implemented and called through the <code class="command">ipa</code> command.
</div><div class="para">
One crucial feature of the <code class="command">ipa</code> command is that it is <span class="emphasis"><em>pluggable</em></span>. Custom behavior can be defined for the FreeIPA domain through custom <code class="command">ipa</code> subcommands.
- </div><div class="section" id="ipa-location"><div class="titlepage"><div><div><h3 class="title" id="ipa-location">B.2.1. Location</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-location"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-location">B.2.1. Location</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -23,13 +23,13 @@
Package
</td><td>
ipa-admintools
- </td></tr></tbody></table></div></div><div class="section" id="ipa-syntax"><div class="titlepage"><div><div><h3 class="title" id="ipa-syntax">B.2.2. Syntax</h3></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-syntax">B.2.2. Syntax</h3></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa</code> [
<em class="replaceable"><code>global_options</code></em>
]
<em class="replaceable"><code>commands</code></em>
[
<em class="replaceable"><code>command_options</code></em>
- ]</p></div></div><div class="section" id="ipa-topics"><div class="titlepage"><div><div><h3 class="title" id="ipa-topics">B.2.3. Help Topics</h3></div></div></div><div class="para">
+ ]</p></div></div><div class="section" id="ipa-topics"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-topics">B.2.3. Help Topics</h3></div></div></div><div class="para">
All of the <code class="command">ipa</code> are loosely organized in groups, based on the configuration area that they relate to. These groups are called <span class="emphasis"><em>topics</em></span>, and the <code class="command">ipa</code> help information can be called for each topic group.
</div><pre class="screen">$ ipa help <em class="replaceable"><code>topicName</code></em></pre><div class="para">
For example, to view the description of how FreeIPA handles automount and a list of all commands for managing automount configuration, view the help topic for <span class="emphasis"><em>automount</em></span>:
@@ -40,7 +40,7 @@
</th></tr></thead><tbody><tr><td>
automount
</td><td>
- Adding and managing autmount and NFS configuration.
+ Adding and managing automount and NFS configuration.
</td></tr><tr><td>
cert
</td><td>
@@ -129,7 +129,7 @@
user
</td><td>
Creating and managing FreeIPA user accounts.
- </td></tr></tbody></table></div></div><div class="section" id="ipa-global-options"><div class="titlepage"><div><div><h3 class="title" id="ipa-global-options">B.2.4. Global Options</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-global-options"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-global-options">B.2.4. Global Options</h3></div></div></div><div class="para">
Global options are available to every subcommand.
</div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Short Option
@@ -209,7 +209,7 @@
--setattr=<span class="emphasis"><em>attribute=value</em></span>
</td><td>
<span class="emphasis"><em>For add and mod commands.</em></span> Replaces the value of a given attribute with the new value.
- </td></tr></tbody></table></div></div><div class="section" id="ipa-return-codes"><div class="titlepage"><div><div><h3 class="title" id="ipa-return-codes">B.2.5. Return Codes</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-return-codes"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-return-codes">B.2.5. Return Codes</h3></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Return Code
</th><th>
Description
@@ -225,7 +225,7 @@
2
</td><td>
A resource or object was not found.
- </td></tr></tbody></table></div></div><div class="section" id="ipa-commands"><div class="titlepage"><div><div><h3 class="title" id="ipa-commands">B.2.6. Commands</h3></div></div></div><div class="table"><h6>Table B.1. dnsrecord* Commands</h6><div class="table-contents"><table summary="dnsrecord* Commands" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-commands"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-commands">B.2.6. Commands</h3></div></div></div><div class="table"><h6>Table B.1. dnsrecord* Commands</h6><div class="table-contents"><table summary="dnsrecord* Commands" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Command
</th><th>
Description
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ix01.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ix01.html
index b29bdf7..d8de7c3 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ix01.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/ix01.html
@@ -1,10 +1,10 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Index</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Index</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Glossary.html" title="Glossary" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Glossary.html"><strong>Prev</strong></a></li><li class="next"></li></ul><div class="index" id="id3303201"><div class="titlepage"><div><div><h2 class="title">Index</h2></div></div></div><div clas
s="index"><div class="indexdiv"><h3>A</h3><dl><dt>Active Directory</dt><dd><dl><dt>schema differences between FreeIPA, <a class="indexterm" href="active-directory.html#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt></dl></dd><dt>attributes</dt><dd><dl><dt>setting multi-valued, <a class="indexterm" href="managing-users.html#editing-users">Editing Users</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>bind</dt><dd><dl><dt>DNS and LDAP, <a class="indexterm" href="Working_with_DNS.html#about-dns">About DNS in FreeIPA</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>client</dt><dd><dl><dt>troubleshooting</dt><dd><dl><dt>installation, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt></dl></dd><dt>uninstalling, <a class="indexterm" href="uninstalling-clients.html">Uninstalling a FreeIPA Client</a></dt></dl></dd></dl></div><
div class="indexdiv"><h3>D</h3><dl><dt>DHCP, <a class="indexterm" href="adding-host-entry.html">Adding Host Entries</a></dt><dt>DNS</dt><dd><dl><dt>adding zone records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>adding zones, <a class="indexterm" href="Managing_DNS_Zones-Adding_DNS_Zones.html">Adding DNS Zones</a></dt><dt>bind-dyndb-ldap and Directory Server, <a class="indexterm" href="Working_with_DNS.html#about-dns">About DNS in FreeIPA</a></dt><dt>disabling zones, <a class="indexterm" href="enabling-zones.html">Enabling and Disabling Zones</a></dt><dt>dynamic updates, <a class="indexterm" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html">Enabling Dynamic DNS Updates</a></dt><dt>hosts with DHCP, <a class="indexterm" href="adding-host-entry.html">Adding Host Entries</a></dt></dl></dd><dt>DNS zone records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Re
cords to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>IPv4 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>IPv6 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>PTR example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>SRV example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>types of records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt></dl>
</dd></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hosts</dt><dd><dl><dt>creating</dt><dd><dl><dt>with DHCP, <a class="indexterm" href="adding-host-entry.html">Adding Host Entries</a></dt></dl></dd><dt>disabling, <a class="indexterm" href="host-disable.html">Disabling Host and Service Entries</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>Kerberos, <a class="indexterm" href="kerberos.html#about-kerberos">About Kerberos</a></dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="logging-in.html#caching-tickets">Caching User Kerberos Tickets</a></dt><dt>SSSD password cache, <a class="indexterm" href="kerberos-pwd-cache.html">Caching Kerberos Passwords</a></dt><dt>ticket policies, <a class="indexterm" href="kerb-policies.html">Setting Kerberos Ticket Policies</a></dt><dd><dl><dt>global, <a class="indexterm" href="kerb-policies.html#kerb-policies-global">Setting Global Ticket Policies</a></dt><dt>user-level, <a class="indexterm" href="ke
rb-policies.html#user-ticket-policies">Setting User-Level Ticket Policies</a></dt></dl></dd><dt>troubleshooting Windows problems, <a class="indexterm" href="Configuring_Microsoft_Windows.html">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>logging in</dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="logging-in.html#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>schema</dt><dd><dl><dt>differences between FreeIPA and Active Directory, <a class="indexterm" href="active-directory.html#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt><dd><dl><dt>cn, <a class="indexterm" href="active-directory.html#Schema_Differences-cn">Values for cn Attributes</a></dt><dt>initials, <a class="indexterm" href="active-directory.html#Schema_Diferences-initials">Constr
aints on the initials Attribute</a></dt><dt>street and streetAddress, <a class="indexterm" href="active-directory.html#Schema_Differences-street">Values for street and streetAddress</a></dt></dl></dd></dl></dd><dt>services</dt><dd><dl><dt>disabling, <a class="indexterm" href="host-disable.html">Disabling Host and Service Entries</a></dt></dl></dd><dt>SSSD</dt><dd><dl><dt>and Kerberos passwords, <a class="indexterm" href="kerberos-pwd-cache.html">Caching Kerberos Passwords</a></dt><dd><dl><dt>disabling cache, <a class="indexterm" href="kerberos-pwd-cache.html">Caching Kerberos Passwords</a></dt></dl></dd></dl></dd></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>ticket policies, <a class="indexterm" href="kerb-policies.html">Setting Kerberos Ticket Policies</a></dt><dt>troubleshooting</dt><dd><dl><dt>client installation, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt><dt>Kerberos on Windows, <a class="indexterm"
href="Configuring_Microsoft_Windows.html">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt><dt>Kerberos, unknown server error, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt><dt>resolving hostnames on client, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>uninstalling</dt><dd><dl><dt>clients, <a class="indexterm" href="uninstalling-clients.html">Uninstalling a FreeIPA Client</a></dt></dl></dd><dt>users</dt><dd><dl><dt>multi-valued attributes, <a class="indexterm" href="managing-users.html#editing-users">Editing Users</a></dt><dt>separate credentials cache, <a class="indexterm" href="logging-in.html#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>Windows</dt><dd><dl><dt>troubleshooting Kerberos problems,
<a class="indexterm" href="Configuring_Microsoft_Windows.html">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>Z</h3><dl><dt>zone records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>IPv4 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>IPv6 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>PTR example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Reco
rds to DNS Zones</a></dt><dt>SRV example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>types, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt></dl></dd></dl></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Glossary.html"><strong>Prev</strong>Glossary</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li></ul></body></html>
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Glossary.html" title="Glossary" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Glossary.html"><strong>Prev</strong></a></li><li class="next"></li></ul><div class="index" id="id671754"><div class="titlepage"><div><div><h2 class="title">Index</h2></div></div></div><div clas
s="index"><div class="indexdiv"><h3>A</h3><dl><dt>Active Directory</dt><dd><dl><dt>schema differences between FreeIPA, <a class="indexterm" href="active-directory.html#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt></dl></dd><dt>attributes</dt><dd><dl><dt>setting multi-valued, <a class="indexterm" href="managing-users.html#editing-users-cmd">From the Command Line</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>B</h3><dl><dt>bind</dt><dd><dl><dt>DNS and LDAP, <a class="indexterm" href="Working_with_DNS.html#about-dns">About DNS in FreeIPA</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>C</h3><dl><dt>client</dt><dd><dl><dt>troubleshooting</dt><dd><dl><dt>installation, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt></dl></dd><dt>uninstalling, <a class="indexterm" href="uninstalling-clients.html">Uninstalling a FreeIPA Client</a></dt></dl></dd>
</dl></div><div class="indexdiv"><h3>D</h3><dl><dt>DHCP, <a class="indexterm" href="adding-host-entry.html#adding-host-entry-cmd">Adding Host Entries from the Command Line</a></dt><dt>DNS</dt><dd><dl><dt>adding zone records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dt>adding zones, <a class="indexterm" href="Managing_DNS_Zones-Adding_DNS_Zones.html">Adding DNS Zones</a></dt><dt>bind-dyndb-ldap and Directory Server, <a class="indexterm" href="Working_with_DNS.html#about-dns">About DNS in FreeIPA</a></dt><dt>disabling zones, <a class="indexterm" href="enabling-zones.html">Enabling and Disabling Zones</a></dt><dt>dynamic updates, <a class="indexterm" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html">Enabling Dynamic DNS Updates</a></dt><dt>hosts with DHCP, <a class="indexterm" href="adding-host-entry.html#adding-host-entry-cmd">Adding Host Entries from the Command Line</a></dt></dl></dd><dt>DNS zon
e records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv4 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv6 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>PTR example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a><
/dt><dt>SRV example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>types of records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>H</h3><dl><dt>hosts</dt><dd><dl><dt>creating</dt><dd><dl><dt>with DHCP, <a class="indexterm" href="adding-host-entry.html#adding-host-entry-cmd">Adding Host Entries from the Command Line</a></dt></dl></dd><dt>disabling, <a class="indexterm" href="host-disable.html">Disabling Host and Service Entries</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>K</h3><dl><dt>Kerberos, <a class="indexterm" href="kerberos.html#about-kerberos">About Kerberos</a></dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="logging-in.html#caching-tickets">Caching User Kerberos Tickets</a></dt><dt>SSSD password cache,
<a class="indexterm" href="kerberos-pwd-cache.html">Caching Kerberos Passwords</a></dt><dt>ticket policies, <a class="indexterm" href="kerb-policies.html">Setting Kerberos Ticket Policies</a></dt><dd><dl><dt>global, <a class="indexterm" href="kerb-policies.html#kerb-policies-global">Setting Global Ticket Policies</a></dt><dt>user-level, <a class="indexterm" href="kerb-policies.html#user-ticket-policies">Setting User-Level Ticket Policies</a></dt></dl></dd><dt>troubleshooting Windows problems, <a class="indexterm" href="Configuring_Microsoft_Windows.html">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>L</h3><dl><dt>logging in</dt><dd><dl><dt>separate credentials cache, <a class="indexterm" href="logging-in.html#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>S</h3><dl><dt>schema</dt><dd><dl><dt>differences between FreeIPA and Active Directory, <a cla
ss="indexterm" href="active-directory.html#Windows_Sync-Schema_Differences-users">User Schema Differences between FreeIPA and Active Directory</a></dt><dd><dl><dt>cn, <a class="indexterm" href="active-directory.html#Schema_Differences-cn">Values for cn Attributes</a></dt><dt>initials, <a class="indexterm" href="active-directory.html#Schema_Diferences-initials">Constraints on the initials Attribute</a></dt><dt>street and streetAddress, <a class="indexterm" href="active-directory.html#Schema_Differences-street">Values for street and streetAddress</a></dt></dl></dd></dl></dd><dt>services</dt><dd><dl><dt>disabling, <a class="indexterm" href="host-disable.html">Disabling Host and Service Entries</a></dt></dl></dd><dt>SSSD</dt><dd><dl><dt>and Kerberos passwords, <a class="indexterm" href="kerberos-pwd-cache.html">Caching Kerberos Passwords</a></dt><dd><dl><dt>disabling cache, <a class="indexterm" href="kerberos-pwd-cache.html">Caching Kerberos Passwords</a></dt></dl></dd></dl></dd
></dl></div><div class="indexdiv"><h3>T</h3><dl><dt>ticket policies, <a class="indexterm" href="kerb-policies.html">Setting Kerberos Ticket Policies</a></dt><dt>troubleshooting</dt><dd><dl><dt>client installation, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt><dt>Kerberos on Windows, <a class="indexterm" href="Configuring_Microsoft_Windows.html">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt><dt>Kerberos, unknown server error, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt><dt>resolving hostnames on client, <a class="indexterm" href="troubleshooting-client-install.html">Troubleshooting Client Installations</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>U</h3><dl><dt>uninstalling</dt><dd><dl><dt>clients, <a class="indexterm" href="uninstalling-clients.html">Uninstalling a FreeIPA Client</a></dt></dl></dd><dt>users</dt><
dd><dl><dt>multi-valued attributes, <a class="indexterm" href="managing-users.html#editing-users-cmd">From the Command Line</a></dt><dt>separate credentials cache, <a class="indexterm" href="logging-in.html#caching-tickets">Caching User Kerberos Tickets</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>W</h3><dl><dt>Windows</dt><dd><dl><dt>troubleshooting Kerberos problems, <a class="indexterm" href="Configuring_Microsoft_Windows.html">Configuring a Microsoft Windows System to Join the FreeIPA Realm</a></dt></dl></dd></dl></div><div class="indexdiv"><h3>Z</h3><dl><dt>zone records, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt><dd><dl><dt>deleting, <a class="indexterm" href="Managing_DNS_Zones-Deleting_Records_from_DNS_Zones.html">Deleting Records from DNS Zones</a></dt><dt>format for adding, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding D
NS Resource Records from the Command Line</a></dt><dt>IPv4 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>IPv6 example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>PTR example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>SRV example, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html#adding-dns-records-cmd">Adding DNS Resource Records from the Command Line</a></dt><dt>types, <a class="indexterm" href="Managing_DNS_Zones-Adding_Records_to_DNS_Zones.html">Adding Records to DNS Zones</a></dt></dl></dd></dl></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Gl
ossary.html"><strong>Prev</strong>Glossary</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerb-policies.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerb-policies.html
index 0e88f92..7a599bd 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerb-policies.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerb-policies.html
@@ -1,31 +1,45 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.2. Setting Kerberos Ticket Policies</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.2. Setting Kerberos Ticket Policies</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /><link rel="prev" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /><link rel="next" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html" title="6.3. Refreshing Kerberos Tickets" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="kerb
eros.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html"><strong>Next</strong></a></li></ul><div class="section" id="kerb-policies"><div class="titlepage"><div><div><h2 class="title" id="kerb-policies">6.2. Setting Kerberos Ticket Policies</h2></div></div></div><a id="id3049440" class="indexterm"></a><a id="id3049447" class="indexterm"></a><div class="para">
- The Kerberos <span class="emphasis"><em>ticket policy</em></span> sets basic restructions on managing tickets within the Kerberos realm, such as the maximum ticket lifetime and the maximum renewal age (the period during which the ticket is renewable).
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /><link rel="prev" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /><link rel="next" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html" title="12.3. Refreshing Kerberos Tickets" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="kerb
eros.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html"><strong>Next</strong></a></li></ul><div class="section" id="kerb-policies"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="kerb-policies">12.2. Setting Kerberos Ticket Policies</h2></div></div></div><a id="id664958" class="indexterm"></a><a id="id664966" class="indexterm"></a><div class="para">
+ The Kerberos <span class="emphasis"><em>ticket policy</em></span> sets basic restrictions on managing tickets within the Kerberos realm, such as the maximum ticket lifetime and the maximum renewal age (the period during which the ticket is renewable).
</div><div class="para">
The Kerberos ticket policy is set globally so that it applies to every ticket issued within the realm. FreeIPA also has the ability to set user-level ticket policies which override the global policies. This can be used, for example, to set extended expiration times for administrators or to set shorter expiration times for some employees.
- </div><div class="section" id="kerb-policies-global"><div class="titlepage"><div><div><h3 class="title" id="kerb-policies-global">6.2.1. Setting Global Ticket Policies</h3></div></div></div><a id="id3302575" class="indexterm"></a><div class="para">
- The <code class="command">ipa krbtpolicy-mod</code> command modifies the policy, while the <code class="command">ipa krbtpolicy-reset</code> command resets the policy to the default values.
- </div><div class="para">
- For example:
- </div><pre class="screen"># ipa krbtpolicy-mod --maxlife=3600 --maxrenew=18000
+ </div><div class="section" id="kerb-policies-global"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="kerb-policies-global">12.2.1. Setting Global Ticket Policies</h3></div></div></div><a id="id665003" class="indexterm"></a><div class="section" id="kerb-policies-global-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="kerb-policies-global-ui">12.2.1.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Kerberos Ticket Policy</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Change the ticket lifetime policies.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/krb-ticket-policy.png" width="444" /></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max renew</em></span> sets the period after a ticket expires that it can be renewed.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Max life</em></span> sets the active period (lifetime) of a Kerberos ticket.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the policy page.
+ </div></li><li class="listitem"><div class="para">
+ Restart the KDC.
+ </div><pre class="screen"># service krb5kdc restart</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Any change to the global Kerberos ticket policy requires a restart of the KDC for the changes to take effect.
+ </div></div></div></li></ol></div></div><div class="section" id="kerb-policies-global-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="kerb-policies-global-cmd">12.2.1.2. From the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">ipa krbtpolicy-mod</code> command modifies the policy, while the <code class="command">ipa krbtpolicy-reset</code> command resets the policy to the default values.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen"># ipa krbtpolicy-mod --maxlife=3600 --maxrenew=18000
Max life: 3600
Max renew: 18000</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- Any change to the global Kerberos ticket policy requires a restart of the KDC for the changes to take effect. Restart the KDC:
+ Any change to the global Kerberos ticket policy requires a restart of the KDC for the changes to take effect. Restart the KDC:
<pre class="screen"># service krb5kdc restart</pre>
- </div></div></div></div><div class="section" id="user-ticket-policies"><div class="titlepage"><div><div><h3 class="title" id="user-ticket-policies">6.2.2. Setting User-Level Ticket Policies</h3></div></div></div><a id="id3302639" class="indexterm"></a><div class="para">
+ </div></div></div></div></div><div class="section" id="user-ticket-policies"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="user-ticket-policies">12.2.2. Setting User-Level Ticket Policies</h3></div></div></div><a id="id637030" class="indexterm"></a><div class="para">
User-level Kerberos ticket policies are set using the same commands as global policies, but the user is specified in the command.
</div><div class="para">
For example:
</div><pre class="screen"># ipa krbtpolicy-mod jsmith --maxlife=3600
Max life: 3600</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
User-level policies take effect immediately on the next requested ticket (such as running <code class="command">kinit</code>), without having to restart the KDC service.
- </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="kerberos.html"><strong>Prev</strong>Chapter 6. Identity: Managing the Kerberos Domain</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html"><strong>Next</strong>6.3. Refreshing Kerberos Tickets</a></li></ul></body></html>
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="kerberos.html"><strong>Prev</strong>Chapter 12. Policy: Managing the Kerberos Domain</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html"><strong>Next</strong>12.3. Refreshing Kerberos Tickets</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos-pwd-cache.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos-pwd-cache.html
index 5c43cd5..8852a3e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos-pwd-cache.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos-pwd-cache.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.4. Caching Kerberos Passwords</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.4. Caching Kerberos Passwords</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /><link rel="prev" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html" title="6.3. Refreshing Kerberos Tickets" /><link rel="next" href="removing-keytabs.html" title="6.5. Removing Keytabs" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Authenticatio
n-Refreshing_Kerberos_Tickets.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="removing-keytabs.html"><strong>Next</strong></a></li></ul><div class="section" id="kerberos-pwd-cache"><div class="titlepage"><div><div><h2 class="title" id="kerberos-pwd-cache">6.4. Caching Kerberos Passwords</h2></div></div></div><a id="id3180668" class="indexterm"></a><a id="id3180679" class="indexterm"></a><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /><link rel="prev" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html" title="12.3. Refreshing Kerberos Tickets" /><link rel="next" href="removing-keytabs.html" title="12.5. Removing Keytabs" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Authenticat
ion-Refreshing_Kerberos_Tickets.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="removing-keytabs.html"><strong>Next</strong></a></li></ul><div class="section" id="kerberos-pwd-cache"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="kerberos-pwd-cache">12.4. Caching Kerberos Passwords</h2></div></div></div><a id="id802116" class="indexterm"></a><a id="id802128" class="indexterm"></a><div class="para">
A machine may not always be on the same network as the FreeIPA domain; for example, a machine may need to be logged into a VPN before it can access the FreeIPA domain. If a user logs into a system when it is offline and then later attempts to connect to FreeIPA services, then the user is blocked because there is no FreeIPA Kerberos ticket for that user. FreeIPA works around that limitation by using SSSD to store the Kerberos passwords in the SSSD cache.
</div><div class="para">
This is configured by default by the <code class="command">ipa-client-install</code> script. A configuration parameter is added to the <code class="filename">/etc/sssd/sssd.conf</code> file which specifically instructs SSSD to store those Kerberos passwords for the FreeIPA domain:
@@ -19,10 +19,10 @@
<span class="perl_String"></span><span class="perl_String">access_provider = ipa</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_String">chpass_provider = ipa</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_String">ipa_server = _srv_, server.example.com</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = true</span></pre><a id="id3279832" class="indexterm"></a><div class="para">
+<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = true</span></pre><a id="id802166" class="indexterm"></a><div class="para">
This default behavior can be disabled during the client installation by using the <code class="option">--no-krb5-offline-passwords</code> option.
</div><div class="para">
This behavior can also be disabled by editing the <code class="filename">/etc/sssd/sssd.conf</code> file and removing the <code class="option">krb5_store_password_if_offline</code> line or changing its value to false.
</div><pre class="programlisting"><span class="perl_String">[</span><span class="perl_Reserved">domain</span><span class="perl_String">/example.com]</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_String">...</span><span class="perl_String"></span>
-<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = false</span></pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html"><strong>Prev</strong>6.3. Refreshing Kerberos Tickets</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="removing-keytabs.html"><strong>Next</strong>6.5. Removing Keytabs</a></li></ul></body></html>
+<span class="perl_String"></span><span class="perl_String">krb5_store_password_if_offline = false</span></pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html"><strong>Prev</strong>12.3. Refreshing Kerberos Tickets</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="removing-keytabs.html"><strong>Next</strong>12.5. Removing Keytabs</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos.html
index 9d36925..63e0675 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/kerberos.html
@@ -1,19 +1,19 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 6. Identity: Managing the Kerberos Domain</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 12. Policy: Managing the Kerberos Domain</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="searching.html" title="5.7. Searching for Users and Groups" /><link rel="next" href="kerb-policies.html" title="6.2. Setting Kerberos Ticket Policies" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="searching.html"><strong>Prev</strong></a></li><li class="next"><a accessk
ey="n" href="kerb-policies.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="kerberos" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 6. Identity: Managing the Kerberos Domain</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="kerberos.html#about-kerberos">6.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href="kerberos.html#about-principal-names">6.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="kerberos.html#about-keytabs">6.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="kerb-policies.html">6.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="kerb-policies.html#kerb-policies-global">6.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="kerb-policies.html#user-ticket-policies">6.2.2. Setting User-Level Ticket Policies</a
></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html">6.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="kerberos-pwd-cache.html">6.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="removing-keytabs.html">6.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="Kerberos_Errors.html">6.6. Troubleshooting Kerberos Errors</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Using_SSH_for_Password_Authentication.html" title="11.7. Enabling a Password Change Dialog" /><link rel="next" href="kerb-policies.html" title="12.2. Setting Kerberos Ticket Policies" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Using_SSH_for_Password_Authentication.h
tml"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="kerb-policies.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="kerberos" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 12. Policy: Managing the Kerberos Domain</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="kerberos.html#about-kerberos">12.1. About Kerberos</a></span></dt><dd><dl><dt><span class="section"><a href="kerberos.html#about-principal-names">12.1.1. About Principal Names</a></span></dt><dt><span class="section"><a href="kerberos.html#about-keytabs">12.1.2. About Protecting Keytabs</a></span></dt></dl></dd><dt><span class="section"><a href="kerb-policies.html">12.2. Setting Kerberos Ticket Policies</a></span></dt><dd><dl><dt><span class="section"><a href="kerb-policies.html#kerb-policies-global">12.2.1. Setting Global Ticket Policies</a></span></dt><dt><span class="section"><a href="kerb-policies.html#
user-ticket-policies">12.2.2. Setting User-Level Ticket Policies</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Authentication-Refreshing_Kerberos_Tickets.html">12.3. Refreshing Kerberos Tickets</a></span></dt><dt><span class="section"><a href="kerberos-pwd-cache.html">12.4. Caching Kerberos Passwords</a></span></dt><dt><span class="section"><a href="removing-keytabs.html">12.5. Removing Keytabs</a></span></dt><dt><span class="section"><a href="Kerberos_Errors.html">12.6. Troubleshooting Kerberos Errors</a></span></dt></dl></div><div class="para">
Kerberos authentication is the core of authentication within the FreeIPA domain. The FreeIPA server actually runs a Kerberos server within it, and this Kerberos server can be configured for custom policies for managing tickets and keytabs.
</div><div class="para">
For more information on Kerberos concepts, see the MIT Kerberos documentation, <a href="http://web.mit.edu/kerberos/www/">http://web.mit.edu/kerberos/www/</a>.
</div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
FreeIPA has its own command-line tools to use to manage Kerberos policies. <span class="bold bold"><strong>Do not</strong></span> use <code class="command">kadmin</code> or <code class="command">kadmin.local</code> to manage FreeIPA Kerberos settings.
- </div></div></div><div class="section" id="about-kerberos"><div class="titlepage"><div><div><h2 class="title" id="about-kerberos">6.1. About Kerberos</h2></div></div></div><a id="id3008941" class="indexterm"></a><div class="para">
+ </div></div></div><div class="section" id="about-kerberos"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-kerberos">12.1. About Kerberos</h2></div></div></div><a id="id697147" class="indexterm"></a><div class="para">
Kerberos provides an authentication layer between services and users. Kerberos centralizes authentication into a single location; a user authenticates to the Kerberos server, and then when that user attempts to access any resource on the network, that resource can check the <span class="emphasis"><em>key distribution center</em></span> (KDC) for the stored user credentials. This allows users to access multiple resources without having to supply credentials separately to each and every one.
</div><div class="para">
All of the users and services, combined, and all of the KDCs and Kerberos servers that are aware of each other constitute a <span class="emphasis"><em>realm</em></span>. Each user, machine, and service within the realm is identified by a unique name called the <span class="emphasis"><em>principal</em></span>. The user or service uses the principal and a verifying credential (usually a password) to authenticate to the KDC. The credential that is shared with the KDC is a <span class="emphasis"><em>key</em></span> and it is stored in a file called a <span class="emphasis"><em>key table</em></span> or <span class="emphasis"><em>keytab</em></span>.
@@ -21,7 +21,7 @@
When the KDC verifies the user's identity, it issues a <span class="emphasis"><em>ticket</em></span>. The ticket is a long-term pass to any service and machine on the realm. The KDC issues the user a special kind of ticket called a <span class="emphasis"><em>ticket-granting ticket</em></span> (TGT). Whenever the user tries to access a resource within the Kerberos realm, the resource sends a request for a ticket specifically for it. The TGT is used to issue a resource-specific ticket that the resource then uses to authenticate the user and grant access.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
When a FreeIPA client is first configured, the host principal is automatically retrieved by the setup script and stored in the <code class="filename">/etc/krb5.keytab</code> file. This host principal is stored within the host record so that local service commands cannot be used with this principal. This prepares the client to function in the FreeIPA realm.
- </div></div></div><div class="section" id="about-principal-names"><div class="titlepage"><div><div><h3 class="title" id="about-principal-names">6.1.1. About Principal Names</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="about-principal-names"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-principal-names">12.1.1. About Principal Names</h3></div></div></div><div class="para">
The principal identifies not only the user or service, but also the realm that that entity belongs to. A principal name has two parts, the identifier and the realm:
</div><pre class="screen"><em class="replaceable"><code>identifier</code></em>@<em class="replaceable"><code>REALM</code></em></pre><div class="para">
For a user, the <span class="emphasis"><em>identifier</em></span> is only the Kerberos username. For a service, the <span class="emphasis"><em>identifier</em></span> is a combination of the service name and the hostname of the machine it runs on:
@@ -30,11 +30,11 @@
</div><div class="para">
The host principal is usually stored in <code class="filename">/etc/krb5.keytab</code>.
</div><div class="para">
- When Kerberos requests a ticket, it always resovles a CNAME to the corresponding DNS A records. When service or host principals are created, then it must use the A record. For example, a CNAME is mapped to a slightly different A record:
+ When Kerberos requests a ticket, it always resolves a CNAME to the corresponding DNS A records. When service or host principals are created, then it must use the A record. For example, a CNAME is mapped to a slightly different A record:
</div><pre class="screen">CNAME www.example.com -> A name web-01.example.com</pre><div class="para">
A service attempts to connect to the host using its CNAME:
</div><pre class="screen">$ ssh www.example.com</pre><div class="para">
The Kerberos server requests a ticket for the resolved A name, <code class="command">host/web-01.example.com at EXAMPLE.COM</code>, so that must be the host principal used.
- </div></div><div class="section" id="about-keytabs"><div class="titlepage"><div><div><h3 class="title" id="about-keytabs">6.1.2. About Protecting Keytabs</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="about-keytabs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-keytabs">12.1.2. About Protecting Keytabs</h3></div></div></div><div class="para">
To protect keytab files, reset the permissions and ownership to restrict access to the files to only the keytab owner. : For example, set the owner of the Apache keytab (<code class="filename">/etc/httpd/conf/ipa.keytab</code>) to <code class="literal">httpd</code> and the mode to <code class="literal">0600</code>.
- </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="searching.html"><strong>Prev</strong>5.7. Searching for Users and Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="kerb-policies.html"><strong>Next</strong>6.2. Setting Kerberos Ticket Policies</a></li></ul></body></html>
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Using_SSH_for_Password_Authentication.html"><strong>Prev</strong>11.7. Enabling a Password Change Dialog</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="kerb-policies.html"><strong>Next</strong>12.2. Setting Kerberos Ticket Policies</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/logging-in.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/logging-in.html
index 7d9ae08..6f87a8c 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/logging-in.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/logging-in.html
@@ -1,22 +1,22 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>4.2. Logging into FreeIPA</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>4.2. Logging into FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="basic-usage.html" title="Chapter 4. Basic Usage" /><link rel="prev" href="basic-usage.html" title="Chapter 4. Basic Usage" /><link rel="next" href="opening-the-web-ui.html" title="4.3. Opening the FreeIPA Web UI" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="basic-usage.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="o
pening-the-web-ui.html"><strong>Next</strong></a></li></ul><div class="section" id="logging-in"><div class="titlepage"><div><div><h2 class="title" id="logging-in">4.2. Logging into FreeIPA</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="basic-usage.html" title="Chapter 4. Basic Usage" /><link rel="prev" href="basic-usage.html" title="Chapter 4. Basic Usage" /><link rel="next" href="using-the-ui.html" title="4.3. Using the FreeIPA Web UI" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="basic-usage.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="using-th
e-ui.html"><strong>Next</strong></a></li></ul><div class="section" id="logging-in"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="logging-in">4.2. Logging into FreeIPA</h2></div></div></div><div class="para">
Users are authenticated to FreeIPA services, including the command-line tools and the web UI, using Kerberos authentication. This means that logging into FreeIPA requires running <code class="command">kinit</code>.
</div><div class="para">
Running <code class="command">kinit</code> issues the user a Kerberos <span class="emphasis"><em>ticket</em></span>. This ticket is checked by any FreeIPA or Kerberos-aware service, so that a user only needs to log in once to access all domain services. Domain services include the FreeIPA web UI, mounted file shares, wikis, or any other application which uses FreeIPA as its identity/authentication store.
- </div><div class="section" id="logging-in-kinit"><div class="titlepage"><div><div><h3 class="title" id="logging-in-kinit">4.2.1. Logging into FreeIPA</h3></div></div></div><div class="para">
+ </div><div class="section" id="logging-in-kinit"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="logging-in-kinit">4.2.1. Logging into FreeIPA</h3></div></div></div><div class="para">
Logging into FreeIPA requires running <code class="command">kinit</code>. Simply running <code class="command">kinit</code> logs into FreeIPA as the currently logged-in user account. This user account must also be an FreeIPA user for them to authenticate to the FreeIPA Kerberos domain successfully. For example, if you are logged into the machine as <code class="command">jsmith</code>:
</div><pre class="screen">$ kinit
Password for jsmith at EXAMPLE.COM:</pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- If SSSD or <code class="systemitem">pam_krb5</code> is configured on the FreeIPA client machine, then when a user logs into the machine, a ticket is created which can be used for machine serivces which require authentication, such as <code class="command">sudo</code>.
- </div></div></div></div><div class="section" id="switching-users"><div class="titlepage"><div><div><h3 class="title" id="switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</h3></div></div></div><div class="para">
+ If SSSD or <code class="systemitem">pam_krb5</code> is configured on the FreeIPA client machine, then when a user logs into the machine, a ticket is created which can be used for machine services which require authentication, such as <code class="command">sudo</code>.
+ </div></div></div></div><div class="section" id="switching-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="switching-users">4.2.2. Logging in When an FreeIPA User Is Different Than the System User</h3></div></div></div><div class="para">
To specify an FreeIPA username — because a person's system username is different then the FreeIPA username or to switch FreeIPA user accounts — simply rerun the <code class="command">kinit</code> command, specifying the new user. For example:
</div><pre class="screen">$ kinit <em class="replaceable"><code>userName</code></em>
Password for <em class="replaceable"><code>userName</code></em>@EXAMPLE.COM:</pre><div class="para">
@@ -25,7 +25,7 @@ Password for <em class="replaceable"><code>userName</code></em>@EXAMPLE.COM:</pr
Only one set of tickets can be stored per logged-in user. The current stored credentials are the ones that will be used when accessing FreeIPA services.
</div><div class="para">
If you were already connected to the FreeIPA web UI as another user, refresh the browser to display the updated details for the new user.
- </div></div></div></div><div class="section" id="checking-current-creds"><div class="titlepage"><div><div><h3 class="title" id="checking-current-creds">4.2.3. Checking the Current Logged in User</h3></div></div></div><div class="para">
+ </div></div></div></div><div class="section" id="checking-current-creds"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="checking-current-creds">4.2.3. Checking the Current Logged in User</h3></div></div></div><div class="para">
Use the <code class="command">klist</code> command to verify the identity and the ticket granting ticket (TGT) from the server:
</div><pre class="screen">$ klist
Ticket cache: FILE:/tmp/krb5cc_500
@@ -37,13 +37,13 @@ Valid starting Expires Service principal
Kerberos 4 ticket cache: /tmp/tkt500
klist: You have no tickets cached
</pre><div class="para">
- It's important to know who the authenticated user is because the currently-authenticated user is the only one who can access the FreeIPA services. The Kerberos client libraries for <code class="command">kinit</code> have some limitation, one of them being that the current ticket is overwritten with any new invocation of <code class="command">kinit</code>. Authenticating as User A and then authenticating as User B overwites User A's ticket.
+ It's important to know who the authenticated user is because the currently-authenticated user is the only one who can access the FreeIPA services. The Kerberos client libraries for <code class="command">kinit</code> have some limitation, one of them being that the current ticket is overwritten with any new invocation of <code class="command">kinit</code>. Authenticating as User A and then authenticating as User B overwrites User A's ticket.
</div><div class="para">
To allow there to be multiple authenticated users on a machine, set the <code class="varname">KRB5CCNAME</code> environment variable. This variable keeps credential caches separate in different shells.
- </div></div><div class="section" id="caching-tickets"><div class="titlepage"><div><div><h3 class="title" id="caching-tickets">4.2.4. Caching User Kerberos Tickets</h3></div></div></div><a id="id3390331" class="indexterm"></a><a id="id3390343" class="indexterm"></a><a id="id3390355" class="indexterm"></a><div class="para">
+ </div></div><div class="section" id="caching-tickets"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="caching-tickets">4.2.4. Caching User Kerberos Tickets</h3></div></div></div><a id="id779034" class="indexterm"></a><a id="id779045" class="indexterm"></a><a id="id779057" class="indexterm"></a><div class="para">
Only one set of tickets can be stored per logged-in user. The current stored credentials are the ones that will be used when accessing FreeIPA services.
</div><div class="para">
For example, if you authenticated as <code class="command">admin</code>, added a new user, set the password, and then tried to authenticate as that user, the administrator's ticket is lost.
</div><div class="para">
To keep separate credential caches in different shells, a special environment variable, <code class="varname">KRB5CCNAME</code>, can be used.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="basic-usage.html"><strong>Prev</strong>Chapter 4. Basic Usage</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="opening-the-web-ui.html"><strong>Next</strong>4.3. Opening the FreeIPA Web UI</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="basic-usage.html"><strong>Prev</strong>Chapter 4. Basic Usage</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="using-the-ui.html"><strong>Next</strong>4.3. Using the FreeIPA Web UI</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-services.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-services.html
index 687dc77..b4ff48f 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-services.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-services.html
@@ -1,55 +1,91 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.3. Managing Services</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.6. Managing Services</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 11. Policy: Managing Hosts, Services, and Host-Based Access Control" /><link rel="prev" href="adding-host-entry.html" title="11.2. Adding Host Entries" /><link rel="next" href="host-disable.html" title="11.4. Disabling Host and Service Entries" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-host-entry.html"><strong
>Prev</strong></a></li><li class="next"><a accesskey="n" href="host-disable.html"><strong>Next</strong></a></li></ul><div class="section" id="managing-services"><div class="titlepage"><div><div><h2 class="title" id="managing-services">11.3. Managing Services</h2></div></div></div><div class="section" id="adding-service-entry"><div class="titlepage"><div><div><h3 class="title" id="adding-service-entry">11.3.1. Adding and Editing Service Entries and Keytabs</h3></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="Client_Problems.html" title="6.5. Debugging Client Connection Problems" /><link rel="next" href="host-disable.html" title="6.7. Disabling Host and Service Entries" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Client_Problems.html"><strong>Prev</strong><
/a></li><li class="next"><a accesskey="n" href="host-disable.html"><strong>Next</strong></a></li></ul><div class="section" id="managing-services"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="managing-services">6.6. Managing Services</h2></div></div></div><div class="section" id="adding-service-entry"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-service-entry">6.6.1. Adding and Editing Service Entries and Keytabs</h3></div></div></div><div class="para">
As with host entries, service entries for the host (and any other services on that host which will belong to the domain) must be added manually to the FreeIPA domain. This is a two step process. First, the service entry must be created, and then a keytab must be created for that service which it will use to access the domain.
</div><div class="para">
- By default, FreeIPA saves its HTTP keytab to <code class="filename">/etc/httpd/conf/ipa.keytab</code>. This keytab is used in the webUI, and so you should be aware that if a key were stored in <code class="filename">ipa.keytab</code> and you later deleted that keytab file, the FreeIPA interface would stop working, because the original key would also be deleted.
- </div><div class="para">
+ By default, FreeIPA saves its HTTP keytab to <code class="filename">/etc/httpd/conf/ipa.keytab</code>.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This keytab is used for the web UI. if a key were stored in <code class="filename">ipa.keytab</code> and that keytab file is delete, the FreeIPA web UI will stop working, because the original key would also be deleted.
+ </div></div></div><div class="para">
Similar locations can be specified for each service that needs to be made Kerberos aware. There is no specific location that must be used, but, when using <code class="command">ipa-getkeytab</code>, you should avoid using <code class="filename">/etc/krb5.keytab</code>. This file should not contain service-specific keytabs; each service should have its keytab saved in a specific location and the access privileges (and possibly SELinux rules) should be configured so that only this service has access to the keytab.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
- </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em></pre><div class="para">
- For example:
- </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com
+ </div><div class="section" id="adding-service-entry-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-service-entry-ui">6.6.1.1. >Adding Services and Keytabs from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Services</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the services list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/services-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the service type from the drop-down menu, and give it a name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the hostname of the FreeIPA host on which the service is running. The hostname is used to construct the full service principal name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new service principal.
+ </div></li><li class="listitem"><div class="para">
+ Use the <code class="command">ipa-getkeytab</code> command to generate and assign the new keytab for the service principal.
+ </div><pre class="programlisting"><span class="perl_Comment"># ipa-getkeytab -s server.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</span></pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The realm name is optional. The FreeIPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm.
+ </div></li><li class="listitem"><div class="para">
+ The hostname must resolve to a DNS A record for it to work with Kerberos. You can use the <code class="option">--force</code> flag to force the creation of a principal should this prove necessary.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-e</code> argument can include a comma-separated list of encryption types to include in the keytab. This supersedes any default encryption type.
+ </div></li></ul></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ Creating a new key resets the secret for the specified principal. This means that all other keytabs for that principal are rendered invalid.
+ </div></div></div></li></ol></div></div><div class="section" id="adding-service-entry-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-service-entry-cmd">6.6.1.2. >Adding Services and Keytabs from the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
+ </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em></pre><div class="para">
+ For example:
+ </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com
-------------------------------------------------------
Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</span>
-------------------------------------------------------
Principal: HTTP/server.example.com at EXAMPLE.COM
Managed by: ipaserver.example.com
</pre></li><li class="listitem"><div class="para">
- Create the service keytab file. This is done using the <code class="command">ipa-getkeytab</code> command. The command requires the Kerberos serice principal (<code class="option">-p</code>), the FreeIPA server name (<code class="option">-s</code>), the file to write (<code class="option">-k</code>), and the encryption method (<code class="option">-e</code>). Be sure to copy the keytab to the appropriate directory for the service.
- </div><div class="para">
- For example:
- </div><pre class="programlisting"><span class="perl_Comment"># ipa-getkeytab -s server.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</span></pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- The realm name is optional. The FreeIPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm.
- </div></li><li class="listitem"><div class="para">
- The hostname must resolve to a DNS A record for it to work with Kerberos. You can use the <code class="option">--force</code> flag to force the creation of a principal should this prove necessary.
- </div></li><li class="listitem"><div class="para">
- The <code class="option">-e</code> argument can include a comma-separated list of encryption types to include in the keytab. This supersedes any default encryption type.
- </div></li></ul></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
- The <code class="command">ipa-getkeytab</code> command resets the secret for the specified principal. This means that all other keytabs for that principal are rendered invalid.
- </div></div></div></li></ol></div></div><div class="section" id="request-service-service"><div class="titlepage"><div><div><h3 class="title" id="request-service-service">11.3.2. Adding Services and Certificates for Services</h3></div></div></div><div class="para">
+ Create the service keytab file. This is done using the <code class="command">ipa-getkeytab</code> command. The command requires the Kerberos service principal (<code class="option">-p</code>), the FreeIPA server name (<code class="option">-s</code>), the file to write (<code class="option">-k</code>), and the encryption method (<code class="option">-e</code>). Be sure to copy the keytab to the appropriate directory for the service.
+ </div><div class="para">
+ For example:
+ </div><pre class="programlisting"><span class="perl_Comment"># ipa-getkeytab -s server.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</span></pre><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ The realm name is optional. The FreeIPA server automatically appends the Kerberos realm for which it is configured. You cannot specify a different realm.
+ </div></li><li class="listitem"><div class="para">
+ The hostname must resolve to a DNS A record for it to work with Kerberos. You can use the <code class="option">--force</code> flag to force the creation of a principal should this prove necessary.
+ </div></li><li class="listitem"><div class="para">
+ The <code class="option">-e</code> argument can include a comma-separated list of encryption types to include in the keytab. This supersedes any default encryption type.
+ </div></li></ul></div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ The <code class="command">ipa-getkeytab</code> command resets the secret for the specified principal. This means that all other keytabs for that principal are rendered invalid.
+ </div></div></div></li></ol></div></div></div><div class="section" id="request-service-service"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="request-service-service">6.6.2. Adding Services and Certificates for Services</h3></div></div></div><div class="para">
While services can use keytabs, some services require certificates for access. In that case, a service can be added (or modified) to include a certificate with its service entry.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Create a certificate for the service. s done using the <code class="command">ipa-getkeytab</code> command. The command requires the Kerberos serice principal (<code class="option">-p</code>), the FreeIPA server name (<code class="option">-s</code>), the file to write (<code class="option">-k</code>), and the encryption method (<code class="option">-e</code>). Be sure to copy the keytab to the appropriate directory for the service.
- </div><div class="para">
- For example:
- </div><pre class="programlisting">$ ipa cert-request --principal=HTTP/web.example.com example.csr</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Use the <code class="option">--add</code> option to create the service automatically when requesting the certificate.
- </div></div></div><div class="para">
- Alternatively, use the <code class="command">getcert</code> command, which creates and manages the certificate through <code class="command">certmonger</code>. The options are described more in <a class="xref" href="certmongerX.html#certmonger-req">Section 14.6.1, “Requesting a Certificate with certmonger”</a> and .
- </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre></li><li class="listitem"><div class="para">
- Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
- </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em> --certificate="<em class="replaceable"><code>CSR</code></em>"</pre><div class="para">
- For example (this example shortens the certificate):
- </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com --certificate=<span class="perl_String">"MIICbTCCAVUCAQ...IzSljdLMYNg=="</span>
+ </div><div class="section" id="request-service-service-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="request-service-service-ui">6.6.2.1. Adding Services and Certificates from the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Services</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the services list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/services-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the service type from the drop-down menu, and give it a name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the hostname of the FreeIPA host on which the service is running. The hostname is used to construct the full service principal name.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-add2.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the service entry page.
+ </div></li><li class="listitem"><div class="para">
+ Scroll to the bottom of the page, to the <span class="guilabel"><strong>Service Certificate</strong></span> section.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>New Certificate</strong></span> button to create the service certificate.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/service-cert.png" width="444" /></div></div></li></ol></div></div><div class="section" id="request-service-service-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="request-service-service-cmd">6.6.2.2. Adding Services and Certificates from the Command Line</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Create a certificate for the service. Be sure to copy the keytab to the appropriate directory for the service.
+ </div><div class="para">
+ For example:
+ </div><pre class="programlisting">$ ipa cert-request --principal=HTTP/web.example.com example.csr</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
+ Use the <code class="option">--add</code> option to create the service automatically when requesting the certificate.
+ </div></div></div><div class="para">
+ Alternatively, use the <code class="command">getcert</code> command, which creates and manages the certificate through <code class="command">certmonger</code>. The options are described more in <a class="xref" href="certmongerX.html#certmonger-req">Section 18.1, “Requesting a Certificate with certmonger”</a> and .
+ </div><pre class="screen">$ ipa-getcert request -d /etc/httpd/alias -n Server-Cert -K HTTP/client1.example.com -N 'CN=client1.example.com,O=EXAMPLE.COM'</pre></li><li class="listitem"><div class="para">
+ Create the service principal. The service is recognized through a name like <span class="emphasis"><em>service/FQDN</em></span>:
+ </div><pre class="programlisting"># ipa service-add <em class="replaceable"><code>serviceName/hostname</code></em> --certificate="<em class="replaceable"><code>CSR</code></em>"</pre><div class="para">
+ For example (this example shortens the certificate):
+ </div><pre class="programlisting">$ ipa service-add HTTP/server.example.com --certificate=<span class="perl_String">"MIICbTCCAVUCAQ...IzSljdLMYNg=="</span>
-------------------------------------------------------
Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</span>
@@ -57,8 +93,8 @@ Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</s
Principal: HTTP/server.example.com at EXAMPLE.COM
Managed by: ipaserver.example.com
</pre><div class="para">
- Include the <span class="emphasis"><em>complete</em></span> certificate request in the <code class="option">--certificate</code> option.
- </div></li></ol></div></div><div class="section" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server"><div class="titlepage"><div><div><h3 class="title" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server">11.3.3. Configuring an NFS Service</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Include the <span class="emphasis"><em>complete</em></span> certificate request in the <code class="option">--certificate</code> option.
+ </div></li></ol></div></div></div><div class="section" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_an_NFS_Service_Principal_on_the_IPA_Server">6.6.3. Configuring an NFS Service</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create a directory for the NFS information which is writable by all users.
<pre class="screen"># mkdir /export
@@ -82,7 +118,7 @@ Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</s
</pre>
</div></li><li class="listitem"><div class="para">
- Add a service principal and keytab for NFS, as in <a class="xref" href="managing-services.html#adding-service-entry">Section 11.3.1, “Adding and Editing Service Entries and Keytabs”</a>.
+ Add a service principal and keytab for NFS, as in <a class="xref" href="managing-services.html#adding-service-entry">Section 6.6.1, “Adding and Editing Service Entries and Keytabs”</a>.
<pre class="screen"># ipa service-add nfs/ipaserver.example.com
# ipa-getkeytab -s ipaserver.example.com -p nfs/ipaserver.example.com -k /etc/nfs/conf/nfs.keytab</pre>
@@ -97,7 +133,7 @@ Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</s
# service rpcgssd restart -k /etc/nfs/conf/nfs.keytab</pre>
- </div></li></ol></div></div><div class="section" id="Creating_an_IPA_Service-Using_NSS"><div class="titlepage"><div><div><h3 class="title" id="Creating_an_IPA_Service-Using_NSS">11.3.4. Storing Certificates in NSS Databases</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="Creating_an_IPA_Service-Using_NSS"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Creating_an_IPA_Service-Using_NSS">6.6.4. Storing Certificates in NSS Databases</h3></div></div></div><div class="para">
When services use certificates, the certificates and keys can be stored in NSS databases (which may also be used by the services themselves, as well as FreeIPA).
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create the NSS databases.
@@ -105,4 +141,38 @@ Added service <span class="perl_String">"HTTP/server.example.com at EXAMPLE.COM"</s
Request the certificate using <code class="command">certutil</code>, an NSS tool.
</div><pre class="screen">$ certutil -R -s "CN=client1.example.com,O=EXAMPLE.COM" -d <em class="replaceable"><code>/path/to/database/dir</code></em> -a > example.csr</pre></li></ol></div><div class="para">
If the FreeIPA domain is using Certificate System for its CA, only the CN of the subject name is used. With a self-signed CA, the subject must match the configured certificate subject base. The FreeIPA server rejects requests with a subject base that differs from this value.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="adding-host-entry.html"><strong>Prev</strong>11.2. Adding Host Entries</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="host-disable.html"><strong>Next</strong>11.4. Disabling Host and Service Entries</a></li></ul></body></html>
+ </div></div><div class="section" id="ipa-cluster"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-cluster">6.6.5. Configuring Clustered Services</h3></div></div></div><div class="para">
+ The FreeIPA server is not <em class="firstterm">cluster aware</em>. However, it is possible to configure a clustered service to be part of FreeIPA by synchronizing Kerberos keys across all of the participating hosts and configuring services running on the hosts to respond to whatever names the clients use.
+ </div><div class="section" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Configuring_Kerberos_Credentials_for_a_Clustered_Environment">6.6.5.1. Configuring Kerberos Credentials for a Clustered Environment</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Enroll all of the hosts in the cluster into the FreeIPA domain.
+ </div></li><li class="listitem"><div class="para">
+ Create any service principals and generate the required keytabs.
+ </div></li><li class="listitem"><div class="para">
+ Collect any keytabs that have been set up for services on the host, including the host keytab at <code class="filename">/etc/krb5.keytab</code>.
+ </div></li><li class="listitem"><div class="para">
+ Use the <code class="command">ktutil</code> command to produce a single keytab file that contains the contents of all of the keytab files.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ For each file, use the <code class="command">rkt</code> command to read the keys from that file.
+ </div></li><li class="listitem"><div class="para">
+ Use the <code class="command">wkt</code> command to write all of the keys which have been read to a new keytab file.
+ </div></li></ol></div></li><li class="listitem"><div class="para">
+ Replace the keytab files on each host with the newly-created combined keytab file.
+ </div></li><li class="listitem"><div class="para">
+ At this point, each host in this cluster can now impersonate any other host.
+ </div></li><li class="listitem"><div class="para">
+ Some services require additional configuration to accommodate cluster members which do not reset hostnames when taking over a failed service.
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ For <code class="systemitem">sshd</code>, set <em class="parameter"><code>GSSAPIStrictAcceptorCheck no</code></em> in <code class="filename">/etc/ssh/sshd_config</code>.
+ </div></li><li class="listitem"><div class="para">
+ For <code class="systemitem">mod_auth_kerb</code>, set <em class="parameter"><code>KrbServiceName Any</code></em> in <code class="filename">/etc/httpd/conf.d/auth_kerb.conf</code>.
+ </div></li></ul></div>
+
+ </div></li></ol></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ For SSL servers, the subject name or a subject alternative name for the server's certificate must appear correct when a client connects to the clustered host. If possible, share the private key among all of the hosts. If each cluster member contains a subject alternative name which includes the names of all the other cluster members will satisfy any client connection requirements.
+ </div></div></div></div></div><div class="section" id="Using_the_Same_Service_Principal_for_Multiple_Services"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Using_the_Same_Service_Principal_for_Multiple_Services">6.6.6. Using the Same Service Principal for Multiple Services</h3></div></div></div><div class="para">
+ Within a cluster, the same service principal can be used for multiple services, spread across different machines.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Retrieve a service principal using the <code class="command">ipa-getkeytab</code> command.
+ </div><pre class="screen"># ipa-getkeytab -s kdc.example.com -p HTTP/server.example.com -k /etc/httpd/conf/krb5.keytab -e des-cbc-crc</pre></li><li class="listitem"><div class="para">
+ Either direct multiple servers or services to use the same file, or copy the file to individual servers as required.
+ </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Client_Problems.html"><strong>Prev</strong>6.5. Debugging Client Connection Problems</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="host-disable.html"><strong>Next</strong>6.7. Disabling Host and Service Entries</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-sync-agmt.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-sync-agmt.html
index ab7d790..88ca8bf 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-sync-agmt.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-sync-agmt.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.4. Managing Synchronization Agreements</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.4. Managing Synchronization Agreements</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 8. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="password-sync.html" title="8.3. Exempting Active Directory Users from Password Synchronization" /><link rel="next" href="Configuring_Microsoft_Windows.html" title="8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class=
"docnav"><li class="previous"><a accesskey="p" href="password-sync.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Microsoft_Windows.html"><strong>Next</strong></a></li></ul><div class="section" id="managing-sync-agmt"><div class="titlepage"><div><div><h2 class="title" id="managing-sync-agmt">8.4. Managing Synchronization Agreements</h2></div></div></div><div class="section" id="exporting-ad-cert"><div class="titlepage"><div><div><h3 class="title" id="exporting-ad-cert">8.4.1. Obtaining the Active Directory CA Certificate</h3></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 7. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="password-sync.html" title="7.3. Exempting Active Directory Users from Password Synchronization" /><link rel="next" href="Configuring_Microsoft_Windows.html" title="7.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class
="docnav"><li class="previous"><a accesskey="p" href="password-sync.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Microsoft_Windows.html"><strong>Next</strong></a></li></ul><div class="section" id="managing-sync-agmt"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="managing-sync-agmt">7.4. Managing Synchronization Agreements</h2></div></div></div><div class="section" id="exporting-ad-cert"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="exporting-ad-cert">7.4.1. Obtaining the Active Directory CA Certificate</h3></div></div></div><div class="para">
The Active Directory CA certificate is required to create the synchronization agreement. To export this certificate from the Active Directory service:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
In <span class="guilabel"><strong>My Network Places</strong></span>, open the CA distribution point. For example, the location on Windows Server 2003 is <code class="filename">C:\WINDOWS\system32\certsrv\CertEnroll\</code>.
@@ -17,11 +17,11 @@
On the <span class="guilabel"><strong>Details</strong></span> tab, click <span class="guibutton"><strong>Copy to File</strong></span> to start the <span class="application"><strong>Certificate Export Wizard</strong></span>.
</div></li><li class="listitem"><div class="para">
Click <span class="guibutton"><strong>Next</strong></span>, and then select <span class="guilabel"><strong>Base-64 encoded X.509 (.CER)</strong></span>.
- </div><div class="informalfigure"><div class="mediaobject"><img src="images/ASCII_Cert_Export.png" /></div></div></li><li class="listitem"><div class="para">
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/ASCII_Cert_Export.png" width="444" /></div></div></li><li class="listitem"><div class="para">
Specify a suitable directory and file name for the exported file. Click <span class="guibutton"><strong>Next</strong></span> to export the certificate, and then click <span class="guibutton"><strong>Finish</strong></span>.
- </div></li></ol></div></div><div class="section" id="Creating_Synchronization_Agreements"><div class="titlepage"><div><div><h3 class="title" id="Creating_Synchronization_Agreements">8.4.2. Creating Synchronization Agreements</h3></div></div></div><div class="para">
- Synchronization agreements are created on the FreeIPA server using the <code class="command">ipa-replica-manage connect</code> command because it creates a <span class="emphasis"><em>connection</em></span> to the Active Directory domain. The options to create the synchronization agreement are listed in <a class="xref" href="managing-sync-agmt.html#tab.sync-agmt">Table 8.3, “Synchronization Agreement Options”</a>.
- </div><div class="example" id="ex.adding-sync-agmt"><h6>Example 8.1. Adding a WinSync agreement between an IPA server and an AD server.</h6><div class="example-contents"><pre class="screen">$ ipa-replica-manage connect --winsync --binddn cn=administrator,cn=users,dc=example,dc=com --bindpw secret --passsync secretpwd --cacert /path/to/certfile.cer adserver.example.com -v</pre></div></div><br class="example-break" /><div class="table" id="tab.sync-agmt"><h6>Table 8.3. Synchronization Agreement Options</h6><div class="table-contents"><table summary="Synchronization Agreement Options" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div></li></ol></div></div><div class="section" id="Creating_Synchronization_Agreements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Creating_Synchronization_Agreements">7.4.2. Creating Synchronization Agreements</h3></div></div></div><div class="para">
+ Synchronization agreements are created on the FreeIPA server using the <code class="command">ipa-replica-manage connect</code> command because it creates a <span class="emphasis"><em>connection</em></span> to the Active Directory domain. The options to create the synchronization agreement are listed in <a class="xref" href="managing-sync-agmt.html#tab.sync-agmt">Table 7.3, “Synchronization Agreement Options”</a>.
+ </div><div class="example" id="ex.adding-sync-agmt"><h6>Example 7.1. Adding a WinSync agreement between an IPA server and an AD server.</h6><div class="example-contents"><pre class="screen">$ ipa-replica-manage connect --winsync --binddn cn=administrator,cn=users,dc=example,dc=com --bindpw secret --passsync secretpwd --cacert /path/to/certfile.cer adserver.example.com -v</pre></div></div><br class="example-break" /><div class="table" id="tab.sync-agmt"><h6>Table 7.3. Synchronization Agreement Options</h6><div class="table-contents"><table summary="Synchronization Agreement Options" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Option
</th><th>
Description
@@ -32,7 +32,7 @@
</td></tr><tr><td>
--binddn
</td><td>
- Gives the full user DN of the synchronizationn identity. This is the user DN that the FreeIPA LDAP server uses to bind to Active Directory. This user must exist in the Active Directory domain and must have read, search, and write permissions on the Active Directory subtree.
+ Gives the full user DN of the synchronization identity. This is the user DN that the FreeIPA LDAP server uses to bind to Active Directory. This user must exist in the Active Directory domain and must have read, search, and write permissions on the Active Directory subtree.
</td></tr><tr><td>
--bindpw
</td><td>
@@ -44,7 +44,7 @@
</td></tr><tr><td>
--cacert
</td><td>
- Gives the full path and file name of the Active Directory CA certificate. This certificate is exported in <a class="xref" href="managing-sync-agmt.html#exporting-ad-cert">Section 8.4.1, “Obtaining the Active Directory CA Certificate”</a>.
+ Gives the full path and file name of the Active Directory CA certificate. This certificate is exported in <a class="xref" href="managing-sync-agmt.html#exporting-ad-cert">Section 7.4.1, “Obtaining the Active Directory CA Certificate”</a>.
</td></tr><tr><td>
--win-subtree
</td><td>
@@ -53,8 +53,8 @@
<span class="emphasis"><em>AD_server_name</em></span>
</td><td>
Gives the hostname of the Active Directory domain controller.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Modifying_Synchronization_Agreements"><div class="titlepage"><div><div><h3 class="title" id="Modifying_Synchronization_Agreements">8.4.3. Changing the Behavior for Syncing User Account Attributes</h3></div></div></div><div class="para">
- When the sync agreement is created, it has certain default behaviors defined for how the synchronization process handled the user account attributes during synchronization. The types of behaviors are things like how to handle lockout attributes or how to handle different DN formats. This behavior can be changed by editing the synchronization agreement. The list of attribute-related parameters are in <a class="xref" href="managing-sync-agmt.html#tab.sync-agmt-attrs">Table 8.4, “Synced Attribute Settings”</a>.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="Modifying_Synchronization_Agreements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Modifying_Synchronization_Agreements">7.4.3. Changing the Behavior for Syncing User Account Attributes</h3></div></div></div><div class="para">
+ When the sync agreement is created, it has certain default behaviors defined for how the synchronization process handled the user account attributes during synchronization. The types of behaviors are things like how to handle lockout attributes or how to handle different DN formats. This behavior can be changed by editing the synchronization agreement. The list of attribute-related parameters are in <a class="xref" href="managing-sync-agmt.html#tab.sync-agmt-attrs">Table 7.4, “Synced Attribute Settings”</a>.
</div><div class="para">
The sync agreement exists as a special plug-in entry in the LDAP server and each attribute behavior is set through an LDAP attribute. To change the sync behavior, use the <code class="command">ldapmodify</code> command to modify the LDAP server entry directly.
</div><div class="para">
@@ -67,7 +67,7 @@ replace: ipaWinSyncAcctDisable
ipaWinSyncAcctDisable: none
modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
-</pre><div class="table" id="tab.sync-agmt-attrs"><h6>Table 8.4. Synced Attribute Settings</h6><div class="table-contents"><table summary="Synced Attribute Settings" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+</pre><div class="table" id="tab.sync-agmt-attrs"><h6>Table 7.4. Synced Attribute Settings</h6><div class="table-contents"><table summary="Synced Attribute Settings" border="1"><colgroup><col class="col1" width="33%" /><col class="col2" width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Description
@@ -116,7 +116,7 @@ modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
</td></tr><tr><td>
ipaWinSyncForceSync
</td><td>
- Sets whether to check existing FreeIPA users which match an existing Active Directory user should be automatically edited so they can be synchronized. If a FreeIPA user account has a <em class="parameter"><code>uid</code></em> parameter which is identical to the <em class="parameter"><code>samAccountName</code></em> in an existing Active Directory user, then that account is <span class="emphasis"><em>not</em></span> synced by default. This attribute tells the sync service to add the <em class="parameter"><code>ntUser</code></em> and <em class="parameter"><code>ntUserDomainID</code></em> to the FreeIPA user entries automatically, which allows them to be synchronized.
+ Sets whether to check existing FreeIPA users which match an existing Active Directory user should be automatically edited so they can be synchronized. If a FreeIPA user account has a <em class="parameter"><code>uid</code></em> parameter which is identical to the <em class="parameter"><code>samAccountName</code></em> in an existing Active Directory user, then that account is <span class="emphasis"><em>not</em></span> synced by default. This attribute tells the sync service to add the <em class="parameter"><code>ntUser</code></em> and <em class="parameter"><code>ntUserDomainId</code></em> to the FreeIPA user entries automatically, which allows them to be synchronized.
</td><td>
true | false
</td></tr><tr><td colspan="2">
@@ -176,7 +176,7 @@ modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
Sets the search filter to use to find the entry which contains the FreeIPA realm name.
</td><td>
The default is <code class="command">(objectclass=krbRealmContainer)</code>.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="changing-subtree"><div class="titlepage"><div><div><h3 class="title" id="changing-subtree">8.4.4. Changing the Synchronized Windows Subtree</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="changing-subtree"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="changing-subtree">7.4.4. Changing the Synchronized Windows Subtree</h3></div></div></div><div class="para">
Creating a synchronization agreement automatically sets the two subtrees to use as the synchronized user database. In FreeIPA, the default is <code class="command">cn=users,cn=accounts,$SUFFIX</code>, and for Active Directory, the default is <code class="command">CN=Users,$SUFFIX</code>.
</div><div class="para">
The value for the Active Directory subtree can be set to a non-default value when the sync agreement is created by using the <code class="option">--win-subtree</code> option. After the agreement is created, the Active Directory subtree can be changed by using the <code class="command">ldapmodify</code> command to edit the <em class="parameter"><code>nsds7WindowsReplicaSubtree</code></em> value in the sync agreement entry.
@@ -190,13 +190,13 @@ replace: nsds7WindowsReplicaSubtree
nsds7WindowsReplicaSubtree: CN=People,DC=example,DC=com
modifying entry "cn=ipa-winsync,cn=plugins,cn=config"
-</pre></div><div class="section" id="Deleting_Synchronization_Agreements"><div class="titlepage"><div><div><h3 class="title" id="Deleting_Synchronization_Agreements">8.4.5. Deleting Synchronization Agreements</h3></div></div></div><div class="para">
+</pre></div><div class="section" id="Deleting_Synchronization_Agreements"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Deleting_Synchronization_Agreements">7.4.5. Deleting Synchronization Agreements</h3></div></div></div><div class="para">
Synchronization can be stopped by deleting the sync agreement which <span class="emphasis"><em>disconnects</em></span> the FreeIPA and Active Directory servers. In the inverse of creating a sync agreement, deleting a sync agreement uses the <code class="command">ipa-replica-manage disconnect</code> command and then the hostname of the Active Directory server.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Delete the sync agreement.
</div><pre class="screen"># ipa-replica-manage disconnect adserver.example.com</pre></li><li class="listitem"><div class="para">
Remove the Active Directory CA certificate from the FreeIPA server database:
- </div><pre class="screen"># certutil -D -d /etc/dirsrv/slapd-EXAMPLE.COM/ -n "Imported CA"</pre></li></ol></div></div><div class="section" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures"><div class="titlepage"><div><div><h3 class="title" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">8.4.6. Winsync Agreement Failures</h3></div></div></div><div class="formalpara" id="Winsync_Agreement_Failures-Symptom"><h5 class="formalpara">Creating the sync agreement fails because it cannot connect to the Active Directory server.</h5>
+ </div><pre class="screen"># certutil -D -d /etc/dirsrv/slapd-EXAMPLE.COM/ -n "Imported CA"</pre></li></ol></div></div><div class="section" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Troubleshooting_IPA_Servers-Winsync_Agreement_Failures">7.4.6. Winsync Agreement Failures</h3></div></div></div><div class="formalpara" id="Winsync_Agreement_Failures-Symptom"><h5 class="formalpara">Creating the sync agreement fails because it cannot connect to the Active Directory server.</h5>
One of the most common sync agreement failures is that the FreeIPA server cannot connect to the Active Directory server:
<pre class="screen">"Update failed! Status: [81 - LDAP error: Can't contact LDAP server]
</pre>
@@ -219,8 +219,8 @@ Imported CA CT,,C</pre>
</div><div class="para">
This deletes the CA certificate from the LDAP database.
- </div><div class="formalpara"><h5 class="formalpara" id="id3208382">There are errors saying passwords aren't being synced because it says the entry exists</h5>
- For some entries in the user database, there may be an informational error message that the password is not being reset because the entry alreayd exists:
+ </div><div class="formalpara"><h5 class="formalpara" id="id828982">There are errors saying passwords aren't being synced because it says the entry exists</h5>
+ For some entries in the user database, there may be an informational error message that the password is not being reset because the entry already exists:
</div><pre class="screen">"Windows PassSync entry exists, not resetting password"</pre><div class="para">
This is not an error. This message occurs when an exempt user, the Password Sync user, it not being changed. The Password Sync user is the operational user which is used by the service to change the passwords in FreeIPA.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="password-sync.html"><strong>Prev</strong>8.3. Exempting Active Directory Users from Passwo...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Microsoft_Windows.html"><strong>Next</strong>8.5. Configuring a Microsoft Windows System to Jo...</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="password-sync.html"><strong>Prev</strong>7.3. Exempting Active Directory Users from Passwo...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_Microsoft_Windows.html"><strong>Next</strong>7.5. Configuring a Microsoft Windows System to Jo...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-users.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-users.html
index acd5d84..ebb9d85 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-users.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/managing-users.html
@@ -1,15 +1,15 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.2. Managing User Accounts</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.2. Managing User Accounts</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="next" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html" title="5.3. Specifying Default User Settings" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="u
sers.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Next</strong></a></li></ul><div class="section" id="managing-users"><div class="titlepage"><div><div><h2 class="title" id="managing-users">5.2. Managing User Accounts</h2></div></div></div><div class="section" id="about-user-entries"><div class="titlepage"><div><div><h3 class="title" id="about-user-entries">5.2.1. About User Entries</h3></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="next" href="changing-pwds.html" title="5.3. Changing Passwords" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="users.html"><strong>Prev</strong></a></li><li class="ne
xt"><a accesskey="n" href="changing-pwds.html"><strong>Next</strong></a></li></ul><div class="section" id="managing-users"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="managing-users">5.2. Managing User Accounts</h2></div></div></div><div class="section" id="about-user-entries"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="about-user-entries">5.2.1. About User Entries</h3></div></div></div><div class="para">
User accounts in FreeIPA are ultimately stored as user accounts in an LDAP directory. This grants both flexibility and certain restrictions on the structure and information stored in FreeIPA user entries.
- </div><div class="section" id="user-schema"><div class="titlepage"><div><div><h4 class="title" id="user-schema">5.2.1.1. About User Schema</h4></div></div></div><div class="para">
+ </div><div class="section" id="user-schema"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="user-schema">5.2.1.1. About User Schema</h4></div></div></div><div class="para">
When a user entry is created, it is automatically assigned certain LDAP object classes which, in turn, make available certain attributes. LDAP attributes are the way that information is stored in the directory. (This is discussed in detail in the <em class="citetitle">Directory Server Deployment Guide</em> and the <em class="citetitle">Directory Server Schema Reference</em>.)
</div><div class="table" id="tab.default-objclasses"><h6>Table 5.1. Default FreeIPA User Object Classes</h6><div class="table-contents"><table summary="Default FreeIPA User Object Classes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
@@ -34,13 +34,13 @@
</td><td>
mepOriginEntry
</td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- A number of attributes are available to user entries. Some are set manually and some are set based on defaults if a specific value is not set. There is also an option to add any attributes available in the object classes in <a class="xref" href="managing-users.html#tab.default-objclasses">Table 5.1, “Default FreeIPA User Object Classes”</a>, even if there is not a UI or command-line argument for that attribute. Additionally, th values generated or used by the default attributes can be configured, as in <a class="xref" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">Section 5.3, “Specifying Default User Settings”</a>.
+ A number of attributes are available to user entries. Some are set manually and some are set based on defaults if a specific value is not set. There is also an option to add any attributes available in the object classes in <a class="xref" href="managing-users.html#tab.default-objclasses">Table 5.1, “Default FreeIPA User Object Classes”</a>, even if there is not a UI or command-line argument for that attribute. Additionally, the values generated or used by the default attributes can be configured, as in <a class="xref" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">Section 5.7, “Specifying Default User and Group Settings”</a>.
</div><div class="table" id="tab.default-attrs"><h6>Table 5.2. Default FreeIPA User Attributes</h6><div class="table-contents"><table summary="Default FreeIPA User Attributes" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
UI Field
</th><th>
Command-Line Option
</th><th>
- Required, Optional, or Default<sup>[<a id="id3097538" href="#ftn.id3097538" class="footnote">a</a>]</sup>
+ Required, Optional, or Default<sup>[<a id="id909951" href="#ftn.id909951" class="footnote">a</a>]</sup>
</th></tr></thead><tbody><tr><td>
User login
</td><td>
@@ -120,7 +120,7 @@
</td></tr><tr><td>
User ID number
<div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created without specifying a UID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ When a user is created without specifying a UID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
</div><div class="para">
If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
</div><div class="para">
@@ -134,7 +134,7 @@
</td></tr><tr><td>
Group ID number
<div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created without specifying a GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ When a user is created without specifying a GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
</div><div class="para">
If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
</div><div class="para">
@@ -223,19 +223,27 @@
--addattr
</td><td>
Optional
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><p><sup>[<a id="ftn.id3097538" href="#id3097538" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><div class="para"><sup>[<a id="ftn.id909951" href="#id909951" class="para">a</a>] </sup>
Required attributes must be set for every entry. Optional attributes may be set, while default attributes are automatically added with a pre-defined value unless a specific value is given.
- </p></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="username-format"><div class="titlepage"><div><div><h4 class="title" id="username-format">5.2.1.2. About Username Formats</h4></div></div></div><div class="para">
+ </div></div></td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="username-format"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="username-format">5.2.1.2. About Username Formats</h4></div></div></div><div class="para">
FreeIPA supports a wide range of username formats, based on this regular expression:
</div><pre class="screen">[a-zA-Z0-9_.][a-zA-Z0-9_.-]{0,252}[a-zA-Z0-9_.$-]</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
The trailing $ symbol is permitted for Samba 3.x machine support.
</div></div></div><div class="para">
Any system limits — such as starting a username with a number on Unix systems — apply to the usernames in FreeIPA.
- </div></div></div><div class="section" id="adding-users"><div class="titlepage"><div><div><h3 class="title" id="adding-users">5.2.2. Adding Users</h3></div></div></div><div class="para">
- New user entries are added with the <code class="command">user-add</code> command. Attributes (listed in <a class="xref" href="managing-users.html#tab.default-attrs">Table 5.2, “Default FreeIPA User Attributes”</a>) can be added to the entry with specific values or the command can be run with no arguments.
- </div><pre class="screen">$ ipa user-add [<em class="replaceable"><code>username</code></em>] [<em class="replaceable"><code>attributes</code></em>]</pre><div class="para">
- When no arguments are used, the command prompts for the required user account information and uses the defaults for the other attributes, with the defaults printed below. For example:
- </div><pre class="screen">$ ipa user-add
+ </div></div></div><div class="section" id="adding-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-users">5.2.2. Adding Users</h3></div></div></div><div class="section" id="adding-users-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-users-ui">5.2.2.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the users list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Fill in the user's first and last names. The user login (UID) is automatically generated based on the user's full name, but this can be set manually by clicking the <span class="guilabel"><strong>Optional field</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-new.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add and Edit</strong></span> button to go directly to the expanded entry page and fill in more attribute information, as in <a class="xref" href="managing-users.html#editing-users-ui">Section 5.2.3.1, “From the Web UI”</a>. The user entry is created with some basic information already filled in, based on the given user information and the user entry template.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-attr.png" width="444" /></div></div></li></ol></div></div><div class="section" id="adding-users-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="adding-users-cmd">5.2.2.2. From the Command Line</h4></div></div></div><div class="para">
+ New user entries are added with the <code class="command">user-add</code> command. Attributes (listed in <a class="xref" href="managing-users.html#tab.default-attrs">Table 5.2, “Default FreeIPA User Attributes”</a>) can be added to the entry with specific values or the command can be run with no arguments.
+ </div><pre class="screen">$ ipa user-add [<em class="replaceable"><code>username</code></em>] [<em class="replaceable"><code>attributes</code></em>]</pre><div class="para">
+ When no arguments are used, the command prompts for the required user account information and uses the defaults for the other attributes, with the defaults printed below. For example:
+ </div><pre class="screen">$ ipa user-add
First name: John
Last name: Smith
User login [jsmith]: jsmith
@@ -250,41 +258,61 @@ GECOS field: jsmith
Login shell: /bin/sh
Kerberos principal: jsmith at EXAMPLE.COM
UID: 387115841</pre><div class="para">
- Any of the user attributes can be passed with the command. This will either set values for optional attributes or override the default values for default attributes.
- </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --manager=bjensen --email=johnls at example.com --homedir=/home/work/johns --password</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a user is created without specifying a UID or GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ Any of the user attributes can be passed with the command. This will either set values for optional attributes or override the default values for default attributes.
+ </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --manager=bjensen --email=johnls at example.com --homedir=/home/work/johns --password</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ When a user is created without specifying a UID or GID number, then the user account is automatically assigned an ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a user always has a unique number for its UID number and, if configured, for its private group.
+ </div><div class="para">
+ If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ </div><div class="para">
+ If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
+ </div></div></div></div></div><div class="section" id="editing-users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="editing-users">5.2.3. Editing Users</h3></div></div></div><div class="section" id="editing-users-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="editing-users-ui">5.2.3.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ There are a number of different types of attributes that can be edited for the user. All of the default attributes are listed in <a class="xref" href="managing-users.html#tab.default-attrs">Table 5.2, “Default FreeIPA User Attributes”</a>. Most of the attributes in the <span class="guilabel"><strong>Identity Settings</strong></span> and <span class="guilabel"><strong>Account Settings</strong></span> areas have default values filled in for them, based on the user information or on the user entry template.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-additional-attr.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Edit the fields or, if necessary, click the <span class="guilabel"><strong>Add</strong></span> link by an attribute to create the attribute on the entry.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-addcontact.png" /></div></div></li><li class="listitem"><div class="para">
+ When the edits are done, click the <span class="guilabel"><strong>Update</strong></span> link at the top of the page.
+ </div></li></ol></div></div><div class="section" id="editing-users-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="editing-users-cmd">5.2.3.2. From the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">user-mod</code> command edits user accounts by adding or changing attributes. At its most basic, the <code class="command">user-mod</code> specifies the user account by login ID, the attribute to edit, and the new value:
+ </div><pre class="screen">$ ipa user-mod <em class="replaceable"><code>loginID</code></em> --<em class="replaceable"><code>attributeName=newValue</code></em></pre><div class="para">
+ For example, to change a user's work title from <span class="emphasis"><em>Editor II</em></span> to <span class="emphasis"><em>Editor III</em></span>:
+ </div><pre class="screen">$ ipa user-mod jsmith --title="Editor III"</pre><a id="id634128" class="indexterm"></a><a id="id634140" class="indexterm"></a><div class="para">
+ FreeIPA allows <span class="emphasis"><em>multi-valued</em></span> attributes, based on attributes in LDAP that are allowed to have multiple values. For example, a person may have two email addresses, one for work and one for personal, that are both stored in the mail attribute. Managing multi-valued attributes can be done using the <code class="option">--addattr</code> option.
</div><div class="para">
- If a number is <span class="emphasis"><em>manually</em></span> assigned to a user entry, the server does not validate that the <em class="parameter"><code>uidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
- </div><div class="para">
- If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa user-find --all</code>.
- </div></div></div></div><div class="section" id="editing-users"><div class="titlepage"><div><div><h3 class="title" id="editing-users">5.2.3. Editing Users</h3></div></div></div><div class="para">
- The <code class="command">user-mod</code> command edits user accounts by adding or changing attributes. At its most basic, the <code class="command">user-mod</code> specifies the user account by login ID, the attribute to edit, and the new value:
- </div><pre class="screen">$ ipa user-mod <em class="replaceable"><code>loginID</code></em> --<em class="replaceable"><code>attributeName=newValue</code></em></pre><div class="para">
- For example, to change a user's work title from <span class="emphasis"><em>Editor II</em></span> to <span class="emphasis"><em>Editor III</em></span>:
- </div><pre class="screen">$ ipa user-mod jsmith --title="Editor III"</pre><a id="id3394151" class="indexterm"></a><a id="id3394162" class="indexterm"></a><div class="para">
- FreeIPA allows <span class="emphasis"><em>multi-valued</em></span> attributes, based on attributes in LDAP that are allowed to have multiple values. For example, a person may have two email addresses, one for work and one for personal, that are both stored in the mail attribute. Managing multi-valued attributes can be done using the <code class="option">--addattr</code> option.
- </div><div class="para">
- If an attributes allows multiple values — like mail — simply using the command-line argument will overwrite the value with the new value. This is also true for using <code class="option">--setaddr</code>. However, using <code class="option">--addattr</code> will add a new attribute; for a multi-valued attribute, it adds the new value in addition to any existing values.
- </div><div class="example" id="ex.multi-valued"><h6>Example 5.1. Multiple Mail Attributes</h6><div class="example-contents"><div class="para">
- A user is created first using his work email account.
- </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --email=johnls at example.com</pre><div class="para">
- Then, his personal email account is added.
- </div><pre class="screen">$ ipa user-mod jsmith --addattr=mail=johnnys at me.com</pre><div class="para">
- Both email addresses are listed for the user.
- </div><pre class="screen">$ ipa user-find jsmith --all
+ If an attributes allows multiple values — like mail — simply using the command-line argument will overwrite the value with the new value. This is also true for using <code class="option">--setaddr</code>. However, using <code class="option">--addattr</code> will add a new attribute; for a multi-valued attribute, it adds the new value in addition to any existing values.
+ </div><div class="example" id="ex.multi-valued"><h6>Example 5.1. Multiple Mail Attributes</h6><div class="example-contents"><div class="para">
+ A user is created first using his work email account.
+ </div><pre class="screen">$ ipa user-add jsmith --first=John --last=Smith --email=johnls at example.com</pre><div class="para">
+ Then, his personal email account is added.
+ </div><pre class="screen">$ ipa user-mod jsmith --addattr=mail=johnnys at me.com</pre><div class="para">
+ Both email addresses are listed for the user.
+ </div><pre class="screen">$ ipa user-find jsmith --all
--------------
1 user matched
--------------
dn: uid=jsmith,cn=users,cn=accounts,dc=example,dc=com
User login: jsmith
.....
- <strong class="userinput"><code>Email address: jsmith at example.com, jsmith at new.com</code></strong></pre></div></div><br class="example-break" /></div><div class="section" id="Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</h3></div></div></div><div class="para">
+ <strong class="userinput"><code>Email address: jsmith at example.com, jsmith at new.com</code></strong></pre></div></div><br class="example-break" /></div></div><div class="section" id="Activating_and_Deactivating_User_Accounts"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</h3></div></div></div><div class="para">
User accounts can be <span class="emphasis"><em>deactivated</em></span>. A deactivated user cannot log into FreeIPA or its related services (like Kerberos) and he cannot perform any tasks. However, the user account still exists within FreeIPA and all of the associated information remains unchanged.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Any existing connections remain valid until the Kerberos TGT and other tickets expire. Once the ticket expires, the user cannot renew the ticket.
- </div></div></div><div class="para">
- Users are activated and disabled using <code class="command">user-enable</code> and <code class="command">user-disable</code> commands. All that is required is the user login. For example:
- </div><pre class="screen">$ ipa user-disable jsmith</pre></div><div class="section" id="Configuring_IPA_Users-Deleting_IPA_Users"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Users-Deleting_IPA_Users">5.2.5. Deleting Users</h3></div></div></div><div class="para">
+ </div></div></div><div class="section" id="Activating_and_Deactivating_User_Accounts-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Activating_and_Deactivating_User_Accounts-ui">5.2.4.1. From the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user for whom to deactivate or activate.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Scroll to the <span class="guilabel"><strong>Account Settings</strong></span> area.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Deactivate</strong></span> link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-acctsettings.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the page.
+ </div></li></ol></div></div><div class="section" id="Activating_and_Deactivating_User_Accounts-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Activating_and_Deactivating_User_Accounts-cmd">5.2.4.2. From the Command Line</h4></div></div></div><div class="para">
+ Users are activated and disabled using <code class="command">user-enable</code> and <code class="command">user-disable</code> commands. All that is required is the user login. For example:
+ </div><pre class="screen">$ ipa user-disable jsmith</pre></div></div><div class="section" id="Deleting_IPA_Users"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Deleting_IPA_Users">5.2.5. Deleting Users</h3></div></div></div><div class="para">
Deleting a user account permanently removes the user entry and all its information from FreeIPA, including group memberships and passwords. External configuration — like a system account and home directory — will still exist on any server or local machine where they were created, but they cannot be accessed through FreeIPA.
</div><div class="para">
Deleting a user account is permanent. The information cannot be recovered; a new account must be created.
@@ -292,10 +320,18 @@ UID: 387115841</pre><div class="para">
If all admin users are deleted, then you must use the Directory Manager account to create a new administrative user.
</div><div class="para">
Alternatively, any user who belongs in the group management role can also add a new admin user.
- </div></div></div><div class="para">
- Users are deleted using the <code class="command">user-del</code> command and then the user login. For example, a single user:
- </div><pre class="screen">$ ipa user-del jsmith</pre><div class="para">
- To delete multiple users, simply list the users, separated by spaces.
- </div><pre class="screen">$ ipa user-del jsmith bjensen mreynolds cdickens</pre><div class="para">
- When deleting multiple users, use the <code class="option">--continue</code> option to force the command to continue regardless of errors. A summary of the successful and failed operations is printed to stdout when the command completes. If <code class="option">--continue</code> is not used, then the command proceeds with deleting users <span class="emphasis"><em>until</em></span> it encounters an error, and then it exits.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="users.html"><strong>Prev</strong>Chapter 5. Identity: Managing Users and User Grou...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Next</strong>5.3. Specifying Default User Settings</a></li></ul></body></html>
+ </div></div></div><div class="section" id="Deleting_IPA_Users-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Deleting_IPA_Users-ui">5.2.5.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the checkboxes by the names of the users to delete.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link at the top of the task area.
+ </div></li><li class="listitem"><div class="para">
+ When prompted, confirm the delete action.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-delete.png" width="444" /></div></div></li></ol></div></div><div class="section" id="Deleting_IPA_Users-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Deleting_IPA_Users-cmd">5.2.5.2. From the Command Line</h4></div></div></div><div class="para">
+ Users are deleted using the <code class="command">user-del</code> command and then the user login. For example, a single user:
+ </div><pre class="screen">$ ipa user-del jsmith</pre><div class="para">
+ To delete multiple users, simply list the users, separated by spaces.
+ </div><pre class="screen">$ ipa user-del jsmith bjensen mreynolds cdickens</pre><div class="para">
+ When deleting multiple users, use the <code class="option">--continue</code> option to force the command to continue regardless of errors. A summary of the successful and failed operations is printed to stdout when the command completes. If <code class="option">--continue</code> is not used, then the command proceeds with deleting users <span class="emphasis"><em>until</em></span> it encounters an error, and then it exits.
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="users.html"><strong>Prev</strong>Chapter 5. Identity: Managing Users and User Grou...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="changing-pwds.html"><strong>Next</strong>5.3. Changing Passwords</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/manually-unconfig-machines.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/manually-unconfig-machines.html
index 4222072..4d4663b 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/manually-unconfig-machines.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/manually-unconfig-machines.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.4. Manually Unconfiguring Client Machines</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.4. Manually Unconfiguring Client Machines</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /><link rel="prev" href="renaming-machines.html" title="14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration" /><link rel="next" href="Client_Problems.html" title="14.5. Debugging Client Connection Problems" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accessk
ey="p" href="renaming-machines.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Client_Problems.html"><strong>Next</strong></a></li></ul><div class="section" id="manually-unconfig-machines"><div class="titlepage"><div><div><h2 class="title" id="manually-unconfig-machines">14.4. Manually Unconfiguring Client Machines</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="enrolling-machines.html" title="6.3. Enrolling Clients Manually" /><link rel="next" href="Client_Problems.html" title="6.5. Debugging Client Connection Problems" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="enrolling-machines.html"><strong>Prev</strong>
</a></li><li class="next"><a accesskey="n" href="Client_Problems.html"><strong>Next</strong></a></li></ul><div class="section" id="manually-unconfig-machines"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="manually-unconfig-machines">6.4. Manually Unconfiguring Client Machines</h2></div></div></div><div class="para">
A machine may need to be removed from one FreeIPA domain and moved to another domain or a virtual machine may be copied. There are a number of different situations where a FreeIPA client needs to be reconfigured. The easiest solution is to uninstall the client and then configure it afresh.
</div><pre class="screen">ipa-client-install --uninstall</pre><div class="para">
If it is not possible to uninstall the client directly, then the FreeIPA configuration can be manually removed from the virtual machine.
@@ -34,4 +34,4 @@ $ ipa-getcert stop-tracking -n Server2-Cert -d /etc/pki/nssdb
</div></li><li class="listitem"><div class="para">
If the system should be re-added to a new FreeIPA domain — such as a virtual machine which was moved from one location to another — then the system can be rejoined to FreeIPA using the <code class="command">ipa-join</code> command.
- </div><pre class="programlisting">$ ipa-join</pre></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="renaming-machines.html"><strong>Prev</strong>14.3. Renaming Machines and Reconfiguring FreeIPA...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Client_Problems.html"><strong>Next</strong>14.5. Debugging Client Connection Problems</a></li></ul></body></html>
+ </div><pre class="programlisting">$ ipa-join</pre></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="enrolling-machines.html"><strong>Prev</strong>6.3. Enrolling Clients Manually</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Client_Problems.html"><strong>Next</strong>6.5. Debugging Client Connection Problems</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migrating-from-nis.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migrating-from-nis.html
index d0793ed..c77fb33 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migrating-from-nis.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migrating-from-nis.html
@@ -1,21 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>9.4. Migrating from NIS to FreeIPA</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.4. Migrating from NIS to FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="nis.html" title="Chapter 9. Identity: Integrating with NIS Domains and Netgroups" /><link rel="prev" href="Exposing_Automount_Maps_to_NIS_Clients.html" title="9.3. Exposing Automount Maps to NIS Clients" /><link rel="next" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Exposin
g_Automount_Maps_to_NIS_Clients.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Working_with_DNS.html"><strong>Next</strong></a></li></ul><div class="section" id="migrating-from-nis"><div class="titlepage"><div><div><h2 class="title" id="migrating-from-nis">9.4. Migrating from NIS to FreeIPA</h2></div></div></div><div class="para">
- There is no direct migration path from NIS to FreeIPA. This is a manual process with three major steps: setting up netgroup entries in FreeIPA, exporting the existing data from NIS, and importing that data into FreeIPA. There are several options for how to set up the FreeIPA environment and how to export data; the best option depends on the type of data and the overal network environment that you have.
- </div><div class="section" id="creating-netgroup-entries"><div class="titlepage"><div><div><h3 class="title" id="creating-netgroup-entries">9.4.1. Preparing Netgroup Entries in FreeIPA</h3></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="nis.html" title="Chapter 10. Policy: Integrating with NIS Domains and Netgroups" /><link rel="prev" href="Exposing_Automount_Maps_to_NIS_Clients.html" title="10.3. Exposing Automount Maps to NIS Clients" /><link rel="next" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" hr
ef="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="user-pwdpolicy.html"><strong>Next</strong></a></li></ul><div class="section" id="migrating-from-nis"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="migrating-from-nis">10.4. Migrating from NIS to FreeIPA</h2></div></div></div><div class="para">
+ There is no direct migration path from NIS to FreeIPA. This is a manual process with three major steps: setting up netgroup entries in FreeIPA, exporting the existing data from NIS, and importing that data into FreeIPA. There are several options for how to set up the FreeIPA environment and how to export data; the best option depends on the type of data and the overall network environment that you have.
+ </div><div class="section" id="creating-netgroup-entries"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="creating-netgroup-entries">10.4.1. Preparing Netgroup Entries in FreeIPA</h3></div></div></div><div class="para">
The first step is to identify what kinds of identities are being managed by NIS. Frequently, a NIS server is used for either user entries or host entries, but not for both, which can simplify the data migration process.
- </div><div class="formalpara"><h5 class="formalpara" id="id3270435">For user entries</h5>
- Determine what applications are using the user information in the NIS server. While some clients (like <code class="command">sudo</code>) require NIS netgroups, many clients can use Unix groups instead. If no netgroups are required, then simply create corresponding user accounts in FreeIPA and delete the netgroups entirely. Otherwise, create the user entries in FreeIPA and then create a FreeIPA-managed netgroup and add those users as members. This is described in <a class="xref" href="adding-netgroups.html">Section 9.2, “Adding Netgroups”</a>.
- </div><div class="formalpara"><h5 class="formalpara" id="id3270462">For host entries</h5>
+ </div><div class="formalpara"><h5 class="formalpara" id="id660362">For user entries</h5>
+ Determine what applications are using the user information in the NIS server. While some clients (like <code class="command">sudo</code>) require NIS netgroups, many clients can use Unix groups instead. If no netgroups are required, then simply create corresponding user accounts in FreeIPA and delete the netgroups entirely. Otherwise, create the user entries in FreeIPA and then create a FreeIPA-managed netgroup and add those users as members. This is described in <a class="xref" href="adding-netgroups.html">Section 10.2, “Creating Netgroups”</a>.
+ </div><div class="formalpara"><h5 class="formalpara" id="id660386">For host entries</h5>
Whenever a host group is created in FreeIPA, a corresponding shadow NIS group is automatically created. These netgroups can then be managed using the <code class="command">ipa-host-net-manage</code> command.
- </div><div class="formalpara"><h5 class="formalpara" id="id3270479">For a direct conversion</h5>
+ </div><div class="formalpara"><h5 class="formalpara" id="id660403">For a direct conversion</h5>
It may be necessary to have an exact conversion, with every NIS user and host having an exact corresponding entry in FreeIPA. In that case, each entry can be created using the original NIS names:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create an entry for every user referenced in a netgroup.
@@ -25,7 +25,7 @@
Create a netgroup with the same name as the original netgroup.
</div></li><li class="listitem"><div class="para">
Add the users and hosts as direct members of the netgroup. Alternatively, put add the users and hosts into FreeIPA groups or other netgroups, and then add those groups as members to the netgroup.
- </div></li></ol></div></div><div class="section" id="nis-migr-exporting-data"><div class="titlepage"><div><div><h3 class="title" id="nis-migr-exporting-data">9.4.2. Exporting the Existing NIS Data</h3></div></div></div><div class="para">
+ </div></li></ol></div></div><div class="section" id="nis-migr-exporting-data"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="nis-migr-exporting-data">10.4.2. Exporting the Existing NIS Data</h3></div></div></div><div class="para">
There are three main approaches that can be used to obtain the information from the NIS domain:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Export an LDIF file from the NIS server.
@@ -40,7 +40,7 @@
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create a script to retrieve data from the source. There are several ways to access this information, such as parsing an LDIF file or connecting to the NIS server and listing the information.
</div></li><li class="listitem"><div class="para">
- Create a second script that runs through the FreeIPA command-line tulities to create all of the entries, using the NIS information as inputs.
+ Create a second script that runs through the FreeIPA command-line utilities to create all of the entries, using the NIS information as inputs.
</div></li></ol></div></li><li class="listitem"><div class="para">
Manually create the required netgroups, users, and hosts.
- </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Prev</strong>9.3. Exposing Automount Maps to NIS Clients</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Working_with_DNS.html"><strong>Next</strong>Chapter 10. Identity: Managing DNS</a></li></ul></body></html>
+ </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Exposing_Automount_Maps_to_NIS_Clients.html"><strong>Prev</strong>10.3. Exposing Automount Maps to NIS Clients</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="user-pwdpolicy.html"><strong>Next</strong>Chapter 11. Policy: Defining Password Policies</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migration-considerations.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migration-considerations.html
new file mode 100644
index 0000000..9b3a889
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/migration-considerations.html
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>17.2. Migration Considerations</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 17. Migrating from a 389 Directory Server to FreeIPA" /><link rel="prev" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 17. Migrating from a 389 Directory Server to FreeIPA" /><link rel="next" href="Overview-Recommended_Sequence_of_Steps.html" title="17.3. Migration Sequence" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul
class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Next</strong></a></li></ul><div class="section" id="migration-considerations"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="migration-considerations">17.2. Migration Considerations</h2></div></div></div><div class="para">
+ The primary issue that may affect Directory Server-FreeIPA migration is how user passwords are stored. FreeIPA uses Kerberos for authentication, and each user requires that Kerberos keys be stored in the FreeIPA Directory Server in addition to the standard user passwords. To generate these keys, the user password needs to be available in cleartext for FreeIPA to be able to read it. This cleartext password is available to FreeIPA when the user is created in FreeIPA. However, when the user is migrated a Directory Server instance, the associated user password is already hashed. The existing password hashes can be reloaded, but the Kerberos hashes cannot be generated. This means that user password migration requires some additional work.
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Users cannot authentication to the FreeIPA domain or access FreeIPA resources until they have Kerberos keys.
+ </div></div></div><div class="para">
+ If a user does not have a Kerberos key, that user cannot log into the FreeIPA domain even if he has a user account. SSSD can work with FreeIPA and Kerberos to mitigate the user impact on migrating by generating the required user keys.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ A user tries to log into the machine.
+ </div></li><li class="listitem"><div class="para">
+ The FreeIPA identity provider backend attempts Kerberos authentication.
+ </div></li><li class="listitem"><div class="para">
+ Even though the user exists in the system, the authentication will fail with the error <span class="emphasis"><em>key type is not supported</em></span> because the Kerberos keys do not exist.
+ </div></li><li class="listitem"><div class="para">
+ SSSD uses the FreeIPA identity provider backend to attempt an LDAP bind.
+ </div></li><li class="listitem"><div class="para">
+ FreeIPA intercepts this bind request. If the user has a Kerberos principal but no Kerberos keys, then the FreeIPA generates the keys and stores them in the user entry.
+ </div><div class="para">
+ If the bind operation fails for any reason, the FreeIPA identity provider backend fails authentication.
+ </div></li><li class="listitem"><div class="para">
+ The FreeIPA identity provider backend unbinds and tries Kerberos authentication again. This time succeeds because the keys exists in the entry.
+ </div></li></ol></div><div class="para">
+ Alternatively, it is possible to "migrate" users simply by re-creating the Directory Server accounts in FreeIPA, which automatically creates accounts with the appropriate keys. The new users are assigned a temporary password which they change at the first login. No passwords are migrated.
+ </div><div class="para">
+ Migrating users from an existing system provides a smoother transition but also requires parallel management of Directory Server and FreeIPA during the migration and transition process. If you do not preserve passwords, the migration can be performed more quickly but it requires more manual work by administrators and users.
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Prev</strong>Chapter 17. Migrating from a 389 Directory Server...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Overview-Recommended_Sequence_of_Steps.html"><strong>Next</strong>17.3. Migration Sequence</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/modifying-dns-zones.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/modifying-dns-zones.html
index bdd976e..0ce2cb8 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/modifying-dns-zones.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/modifying-dns-zones.html
@@ -1,15 +1,15 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>10.7. Modifying DNS Zones</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.6. Modifying DNS Zones</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 10. Identity: Managing DNS" /><link rel="prev" href="Managing_DNS_Zones-Adding_DNS_Zones.html" title="10.6. Adding DNS Zones" /><link rel="next" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html" title="10.8. Enabling Dynamic DNS Updates" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Add
ing_DNS_Zones.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Next</strong></a></li></ul><div class="section" id="modifying-dns-zones"><div class="titlepage"><div><div><h2 class="title" id="modifying-dns-zones">10.7. Modifying DNS Zones</h2></div></div></div><div class="para">
- A zone is created with a certain amount of configuration, set to default values:
- </div><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="Working_with_DNS.html" title="Chapter 8. Identity: Managing DNS" /><link rel="prev" href="Managing_DNS_Zones-Adding_DNS_Zones.html" title="8.5. Adding DNS Zones" /><link rel="next" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html" title="8.7. Enabling Dynamic DNS Updates" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Addin
g_DNS_Zones.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Next</strong></a></li></ul><div class="section" id="modifying-dns-zones"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="modifying-dns-zones">8.6. Modifying DNS Zones</h2></div></div></div><div class="para">
+ A zone is created with a certain amount of configuration, set to default values.
+ </div><div class="example" id="ex.dns-zone-entry"><h6>Example 8.2. Default DNS Zone Entry Settings</h6><div class="example-contents"><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
idnsname: example.com
idnssoamname: server.example.com.
idnssoarname: root.server.example.com.
@@ -25,32 +25,9 @@
objectclass: top
objectclass: idnsrecord
objectclass: idnszone
-</pre><div class="para">
- The zone can be created with additional attributes and values different from the default by passing additional options with the <code class="command">dnszeon-add</code> command. Likewise, attributes can be added or modified in the zone entry by passing the same attribute options with the <code class="command">dnszone-mod</code> command. These are listed in <a class="xref" href="modifying-dns-zones.html#tab.zone-attr">Table 10.3, “Zone Attributes”</a>.
- </div><div class="para">
- If an attribute does not exist in the DNS zone entry, than the <code class="command">dnszone-mod</code> command adds the attribute. If the attribute exists, then it overwrites the current value with the specified value.
- </div><div class="para">
- For example, to set a time to live for SOA records:
- </div><pre class="screen">$ ipa dnszone-mod server.example.com --ttl=1800</pre><div class="para">
- This adds a new attribute to the DNS zone entry:
- </div><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
- idnsname: example.com
- idnssoamname: server.example.com.
- idnssoarname: root.server.example.com.
- idnssoaserial: 2011130701
- idnssoarefresh: 3600
- idnssoaretry: 900
- idnssoaexpire: 1209600
- idnssoaminimum: 3600
- <strong class="userinput"><code>dnsttl: 1800</code></strong>
- idnsupdatepolicy: grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA;
- idnszoneactive: TRUE
- idnsallowdynupdate: TRUE
- nsrecord: server.example.com.
- objectclass: top
- objectclass: idnsrecord
- objectclass: idnszone
-</pre><div class="table" id="tab.zone-attr"><h6>Table 10.3. Zone Attributes</h6><div class="table-contents"><table summary="Zone Attributes" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+</pre></div></div><br class="example-break" /><div class="para">
+ All of the possible zone settings are listed in <a class="xref" href="modifying-dns-zones.html#tab.zone-attr">Table 8.3, “Zone Attributes”</a>. Along with setting the actual information for the zone, the settings define how the DNS server handles the <span class="emphasis"><em>start of authority</em></span> (SOA) record entries and how it updates its records from the DNS name server.
+ </div><div class="table" id="tab.zone-attr"><h6>Table 8.3. Zone Attributes</h6><div class="table-contents"><table summary="Zone Attributes" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Attribute
</th><th>
Command-Line Option
@@ -134,4 +111,45 @@
--ip-address
</td><td>
Adds the DNS name server by its IP address.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Adding_DNS_Zones.html"><strong>Prev</strong>10.6. Adding DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Next</strong>10.8. Enabling Dynamic DNS Updates</a></li></ul></body></html>
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="editing-dns-zone-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="editing-dns-zone-ui">8.6.1. Editing the Zone Configuration in the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>DNS</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the DNS zone to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Settings</strong></span> tab.
+ </div></li><li class="listitem"><div class="para">
+ Change any of the DNS zone settings. The full list of attributes is described in <a class="xref" href="modifying-dns-zones.html#tab.zone-attr">Table 8.3, “Zone Attributes”</a>. There are some common attributes to change:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Authoritative name server</em></span>, the fully-qualified domain name of the DNS name server.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Dynamic update</em></span>, to enable dynamic updates to DNS records for clients.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>SOA refresh</em></span>, the interval, in seconds, for a secondary DNS server to wait before requesting updates from the primary DNS server.
+ </div></li></ul></div><div class="informalfigure"><div class="mediaobject"><img src="images/dns-zone-settings.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Update</strong></span> link at the top of the settings page.
+ </div></li></ol></div></div><div class="section" id="editing-dns-zone-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="editing-dns-zone-cmd">8.6.2. Editing the Zone Configuration in the Command Line</h3></div></div></div><div class="para">
+ The zone can be created with additional attributes and values different from the default by passing additional options with the <code class="command">dnszone-add</code> command. Likewise, attributes can be added or modified in the zone entry by passing the same attribute options with the <code class="command">dnszone-mod</code> command. These are listed in <a class="xref" href="modifying-dns-zones.html#tab.zone-attr">Table 8.3, “Zone Attributes”</a>.
+ </div><div class="para">
+ If an attribute does not exist in the DNS zone entry, than the <code class="command">dnszone-mod</code> command adds the attribute. If the attribute exists, then it overwrites the current value with the specified value.
+ </div><div class="para">
+ For example, to set a time to live for SOA records:
+ </div><pre class="screen">$ ipa dnszone-mod server.example.com --ttl=1800</pre><div class="para">
+ This adds a new attribute to the DNS zone entry:
+ </div><pre class="screen"> dn: idnsname=example.com,cn=dns,dc=example,dc=com
+ idnsname: example.com
+ idnssoamname: server.example.com.
+ idnssoarname: root.server.example.com.
+ idnssoaserial: 2011130701
+ idnssoarefresh: 3600
+ idnssoaretry: 900
+ idnssoaexpire: 1209600
+ idnssoaminimum: 3600
+ <strong class="userinput"><code>dnsttl: 1800</code></strong>
+ idnsupdatepolicy: grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA;
+ idnszoneactive: TRUE
+ idnsallowdynupdate: TRUE
+ nsrecord: server.example.com.
+ objectclass: top
+ objectclass: idnsrecord
+ objectclass: idnszone
+</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing_DNS_Zones-Adding_DNS_Zones.html"><strong>Prev</strong>8.5. Adding DNS Zones</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Adding_DNS_Zones-Using_Dynamic_DNS_Updates.html"><strong>Next</strong>8.7. Enabling Dynamic DNS Updates</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/nis.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/nis.html
index 60c5983..71c689a 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/nis.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/nis.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 9. Identity: Integrating with NIS Domains and Netgroups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 10. Policy: Integrating with NIS Domains and Netgroups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Configuring_Microsoft_Windows.html" title="8.5. Configuring a Microsoft Windows System to Join the FreeIPA Realm" /><link rel="next" href="adding-netgroups.html" title="9.2. Adding Netgroups" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Microsoft_Windows.ht
ml"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="adding-netgroups.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="nis" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 9. Identity: Integrating with NIS Domains and Netgroups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="nis.html#about-nis">9.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="adding-netgroups.html">9.2. Adding Netgroups</a></span></dt><dt><span class="section"><a href="Exposing_Automount_Maps_to_NIS_Clients.html">9.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html">9.4. Migrating from NIS to FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="migrating-from-nis.html#creating-netgroup-entries">9.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="migrati
ng-from-nis.html#nis-migr-exporting-data">9.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></div><div class="para">
- Network information service (NIS) is one of the most common ways to manage identities and authentication on Unix networks. It is simple and easy to use, but it also has inherent security risks and a lack of flexibility that can make administrering NIS domains problematic.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="configuring-maps.html" title="9.4. Configuring Maps" /><link rel="next" href="adding-netgroups.html" title="10.2. Creating Netgroups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-maps.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" hr
ef="adding-netgroups.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="nis" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 10. Policy: Integrating with NIS Domains and Netgroups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="nis.html#about-nis">10.1. About NIS and FreeIPA</a></span></dt><dt><span class="section"><a href="adding-netgroups.html">10.2. Creating Netgroups</a></span></dt><dd><dl><dt><span class="section"><a href="adding-netgroups.html#add-netgroup">10.2.1. Adding Netgroups</a></span></dt><dt><span class="section"><a href="adding-netgroups.html#add-netgroup-members">10.2.2. Adding Netgroup Members</a></span></dt></dl></dd><dt><span class="section"><a href="Exposing_Automount_Maps_to_NIS_Clients.html">10.3. Exposing Automount Maps to NIS Clients</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html">10.4. Migrating from NIS to FreeIPA</a></span></dt><dd><d
l><dt><span class="section"><a href="migrating-from-nis.html#creating-netgroup-entries">10.4.1. Preparing Netgroup Entries in FreeIPA</a></span></dt><dt><span class="section"><a href="migrating-from-nis.html#nis-migr-exporting-data">10.4.2. Exporting the Existing NIS Data</a></span></dt></dl></dd></dl></div><div class="para">
+ Network information service (NIS) is one of the most common ways to manage identities and authentication on Unix networks. It is simple and easy to use, but it also has inherent security risks and a lack of flexibility that can make administering NIS domains problematic.
</div><div class="para">
- FreeIPA supplies a way to integrate netgroups into the FreeIPA domain, which incorporates the stronger security strucutre of FreeIPA over the NIS configuration. Alternatively, administrators can simply migrate user and host identities from a NIS domain into the FreeIPA domain.
- </div><div class="section" id="about-nis"><div class="titlepage"><div><div><h2 class="title" id="about-nis">9.1. About NIS and FreeIPA</h2></div></div></div><div class="para">
+ FreeIPA supplies a way to integrate netgroups into the FreeIPA domain, which incorporates the stronger security structure of FreeIPA over the NIS configuration. Alternatively, administrators can simply migrate user and host identities from a NIS domain into the FreeIPA domain.
+ </div><div class="section" id="about-nis"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-nis">10.1. About NIS and FreeIPA</h2></div></div></div><div class="para">
Network information service (NIS) centrally manages authentication and identity information such as users and passwords, hosts and IP addresses, and POSIX groups. This was originally called <span class="emphasis"><em>Yellow Pages</em></span> (abbreviated YP) because of its simple focus on identity and authentication lookups.
</div><div class="para">
NIS is considered too insecure for most modern network environments because it provides no host authentication mechanisms and it transmits all of its information over the network unencrypted, including password hashes. Still, while NIS has been falling out of favor with administrators, it is still actively used by many system client. Clients such as <code class="command">sudo</code> only use netgroups to manage authentication. There are ways to work around those insecurities by integrating NIS with other protocols which offer enhanced security.
@@ -53,4 +53,4 @@ Member Host: VirtGuests</pre><div class="para">
When a client attempts to access the NIS netgroup, then FreeIPA translates the LDAP entry into a traditional NIS map and sends it to a client over the NIS protocol (using a NIS plug-in) or it translates it into an LDAP format that is compliant with RFC 2307 or RFC 2307bis (using a compatibility plug-in).
</div><div class="para">
For more information on NIS, see the Berkeley lab manpages at <a href="http://compute.cnr.berkeley.edu/cgi-bin/man-cgi?netgroup+4">http://compute.cnr.berkeley.edu/cgi-bin/man-cgi?netgroup+4</a>.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Configuring_Microsoft_Windows.html"><strong>Prev</strong>8.5. Configuring a Microsoft Windows System to Jo...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="adding-netgroups.html"><strong>Next</strong>9.2. Adding Netgroups</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-maps.html"><strong>Prev</strong>9.4. Configuring Maps</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="adding-netgroups.html"><strong>Next</strong>10.2. Creating Netgroups</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/password-sync.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/password-sync.html
index 1bf28ff..6073b29 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/password-sync.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/password-sync.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>8.3. Exempting Active Directory Users from Password Synchronization</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>7.3. Exempting Active Directory Users from Password Synchronization</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 8. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="Setting_up_Active_Directory.html" title="8.2. Setting up Active Directory for Synchronization" /><link rel="next" href="managing-sync-agmt.html" title="8.4. Managing Synchronization Agreements" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesske
y="p" href="Setting_up_Active_Directory.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="managing-sync-agmt.html"><strong>Next</strong></a></li></ul><div class="section" id="password-sync"><div class="titlepage"><div><div><h2 class="title" id="password-sync">8.3. Exempting Active Directory Users from Password Synchronization</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="active-directory.html" title="Chapter 7. Identity: Integrating with Microsoft Active Directory" /><link rel="prev" href="Setting_up_Active_Directory.html" title="7.2. Setting up Active Directory for Synchronization" /><link rel="next" href="managing-sync-agmt.html" title="7.4. Managing Synchronization Agreements" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accessk
ey="p" href="Setting_up_Active_Directory.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="managing-sync-agmt.html"><strong>Next</strong></a></li></ul><div class="section" id="password-sync"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="password-sync">7.3. Exempting Active Directory Users from Password Synchronization</h2></div></div></div><div class="para">
The passwords in password change operations are still subject to the password policy settings, such as password expiration times. For example, in FreeIPA every password change requires an immediate password reset. While normal user passwords need to be subject to password policies, administrative passwords should be exempt from any password rules. A list of user DNs can be set in the password synchronization configuration that are exempted from the password policy.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
The Directory Manager password is always exempt from password policy.
@@ -18,4 +18,4 @@
dn: cn=ipa_pwd_extop,cn=plugins,cn=config
changetype: modify
add: passSyncManagersDNs
-passSyncManagersDNs: uid=admin,cn=users,cn=accounts,dc=example,dc=com</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_up_Active_Directory.html"><strong>Prev</strong>8.2. Setting up Active Directory for Synchronizat...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-sync-agmt.html"><strong>Next</strong>8.4. Managing Synchronization Agreements</a></li></ul></body></html>
+passSyncManagersDNs: uid=admin,cn=users,cn=accounts,dc=example,dc=com</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Setting_up_Active_Directory.html"><strong>Prev</strong>7.2. Setting up Active Directory for Synchronizat...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-sync-agmt.html"><strong>Next</strong>7.4. Managing Synchronization Agreements</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/promoting-replica.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/promoting-replica.html
index 1d7b175..45be8a8 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/promoting-replica.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/promoting-replica.html
@@ -1,31 +1,52 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.11. Promoting a Read-Only Replica to a FreeIPA Server</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.7. Promoting a Read-Only Replica to a FreeIPA Server</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="dns-multihomed.html" title="13.10. Setting DNS Entries for Multi-Homed Servers" /><link rel="next" href="upgrading-server.html" title="13.12. Testing Before Upgrading the FreeIPA Server" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-multihomed.html"
><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="upgrading-server.html"><strong>Next</strong></a></li></ul><div class="section" id="promoting-replica"><div class="titlepage"><div><div><h2 class="title" id="promoting-replica">13.11. Promoting a Read-Only Replica to a FreeIPA Server</h2></div></div></div><div class="para">
- The only difference between a replica and the master server is that the master owns the self-signed CA. If you copy the appropriate files from the master to the replica, import the CA into the replica directory server, and delete the existing replication agreements, that replica will then appear as a master server.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- If you install with the <code class="option">--selfsign</code> option, follow this procedure if you want to promote a replica to a master. This is because the private key for the self-signed CA is stored in the Apache database (<code class="filename">/etc/httpd/alias</code>). The private key for a Dogtag Certificate System CA is stored in its own security database.
- </div></div></div><div class="orderedlist"><h6>To promote a replica to a master server:</h6><ol><li class="listitem"><div class="para">
- Copy the <code class="filename">/var/lib/ipa/ca_serialno</code> file from the master to the replica.
- </div></li><li class="listitem"><div class="para">
- Import the CA into the replica 389 Directory Server NSS database, as follows:
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="dns-multihomed.html" title="16.6. Setting DNS Entries for Multi-Homed Servers" /><link rel="next" href="upgrading-server.html" title="16.8. Testing Before Upgrading the FreeIPA Server" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-multihomed.html">
<strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="upgrading-server.html"><strong>Next</strong></a></li></ul><div class="section" id="promoting-replica"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="promoting-replica">16.7. Promoting a Read-Only Replica to a FreeIPA Server</h2></div></div></div><div class="para">
+ The only difference between a replica and the master server is that the master owns the master CA in the certificate system hierarchy. This means that it is possible to change a replica server to a master server by changing its CA configuration.
+ </div><div class="section" id="promoting-pki"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="promoting-pki">16.7.1. Promoting a Replica with a Dogtag Certificate System CA</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ On the replica server, stop the CA server.
+ </div><pre class="screen">service pki-ca stop</pre></li><li class="listitem"><div class="para">
+ Open the CA's configuration directory.
+ </div><pre class="screen">cd /var/lib/pki-ca/conf</pre></li><li class="listitem"><div class="para">
+ Edit the <code class="filename">CS.cfg</code> file to configure the replica's CA as a master.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Delete each line which begins with the <code class="filename">ca.crl.</code> prefix.
+ </div></li><li class="listitem"><div class="para">
+ Copy each line beginning with the <code class="filename">ca.crl.</code> prefix from the CA <code class="filename">CS.cfg</code> file on the master server into the replica server's CA <code class="filename">CS.cfg</code> file.
+ </div></li><li class="listitem"><div class="para">
+ Enable control of the database maintenance thread; the default value for a master CA is <code class="command">600</code>.
+ </div><pre class="screen">ca.certStatusUpdateInterval=600</pre></li><li class="listitem"><div class="para">
+ Enable monitoring database replication:
+ </div><pre class="screen">ca.listenToCloneModifications=true</pre></li><li class="listitem"><div class="para">
+ Enable maintenance of the CRL cache:
+ </div><pre class="screen">ca.crl.<em class="replaceable"><code>IssuingPointId</code></em>.enableCRLCache=true</pre></li><li class="listitem"><div class="para">
+ Enable CRL generation:
+ </div><pre class="screen">ca.crl.<em class="replaceable"><code>IssuingPointId</code></em>.enableCRLUpdates=true</pre></li><li class="listitem"><div class="para">
+ Disable the redirect settings for CRL generation requests:
+ </div><pre class="screen">master.ca.agent.host=<em class="replaceable"><code>hostname</code></em>
+master.ca.agent.port=<em class="replaceable"><code>port number</code></em></pre></li></ol></div></li><li class="listitem"><div class="para">
+ Start the CA server.
+ </div><pre class="screen">service pki-ca start</pre></li></ol></div></div><div class="section" id="promoting-selfsigned"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="promoting-selfsigned">16.7.2. Promoting a Replica with a Self-Signed CA</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Copy the <code class="filename">/var/lib/ipa/ca_serialno</code> file from the master server to the replica.
+ </div></li><li class="listitem"><div class="para">
+ Import the CA certificate into the replica 389 Directory Server NSS database:
<pre class="screen"># cd /etc/dirsrv/slapd-REALM
# pk12util -i /path/to/cacert.p12 -d .
</pre>
- </div><div class="para">
- The password on the <code class="filename">PKCS#12</code> file is stored as <code class="filename">/etc/dirsrv/slapd-REALM/pwdfile.txt</code> on the original server.
- </div></li><li class="listitem"><div class="para">
- Delete the existing replication agreements, as follows:
+ </div><div class="para">
+ The password on the <code class="filename">PKCS#12</code> file is stored as <code class="filename">/etc/dirsrv/slapd-REALM/pwdfile.txt</code> on the original server.
+ </div></li><li class="listitem"><div class="para">
+ Delete the existing replication agreements between the replica and master server:
<pre class="screen"># ipa-replica-manage del master.example.com
</pre>
- </div></li></ol></div><div class="para">
- You now have two identical FreeIPA servers, neither of which know about the other. You can shut down the old master and bring up the new machine (if you are introducing a new replica into your network). Create a replica file on the new master and install it on the new machine.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-multihomed.html"><strong>Prev</strong>13.10. Setting DNS Entries for Multi-Homed Servers</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="upgrading-server.html"><strong>Next</strong>13.12. Testing Before Upgrading the FreeIPA Server</a></li></ul></body></html>
+ </div></li></ol></div><div class="para">
+ This results in two identical FreeIPA servers which are unaware of one another. The old master server can be shut down and replaced with the other server without affecting the domain.
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="dns-multihomed.html"><strong>Prev</strong>16.6. Setting DNS Entries for Multi-Homed Servers</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="upgrading-server.html"><strong>Next</strong>16.8. Testing Before Upgrading the FreeIPA Server</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/removing-keytabs.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/removing-keytabs.html
index 9f7d057..a8ca4d7 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/removing-keytabs.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/removing-keytabs.html
@@ -1,16 +1,16 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.5. Removing Keytabs</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>12.5. Removing Keytabs</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /><link rel="prev" href="kerberos-pwd-cache.html" title="6.4. Caching Kerberos Passwords" /><link rel="next" href="Kerberos_Errors.html" title="6.6. Troubleshooting Kerberos Errors" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="kerberos-pwd-cache.html"><strong>Prev</strong></
a></li><li class="next"><a accesskey="n" href="Kerberos_Errors.html"><strong>Next</strong></a></li></ul><div class="section" id="removing-keytabs"><div class="titlepage"><div><div><h2 class="title" id="removing-keytabs">6.5. Removing Keytabs</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="kerberos.html" title="Chapter 12. Policy: Managing the Kerberos Domain" /><link rel="prev" href="kerberos-pwd-cache.html" title="12.4. Caching Kerberos Passwords" /><link rel="next" href="Kerberos_Errors.html" title="12.6. Troubleshooting Kerberos Errors" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="kerberos-pwd-cache.html"><strong>Prev</strong>
</a></li><li class="next"><a accesskey="n" href="Kerberos_Errors.html"><strong>Next</strong></a></li></ul><div class="section" id="removing-keytabs"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="removing-keytabs">12.5. Removing Keytabs</h2></div></div></div><div class="para">
Refreshing Kerberos tickets adds a new key to the keytab, but it does not clear the keytab. If a host is being unenrolled and re-added to the FreeIPA domain or if there are Kerberos connection errors, then it may be necessary to remove the keytab and create a new keytab.
</div><div class="para">
This is done using the <code class="command">ipa-rmkeytab</code> command. To remove all principals on the host, specify the realm with the <code class="option">-r</code> option:
</div><pre class="screen"># ipa-rmkeytab -r EXAMPLE.COM -k /etc/krb5.keytab</pre><div class="para">
To remove the keytab for a specific service, use the <code class="option">-p</code> option to specify the service principal:
- </div><pre class="screen"># ipa-rmkeytab -p ldap/client.example.com -k /etc/krb5.keytab</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="kerberos-pwd-cache.html"><strong>Prev</strong>6.4. Caching Kerberos Passwords</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Kerberos_Errors.html"><strong>Next</strong>6.6. Troubleshooting Kerberos Errors</a></li></ul></body></html>
+ </div><pre class="screen"># ipa-rmkeytab -p ldap/client.example.com -k /etc/krb5.keytab</pre></div><ul class="docnav"><li class="previous"><a accesskey="p" href="kerberos-pwd-cache.html"><strong>Prev</strong>12.4. Caching Kerberos Passwords</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Kerberos_Errors.html"><strong>Next</strong>12.6. Troubleshooting Kerberos Errors</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/renaming-machines.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/renaming-machines.html
index 5109bf8..b7c69fb 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/renaming-machines.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/renaming-machines.html
@@ -1,14 +1,14 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /><link rel="prev" href="enrolling-machines.html" title="14.2. Enrolling Clients Manually" /><link rel="next" href="manually-unconfig-machines.html" title="14.4. Manually Unconfiguring Client Machines" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="enrolling-m
achines.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="manually-unconfig-machines.html"><strong>Next</strong></a></li></ul><div class="section" id="renaming-machines"><div class="titlepage"><div><div><h2 class="title" id="renaming-machines">14.3. Renaming Machines and Reconfiguring FreeIPA Client Configuration</h2></div></div></div><div class="para">
- The hostname of a system is critical for the correct operation of Kerberos and SSL. Both of these security mechanisms rely on the hostname to ensure that communication is occurring between the specified hosts. Infrastructures which use virtual machines or clusterd servers will commonly have hosts which are renamed because systems are copied, moved, or renamed.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="hosts.html" title="Chapter 6. Identity: Managing Hosts and Services" /><link rel="prev" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html" title="6.8. Extending Access Permissions over Other Hosts and Services" /><link rel="next" href="host-groups.html" title="6.10. Managing Host Groups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Exten
ding_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="host-groups.html"><strong>Next</strong></a></li></ul><div class="section" id="renaming-machines"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="renaming-machines">6.9. Renaming Machines and Reconfiguring FreeIPA Client Configuration</h2></div></div></div><div class="para">
+ The hostname of a system is critical for the correct operation of Kerberos and SSL. Both of these security mechanisms rely on the hostname to ensure that communication is occurring between the specified hosts. Infrastructures which use virtual machines or clustered servers will commonly have hosts which are renamed because systems are copied, moved, or renamed.
</div><div class="para">
Fedora does not provide a simple rename command to facilitate the renaming of a FreeIPA host. Renaming a host in a FreeIPA domain involves deleting the entry in FreeIPA, uninstalling the client software, changing the hostname, and re-enrolling using the new name. Additionally, part of renaming hosts requires regenerating service principals.
</div><div class="para">
@@ -61,4 +61,4 @@
To generate certificates for services, use either <code class="command">certmonger</code> or the FreeIPA administration tools.
</div></li><li class="listitem"><div class="para">
Re-add the host to any applicable host groups.
- </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="enrolling-machines.html"><strong>Prev</strong>14.2. Enrolling Clients Manually</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="manually-unconfig-machines.html"><strong>Next</strong>14.4. Manually Unconfiguring Client Machines</a></li></ul></body></html>
+ </div></li></ol></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Extending_the_Permissions_of_IPA_Managed_Hosts.html"><strong>Prev</strong>6.8. Extending Access Permissions over Other Host...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="host-groups.html"><strong>Next</strong>6.10. Managing Host Groups</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/searching.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/searching.html
index 46ade4a..15e8f0b 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/searching.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/searching.html
@@ -1,17 +1,17 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.7. Searching for Users and Groups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.6. Searching for Users and Groups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="user-groups.html" title="5.6. Managing User Groups" /><link rel="next" href="kerberos.html" title="Chapter 6. Identity: Managing the Kerberos Domain" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="user-groups.html"><strong>Prev</strong></a></li><li cla
ss="next"><a accesskey="n" href="kerberos.html"><strong>Next</strong></a></li></ul><div class="section" id="searching"><div class="titlepage"><div><div><h2 class="title" id="searching">5.7. Searching for Users and Groups</h2></div></div></div><div class="para">
- The user searches in FreeIPA can be run against simple (full word) or partial search strings. The range of attributes that are searched is configured as part of the default FreeIPA configuration, as in <a class="xref" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">Section 5.3, “Specifying Default User Settings”</a>.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="user-groups.html" title="5.5. Managing User Groups" /><link rel="next" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html" title="5.7. Specifying Default User and Group Settings" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="user-groups
.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Next</strong></a></li></ul><div class="section" id="searching"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="searching">5.6. Searching for Users and Groups</h2></div></div></div><div class="para">
+ The user searches in FreeIPA can be run against simple (full word) or partial search strings. The range of attributes that are searched is configured as part of the default FreeIPA configuration, as in <a class="xref" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">Section 5.7, “Specifying Default User and Group Settings”</a>.
</div><div class="para">
- By default, there are six attributes that are indexed for user searches and two that are indexed for group searches. These are listed in <a class="xref" href="searching.html#tab.search-attrs">Table 5.6, “Default Search Attributes”</a>. All search attributes are searched in a user/group search.
- </div><div class="table" id="tab.search-attrs"><h6>Table 5.6. Default Search Attributes</h6><div class="table-contents"><table summary="Default Search Attributes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th colspan="2">
+ By default, there are six attributes that are indexed for user searches and two that are indexed for group searches. These are listed in <a class="xref" href="searching.html#tab.search-attrs">Table 5.4, “Default Search Attributes”</a>. All search attributes are searched in a user/group search.
+ </div><div class="table" id="tab.search-attrs"><h6>Table 5.4. Default Search Attributes</h6><div class="table-contents"><table summary="Default Search Attributes" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th colspan="2">
User Search Attributes
</th></tr></thead><tbody><tr><td>
First name
@@ -25,29 +25,31 @@
Organizational unit
</td><td>
Phone number
- </td></tr></tbody></table><table summary="Default Search Attributes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th colspan="2">
+ </td></tr></tbody></table><table summary="Default Search Attributes" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th colspan="2">
Group Search Attributes
</th></tr></thead><tbody><tr><td>
Name
</td><td>
Description
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="para">
- Searches are simple:
- </div><pre class="screen">$ ipa user-find|group-find <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>options</code></em></pre><div class="para">
- There are a few general rules with searches:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- If there is no <span class="emphasis"><em>string</em></span>, then the search returns every entry in FreeIPA, up to the search limit.
- </div></li><li class="listitem"><div class="para">
- With the command-line tools, only a single search string can be used for user and group searches. With the UI, multiple strings can be used.
- </div></li><li class="listitem"><div class="para">
- Searches are case insensitive.
- </div></li><li class="listitem"><div class="para">
- Search results are displayed alphabetically, with exact matches listed first, followed by partial matches.
- </div></li><li class="listitem"><div class="para">
- Wildcards cannot be used in searches. The search string must include at least one character that appears in one of the indexed search fields.
- </div></li></ul></div><div class="example" id="ex.user-search"><h6>Example 5.2. User Search for John</h6><div class="example-contents"><div class="para">
- The basic search looks for the string <span class="emphasis"><em>john</em></span>, which can appear in any of the search indexes.
- </div><pre class="screen">$ ipa user-find john
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="user-search-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="user-search-ui">5.6.1. With the UI</h3></div></div></div><div class="para">
+ Both user and group main pages have a search bar in the upper right corner of the task area. This search box searches against all of the fields listed in <a class="xref" href="searching.html#tab.search-attrs">Table 5.4, “Default Search Attributes”</a>. Type in any string, even a single letter, and click the magnifying glass icon. The UI filters the displayed list to match the search string.
+ </div><div class="figure" id="fig.user-search"><div class="figure-contents"><div class="mediaobject"><img src="images/user-search.png" width="444" alt="User Search Box" /></div></div><h6>Figure 5.2. User Search Box</h6></div><br class="figure-break" /></div><div class="section" id="user-search-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="user-search-cmd">5.6.2. With the Command Line</h3></div></div></div><div class="para">
+ Searches are simple:
+ </div><pre class="screen">$ ipa user-find|group-find <em class="replaceable"><code>string</code></em> <em class="replaceable"><code>options</code></em></pre><div class="para">
+ There are a few general rules with searches:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ If there is no <span class="emphasis"><em>string</em></span>, then the search returns every entry in FreeIPA, up to the search limit.
+ </div></li><li class="listitem"><div class="para">
+ With the command-line tools, only a single search string can be used for user and group searches. With the UI, multiple strings can be used.
+ </div></li><li class="listitem"><div class="para">
+ Searches are case insensitive.
+ </div></li><li class="listitem"><div class="para">
+ Search results are displayed alphabetically, with exact matches listed first, followed by partial matches.
+ </div></li><li class="listitem"><div class="para">
+ Wildcards cannot be used in searches. The search string must include at least one character that appears in one of the indexed search fields.
+ </div></li></ul></div><div class="example" id="ex.user-search"><h6>Example 5.2. User Search for John</h6><div class="example-contents"><div class="para">
+ The basic search looks for the string <span class="emphasis"><em>john</em></span>, which can appear in any of the search indexes.
+ </div><pre class="screen">$ ipa user-find john
---------------
2 users matched
@@ -72,8 +74,8 @@
----------------------------
Number of entries returned 2
----------------------------</pre><div class="para">
- A search can also accept options like <code class="option">--raw</code>. <code class="option">--raw</code> prints the LDAP attributes for the user account rather than the reading-friendly field names.
- </div><pre class="screen">$ ipa user-find john --raw
+ A search can also accept options like <code class="option">--raw</code>. <code class="option">--raw</code> prints the LDAP attributes for the user account rather than the reading-friendly field names.
+ </div><pre class="screen">$ ipa user-find john --raw
---------------
2 users matched
@@ -98,5 +100,5 @@ Number of entries returned 2
----------------------------
Number of entries returned 2
----------------------------</pre></div></div><br class="example-break" /><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- If the desired entry is not listed, it is possible that the search hit the preset search size limit before the entry was found. Change the search record or time limits, as in <a class="xref" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-limits">Section 5.3.3, “Setting Default Search Limits”</a>, to allow more entries to be returned.
- </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="user-groups.html"><strong>Prev</strong>5.6. Managing User Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="kerberos.html"><strong>Next</strong>Chapter 6. Identity: Managing the Kerberos Domain</a></li></ul></body></html>
+ If the desired entry is not listed, it is possible that the search hit the preset search size limit before the entry was found. Change the search record or time limits, as in <a class="xref" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-limits">Section 5.7.4, “Setting Default Search Limits”</a>, to allow more entries to be returned.
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="user-groups.html"><strong>Prev</strong>5.5. Managing User Groups</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Next</strong>5.7. Specifying Default User and Group Settings</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/self-service.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/self-service.html
index db0869a..bd33047 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/self-service.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/self-service.html
@@ -1,33 +1,48 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>14.3. Defining Self-Service Settings</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Drafts-Enterprise_Identity_Management_Guide-1-en-US-0.1-0.0.5" /><link rel="home" href="index.html" title="Enterprise Identity Management Guide" /><link rel="up" href="server-config.html" title="Chapter 14. Configuring the IPA Server" /><link rel="prev" href="creating-roles.html" title="14.2. Creating Roles" /><link rel="next" href="sect-Enterprise_Identity_Management_Guide-Configuring_IPA_Users-Specifying_Default_User_Settings.html" title="14.4. Specifying Default User Settings" /></head><body><p id="title"><a class="left" href="http://www.redhat.com"><img src
="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.redhat.com"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="creating-roles.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="sect-Enterprise_Identity_Management_Guide-Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Next</strong></a></li></ul><div class="section" id="self-service"><div class="titlepage"><div><div><h2 class="title" id="self-service">14.3. Defining Self-Service Settings</h2></div></div></div><div class="para">
- Self-service access control rules define the operations that an entity can perform on itself. These rules are attribute based; that is, they define what attributes can be modified for any particular entity. You can create self-service rules so that users can manage their own addresses, keep their contact details current, change their passwords, etc.
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>15.2. Defining Self-Service Settings</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-access-controls.html" title="Chapter 15. Configuration: Defining Access Control within FreeIPA" /><link rel="prev" href="server-access-controls.html" title="Chapter 15. Configuration: Defining Access Control within FreeIPA" /><link rel="next" href="delegating-users.html" title="15.3. Delegating Permissions over Users" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previou
s"><a accesskey="p" href="server-access-controls.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="delegating-users.html"><strong>Next</strong></a></li></ul><div class="section" id="self-service"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="self-service">15.2. Defining Self-Service Settings</h2></div></div></div><div class="para">
+ Self-service access control rules define the operations that an entity can perform on itself. These rules are define only what attributes a user (or other FreeIPA entity) can edit on their personal entries. a
</div><div class="para">
- Self-service rules are defined and managed by a number of sub-commands. Use the <code class="command">ipa help selfservice</code> command to display the list of available commands.
- </div><div class="para">
- The following example demonstrates how to add a new self-service rule that allows users to maintain their own name details. Note that access control rules whose names contain spaces or other special characters need to be quoted.
-<pre class="screen"><code class="command">$ ipa selfservice-add "Users can manage their own name details" --permissions=write \</code>
- <code class="command">--attrs=givenname,displayname,title,initials</code>
+ Two self-service rules exist by default:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A rule for editing some general attributes in the personal entry, including given name and surname, phone numbers, and addresses.
+ </div></li><li class="listitem"><div class="para">
+ A rule to edit user passwords, including two Samba passwords, the Kerberos password, and the general user password.
+ </div></li></ul></div><div class="section" id="self-service-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="self-service-ui">15.2.1. Creating Self-Service Rules from the Web UI</h3></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>IPA Server</strong></span> tab in the top menu, and select the <span class="guilabel"><strong>Self Service Permissions</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the list of self-service ACIs.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/selfservice-list.png" /></div></div></li><li class="listitem"><div class="para">
+ Enter the name of the rule in the pop-up window. Spaces are allowed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/selfservice-add.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Select the checkboxes by the attributes which this ACI will permit users to edit.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> button to save the new self-service ACI.
+ </div></li></ol></div></div><div class="section" id="self-service-cli"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="self-service-cli">15.2.2. Creating Self-Service Rules from the Command Line</h3></div></div></div><div class="para">
+ A new self-service rule can be added using the <code class="command">selfservice-add</code> command. There are two required options, <code class="option">--permissions</code> to set whether the ACI grants write, add, or delete permission and <code class="option">--attrs</code> to give the full list of attributes which this ACI grants permission to.
+ </div><pre class="screen">$ ipa selfservice-add "Users can manage their own name details" --permissions=write --attrs=givenname,displayname,title,initials
-----------------------------------------------------------
Added selfservice "Users can manage their own name details"
-----------------------------------------------------------
Self-service name: Users can manage their own name details
Permissions: write
- Attributes: givenname, displayname, title, initials</pre>
-
- </div><div class="para">
- You can use the <code class="command">ipa selfservice-show</code> command to display the newly-created rule.
- </div><div class="para">
- You can use the <code class="command">ipa selfservice-mod</code> command to manage your self-service rules. For example, you can add or remove various attributes from any of the defined rules, or change the permissions. For example, you can add telephone contact details to the rule we created in the previous example:
-<pre class="screen"><code class="command">$ ipa selfservice-mod "Users can manage their own name details" \</code>
- <code class="command">--attrs=givenname,displayname,title,initials,homephone,mobile,telephonenumber</code>
+ Attributes: givenname, displayname, title, initials</pre></div><div class="section" id="self-service-edit"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="self-service-edit">15.2.3. Editing Self-Service Rules</h3></div></div></div><div class="para">
+ In the self-service entry in the web UI, the only element that can be edited is the list of attributes that are included in the ACI. The checkboxes can be selected or deselected.
+ </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/selfservice-edit.png" width="444" alt="Self-Service Edit Page" /></div></div><h6>Figure 15.1. Self-Service Edit Page</h6></div><br class="figure-break" /><div class="para">
+ With the command line, self-service rules are edited using the <code class="command">ipa selfservice-mod</code> command. The <code class="option">--attrs</code> option overwrites whatever the previous list of supported attributes was, so always include the complete list of attributes along with any new attributes.
+ </div><pre class="screen">$ ipa selfservice-mod "Users can manage their own name details" --attrs=givenname,displayname,title,initials,surname
--------------------------------------------------------------
Modified selfservice "Users can manage their own name details"
--------------------------------------------------------------
- Self-service name: Users can manage their own name details
- Permissions: write
- Attributes: givenname, displayname, title, initials, homephone, mobile, telephonenumber</pre>
-
- </div><div class="important"><div class="admonition_header"><h2>Important</h2></div><div class="admonition"><div class="para">
- You need to include all of the required attributes when you modify a self-service rule, including existing ones.
- </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="creating-roles.html"><strong>Prev</strong>14.2. Creating Roles</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="sect-Enterprise_Identity_Management_Guide-Configuring_IPA_Users-Specifying_Default_User_Settings.html"><strong>Next</strong>14.4. Specifying Default User Settings</a></li></ul></body></html>
+Self-service name: Users can manage their own name details
+Permissions: write
+Attributes: givenname, displayname, title, initials</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ Include all of the attributes when modifying a self-service rule, including existing ones.
+ </div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="server-access-controls.html"><strong>Prev</strong>Chapter 15. Configuration: Defining Access Contro...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="delegating-users.html"><strong>Next</strong>15.3. Delegating Permissions over Users</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-access-controls.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-access-controls.html
new file mode 100644
index 0000000..2c4ebea
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-access-controls.html
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 15. Configuration: Defining Access Control within FreeIPA</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="hbac-testing.html" title="14.4. Testing Host-Based Access Control Rules" /><link rel="next" href="self-service.html" title="15.2. Defining Self-Service Settings" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="hbac-testing.html"><strong>Prev</strong></a></li><li class="n
ext"><a accesskey="n" href="self-service.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="server-access-controls" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 15. Configuration: Defining Access Control within FreeIPA</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="server-access-controls.html#about-ipa-access-controls">15.1. About Access Controls for FreeIPA Entries</a></span></dt><dt><span class="section"><a href="self-service.html">15.2. Defining Self-Service Settings</a></span></dt><dd><dl><dt><span class="section"><a href="self-service.html#self-service-ui">15.2.1. Creating Self-Service Rules from the Web UI</a></span></dt><dt><span class="section"><a href="self-service.html#self-service-cli">15.2.2. Creating Self-Service Rules from the Command Line</a></span></dt><dt><span class="section"><a href="self-service.html#self-service-edit">15.2.3. Editing Self-Service Rules</a></span><
/dt></dl></dd><dt><span class="section"><a href="delegating-users.html">15.3. Delegating Permissions over Users</a></span></dt><dd><dl><dt><span class="section"><a href="delegating-users.html#delegating-attributes-ui">15.3.1. Delegating Access to User Groups in the Web UI</a></span></dt><dt><span class="section"><a href="delegating-users.html#delegating-attributes-cli">15.3.2. Delegating Access to User Groups in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="defining-roles.html">15.4. Defining Role-Based Access Controls</a></span></dt><dd><dl><dt><span class="section"><a href="defining-roles.html#creating-roles">15.4.1. Creating Roles</a></span></dt><dt><span class="section"><a href="defining-roles.html#creating-perms">15.4.2. Creating New Permissions</a></span></dt><dt><span class="section"><a href="defining-roles.html#creating-priv">15.4.3. Creating New Privileges</a></span></dt></dl></dd></dl></div><div class="para">
+ Access control is a security system which defines who can access certain resources — from machines to services to entries — and what kinds of operations they are allowed to perform. FreeIPA provides several access control areas to make it very clear what kind of access is being granted and to whom it is granted. As part of this, FreeIPA draws a distinction between access controls to resources within the domain and access control to the FreeIPA configuration itself.
+ </div><div class="para">
+ This chapter details the different internal access control mechanisms that are available for users within FreeIPA to the FreeIPA server and other FreeIPA users.
+ </div><div class="section" id="about-ipa-access-controls"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-ipa-access-controls">15.1. About Access Controls for FreeIPA Entries</h2></div></div></div><div class="para">
+ Access control defines the rights or permissions users have been granted to perform operations on other users or objects.
+ </div><div class="para">
+ The FreeIPA access control structure is based on standard LDAP access controls. Access within the FreeIPA server is based on the FreeIPA users (who are stored in the backend Directory Server instance) who are allowed to access other FreeIPA entities (which are also stored as LDAP entries in the Directory Server instance).
+ </div><div class="para">
+ An access control rule has three parts:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Who can perform the operation</em></span>. This is the entity who is being granted permission to do something; this is the actor. In LDAP access control models, this is called the <span class="emphasis"><em>bind rule</em></span> because it defines who the user is (based on their bind information) and can optionally require other limits on the bind attempt, such as restricting attempts to a certain time of day or a certain machine.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>What can be accessed</em></span>. This defines the entry which the actor is allowed to perform operations on. This is the <span class="emphasis"><em>target</em></span> of the access control rule.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>What type of operation can be performed</em></span>. The last part is determining what kinds of actions the user is allowed to perform. The most common operations are add, delete, write, read, and search. In FreeIPA, all users are implicitly granted read and search rights to all entries in the FreeIPA domain. The only rights which can be granted are add, delete, and write.
+ </div></li></ul></div><div class="para">
+ When any operation is attempted, the first thing that the FreeIPA client does is send user credentials as part of the bind operation. The backend Directory Server checks those user credentials and then checks the user account to see if the user has permission to perform the requested operation.
+ </div><div class="para">
+ To make access control rules simple and clear to implement, FreeIPA divides access control definitions into three categories:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Self-service rules</em></span>, which define what operations a user can perform on his own personal entry. The access control type only allows write permissions to attributes within the entry; it does not allow add or delete operations for the entry itself.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Delegation rules</em></span>, which allow a specific user group to perform write (edit) operations on specific attributes for users in another user group. Like self-service rules, this form of access control rule is limited to editing the values of specific attributes; it does not grant the ability to add or remove whole entries or control over unspecified attributes.
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Role-based access control</em></span>, which creates special access control groups which are then granted much broader authority over all types of entities in the FreeIPA domain. Roles can be granted edit, add, and delete rights, meaning they can be granted complete control over entire entries, not just selected attributes. Special roles can be created to manage any type of entry, such as hosts, automount configuration, netgroups, DNS settings, and FreeIPA configuration.
+ </div></li></ul></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="hbac-testing.html"><strong>Prev</strong>14.4. Testing Host-Based Access Control Rules</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="self-service.html"><strong>Next</strong>15.2. Defining Self-Service Settings</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-config.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-config.html
index 1381361..bfb07aa 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-config.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-config.html
@@ -1,17 +1,181 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 13. Configuring the FreeIPA Server</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 16. Configuring the FreeIPA Server</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="example-configuring-sudo.html" title="12.4. An Example of Configuring sudo" /><link rel="next" href="managing-access-to-ipa.html" title="13.2. Defining Access Controls within FreeIPA" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="example-configuring-sudo.html"><strong>P
rev</strong></a></li><li class="next"><a accesskey="n" href="managing-access-to-ipa.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="server-config" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 13. Configuring the FreeIPA Server</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="server-config.html#default.conf">13.1. About default.conf</a></span></dt><dt><span class="section"><a href="managing-access-to-ipa.html">13.2. Defining Access Controls within FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="managing-access-to-ipa.html#Server_side_Access_Control">13.2.1. Server-side Access Control</a></span></dt><dt><span class="section"><a href="managing-access-to-ipa.html#creating-roles">13.2.2. Creating Roles</a></span></dt><dt><span class="section"><a href="managing-access-to-ipa.html#self-service">13.2.3. Defining Self-Service Settings</a></span></dt></dl></dd><dt><span class
="section"><a href="disabling-anon-binds.html">13.3. Disabling Anonymous Binds</a></span></dt><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html">13.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#id-ranges-at-install">13.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#Assigning_UIDs_and_GIDs-Adding_New_Ranges">13.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_Certificates_and_Certificate_Authorities.html">13.5. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="Using_OCSP.html">13.6. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="Using_OCSP.html#ocsp-interval">13.6.1. Changing the CRL Update Interval</a></span></dt><dt
><span class="section"><a href="Using_OCSP.html#ocsp-location">13.6.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-apache.html">13.7. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="ipa-cluster.html">13.8. Using FreeIPA in a Cluster</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-cluster.html#Implementing_IPA_in_a_Clustered_Environment-Configuring_Kerberos_Credentials_for_a_Clustered_Environment">13.8.1. Configuring Kerberos Credentials for a Clustered Environment</a></span></dt><dt><span class="section"><a href="ipa-cluster.html#Implementing_IPA_in_a_Clustered_Environment-Using_the_Same_Service_Principal_for_Multiple_Services">13.8.2. Using the Same Service Principal for Multiple Services</a></span></dt></dl></dd><dt><span class="section"><a href="logging.html">13.9. Checking FreeIPA Server Logs</a></span></dt><dt><span class="section"><a href="dns-mul
tihomed.html">13.10. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="promoting-replica.html">13.11. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dt><span class="section"><a href="upgrading-server.html">13.12. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></div><div class="section" id="default.conf"><div class="titlepage"><div><div><h2 class="title" id="default.conf">13.1. About default.conf</h2></div></div></div><div class="para">
- Certain global defaults — like the realm information, the LDAP configuration, and the CA settings — are stored in the <code class="filename">default.conf</code> file. This configuration file is used when the FreeIPA client and servers are running, to supply information as operations are performed.
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="defining-roles.html" title="15.4. Defining Role-Based Access Controls" /><link rel="next" href="disabling-anon-binds.html" title="16.2. Disabling Anonymous Binds" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-roles.html"><strong>Prev</strong></a></li><li class
="next"><a accesskey="n" href="disabling-anon-binds.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="server-config" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 16. Configuring the FreeIPA Server</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="server-config.html#ipa-files">16.1. FreeIPA Files and Logs</a></span></dt><dd><dl><dt><span class="section"><a href="server-config.html#file-ref">16.1.1. A Reference of FreeIPA Server Configuration Files and Directories</a></span></dt><dt><span class="section"><a href="server-config.html#default.conf">16.1.2. About default.conf and Context Configuration Files</a></span></dt><dt><span class="section"><a href="server-config.html#logging">16.1.3. Checking FreeIPA Server Logs</a></span></dt></dl></dd><dt><span class="section"><a href="disabling-anon-binds.html">16.2. Disabling Anonymous Binds</a></span></dt><dt><span class="section"><a href="Config
uring_Certificates_and_Certificate_Authorities.html">16.3. Configuring Alternate Certificate Authorities</a></span></dt><dt><span class="section"><a href="Using_OCSP.html">16.4. Configuring OCSP Responders</a></span></dt><dd><dl><dt><span class="section"><a href="Using_OCSP.html#ocsp-interval">16.4.1. Changing the CRL Update Interval</a></span></dt><dt><span class="section"><a href="Using_OCSP.html#ocsp-location">16.4.2. Changing the OCSP Responder Location</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-apache.html">16.5. Setting a FreeIPA Server as an Apache Virtual Host</a></span></dt><dt><span class="section"><a href="dns-multihomed.html">16.6. Setting DNS Entries for Multi-Homed Servers</a></span></dt><dt><span class="section"><a href="promoting-replica.html">16.7. Promoting a Read-Only Replica to a FreeIPA Server</a></span></dt><dd><dl><dt><span class="section"><a href="promoting-replica.html#promoting-pki">16.7.1. Promoting a Replica with a Dogtag Cert
ificate System CA</a></span></dt><dt><span class="section"><a href="promoting-replica.html#promoting-selfsigned">16.7.2. Promoting a Replica with a Self-Signed CA</a></span></dt></dl></dd><dt><span class="section"><a href="upgrading-server.html">16.8. Testing Before Upgrading the FreeIPA Server</a></span></dt></dl></div><div class="para">
+ Most configuration in FreeIPA is done by adding and editing resources and users within the domain. The FreeIPA servers and backend services are configured with default settings that are scalable and applicable in most environments.
+ </div><div class="para">
+ There are some configuration areas where the FreeIPA server configuration can be tweaked to improve security or performance in certain situations.
+ </div><div class="para">
+ This chapter covers information about the FreeIPA configuration, including files and logs used by the FreeIPA server, and procedures for updating the FreeIPA server configuration itself.
+ </div><div class="section" id="ipa-files"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="ipa-files">16.1. FreeIPA Files and Logs</h2></div></div></div><div class="para">
+ FreeIPA is a unifying framework that combines a lot of disparate Linux services into a single management context. However, the underlying technologies — like Kerberos, DNS, 389 Directory Server, and Dogtag Certificate System — retain their own configuration files and log files.
</div><div class="para">
- The parameters in the <code class="filename">default.conf</code> file are simple <span class="emphasis"><em>attribute=value</em></span> pairs. The attributes are case-insensitive and order-insensitive.
- </div><pre class="programlisting"><span class="perl_String">[global]</span><span class="perl_String"></span>
+ This section covers the directories, files, and logs used specifically by FreeIPA. For more information about the configuration files or logs for a specific server used within FreeIPA, see the product documentation.
+ </div><div class="section" id="file-ref"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="file-ref">16.1.1. A Reference of FreeIPA Server Configuration Files and Directories</h3></div></div></div><div class="table" id="tab.file-ref"><h6>Table 16.1. FreeIPA Server Configuration Files and Directories</h6><div class="table-contents"><table summary="FreeIPA Server Configuration Files and Directories" border="1"><colgroup><col class="col1" width="50%" /><col class="col2" width="50%" /></colgroup><thead><tr><th>
+ Directory or File
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td colspan="2">
+ <span class="bold bold"><strong>Server Configuration</strong></span>
+ </td></tr><tr><td>
+ /etc/ipa
+ </td><td>
+ The main FreeIPA server configuration directory.
+ </td></tr><tr><td>
+ /etc/ipa/default.conf
+ </td><td>
+ The primary configuration file for the FreeIPA server.
+ </td></tr><tr><td>
+ /etc/ipa/ca.crt
+ </td><td>
+ The CA certificate issued by the FreeIPA server's CA.
+ </td></tr><tr><td>
+ ~/.ipa/
+ </td><td>
+ A user-specific FreeIPA directory that is created on the local system in the system user's home directory the first time the user runs a FreeIPA command.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>FreeIPA Logs</strong></span>
+ </td></tr><tr><td>
+ ~/.ipa/log/cli.log
+ </td><td>
+ The log file for all XML-RPC calls and responses by the FreeIPA command-line tools. This is created in the home directory for the <span class="emphasis"><em>system user</em></span> who runs the tools, who may have a different name than the FreeIPA user.
+ </td></tr><tr><td>
+ /var/log/ipaclient-install.log
+ </td><td>
+ The installation log for the client service.
+ </td></tr><tr><td>
+ /var/log/ipaserver-install.log
+ </td><td>
+ The installation log for the FreeIPA server.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>System Services</strong></span>
+ </td></tr><tr><td>
+ /etc/rc.d/init.d/ipa
+ </td><td>
+ The FreeIPA server init script.
+ </td></tr><tr><td>
+ /etc/rc.d/init.d/ipa_kpasswd
+ </td><td>
+ The init script for the FreeIPA control daemon for Kerberos passwords.
+ </td></tr><tr><td>
+ /var/run/ipa_kpasswd.pid
+ </td><td>
+ The PID file for the Kerberos password daemon used by the FreeIPA service.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Web UI</strong></span>
+ </td></tr><tr><td>
+ /etc/ipa/html
+ </td><td>
+ A symlink directory in the main configuration directory for the HTML files used by the FreeIPA web UI.
+ </td></tr><tr><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/etc/httpd/conf.d/ipa.conf</td></tr><tr><td>/etc/httpd/conf.d/ipa-rewrite.conf</td></tr></table>
+
+ </td><td>
+ The configuration files used by the Apache host for the web UI application.
+ </td></tr><tr><td>
+ /etc/httpd/conf/ipa.keytab
+ </td><td>
+ The keytab file used by the web UI service.
+ </td></tr><tr><td>
+ /usr/share/ipa
+ </td><td>
+ The main directory for all of the HTML files, scripts, and stylesheets used by the web UI.
+ </td></tr><tr><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/usr/share/ipa/ipa-rewrite.conf</td></tr><tr><td>/usr/share/ipa/ipa.conf</td></tr></table>
+
+ </td><td>
+ The configuration files used by the Apache host for the web UI application.
+ </td></tr><tr><td>
+ /usr/share/ipa/html
+ </td><td>
+ Contains the HTML files, JavaScript files, and stylesheets used by the web UI.
+ </td></tr><tr><td>
+ /usr/share/ipa/ipaclient
+ </td><td>
+ Contains the JavaScript files used to access Firefox's autoconfiguration feature and set up the Firefox browser to work in the FreeIPA Kerberos realm.
+ </td></tr><tr><td>
+ /usr/share/ipa/migration
+ </td><td>
+ Contains HTML pages, stylesheets, and Python scripts used for running the FreeIPA server in NIS migration mode.
+ </td></tr><tr><td>
+ /usr/share/ipa/ui
+ </td><td>
+ Contains all of the scripts used by the UI to perform FreeIPA operations.
+ </td></tr><tr><td>
+ /var/log/httpd
+ </td><td>
+ The log files for the Apache web server.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Kerberos</strong></span>
+ </td></tr><tr><td>
+ /etc/krb5.conf
+ </td><td>
+ The Kerberos service configuration file.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>SSSD</strong></span>
+ </td></tr><tr><td>
+ /etc/sssd/sssd.api.d/sssd-ipa.conf
+ </td><td>
+ The configuration file used to identify the FreeIPA server, FreeIPA Directory Server, and other FreeIPA services used by SSSD.
+ </td></tr><tr><td>
+ /var/log/sssd
+ </td><td>
+ The log files for SSSD.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>389 Directory Server</strong></span>
+ </td></tr><tr><td>
+ /var/lib/dirsrv/slapd-<span class="emphasis"><em>REALM_NAME</em></span>
+ </td><td>
+ All of the schema, configuration, and database files associated with the Directory Server instance used by the FreeIPA server.
+ </td></tr><tr><td>
+ /var/log/dirsrv/slapd-<span class="emphasis"><em>REALM_NAME</em></span>
+ </td><td>
+ Log files associated with the Directory Server instance used by the FreeIPA server.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Dogtag Certificate System</strong></span>
+ </td></tr><tr><td>
+ /etc/pki-ca
+ </td><td>
+ The main directory for the FreeIPA CA instance.
+ </td></tr><tr><td>
+ /etc/pki-ca/conf/CS.cfg
+ </td><td>
+ The main configuration file for the the FreeIPA CA instance.
+ </td></tr><tr><td>
+ /var/lib/dirsrv/slapd-PKI-IPA/
+ </td><td>
+ All of the schema, configuration, and database files associated with the Directory Server instance used by the FreeIPA CA.
+ </td></tr><tr><td>
+ /var/log/dirsrv/slapd-PKI-IPA/
+ </td><td>
+ Log files associated with the Directory Server instance used by the FreeIPA CA.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>Cache Files</strong></span>
+ </td></tr><tr><td>
+ /var/cache/ipa
+ </td><td>
+ Cache files for the FreeIPA server and the FreeIPA Kerberos password daemon.
+ </td></tr><tr><td colspan="2">
+ <span class="bold bold"><strong>System Backups</strong></span>
+ </td></tr><tr><td>
+ /var/lib/ipa/sysrestore
+ </td><td>
+ Contains backups of all of the system files and scripts that were reconfigured when the FreeIPA server was installed. These include the original <code class="filename">.conf</code> files for NSS, Kerberos (both <code class="filename">krb5.conf</code> and <code class="filename">kdc.conf</code>), and NTP.
+ </td></tr><tr><td>
+ /var/lib/ipa-client/sysrestore
+ </td><td>
+ Contains backups of all of the system files and scripts that were reconfigured when the FreeIPA client was installed. Commonly, this is the <code class="filename">sssd.conf</code> file for SSSD authentication services.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="default.conf"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="default.conf">16.1.2. About default.conf and Context Configuration Files</h3></div></div></div><div class="para">
+ Certain global defaults — like the realm information, the LDAP configuration, and the CA settings — are stored in the <code class="filename">default.conf</code> file. This configuration file is referenced when the FreeIPA client and servers start and every time the <code class="command">ipa</code> command is run to supply information as operations are performed.
+ </div><div class="para">
+ The parameters in the <code class="filename">default.conf</code> file are simple <span class="emphasis"><em>attribute=value</em></span> pairs. The attributes are case-insensitive and order-insensitive.
+ </div><pre class="programlisting"><span class="perl_String">[global]</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_Float">basedn=</span><span class="perl_DataType">dc</span><span class="perl_String">=example,</span><span class="perl_DataType">dc</span><span class="perl_String">=com</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_Float">realm=</span><span class="perl_String">EXAMPLE.COM</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_Reserved">domain</span><span class="perl_String">=example.com</span><span class="perl_String"></span>
@@ -20,5 +184,208 @@
<span class="perl_String"></span><span class="perl_String">enable_</span><span class="perl_Float">ra=</span><span class="perl_String">True</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_String">ra_</span><span class="perl_Float">plugin=</span><span class="perl_String">dogtag</span><span class="perl_String"></span>
<span class="perl_String"></span><span class="perl_Float">mode=</span><span class="perl_String">production</span></pre><div class="para">
- When adding more configuration attributes or overriding the global values, users can create an optional configuration file in <code class="filename">~/.ipa/default.conf</code>. This optional file is merged with <code class="filename">efault.conf</code> and used by the local FreeIPA services.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="example-configuring-sudo.html"><strong>Prev</strong>12.4. An Example of Configuring sudo</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-access-to-ipa.html"><strong>Next</strong>13.2. Defining Access Controls within FreeIPA</a></li></ul></body></html>
+ When adding more configuration attributes or overriding the global values, users can create additional <span class="emphasis"><em>context</em></span> configuration files. A <code class="filename">server.conf</code> and <code class="filename">cli.conf</code> file can be created to create different options when the FreeIPA server is started or when the <code class="command">ipa</code> command is run, respectively. The FreeIPA server checks the <code class="filename">server.conf</code> and <code class="filename">cli.conf</code> files first, and then checks the <code class="filename">default.conf</code> file.
+ </div><div class="para">
+ Any configuration files in the <code class="filename">/etc/ipa</code> directory apply to all users for the system. Users can set individual overrides by creating <code class="filename">default.conf</code>, <code class="filename">server.conf</code>, or <code class="filename">cli.conf</code> files in their local FreeIPA directory, <code class="filename">~/.ipa/</code>. This optional file is merged with <code class="filename">default.conf</code> and used by the local FreeIPA services.
+ </div></div><div class="section" id="logging"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="logging">16.1.3. Checking FreeIPA Server Logs</h3></div></div></div><div class="para">
+ FreeIPA unifies several different Linux services, so it relies on those services' native logs for tracking and debugging those services.
+ </div><div class="para">
+ The other services (Apache, 389 Directory Server, and Dogtag Certificate System) all have detailed logs and log levels. See the specific server documentation for more information on return codes, log formats, and log levels.
+ </div><div class="table" id="tab.ipa-logs"><h6>Table 16.2. FreeIPA Log Files</h6><div class="table-contents"><table summary="FreeIPA Log Files" border="1"><colgroup><col width="25%" /><col width="25%" /><col width="25%" /><col width="25%" /></colgroup><thead><tr><th>
+ Service
+ </th><th>
+ Log File
+ </th><th>
+ Description
+ </th><th>
+ Additional Information
+ </th></tr></thead><tbody><tr><td>
+ FreeIPA server
+ </td><td>
+ /var/log/ipaserver-install.log
+ </td><td>
+ Server installation log
+ </td><td>
+
+ </td></tr><tr><td>
+ FreeIPA server
+ </td><td>
+ ~/.ipa/log/cli.log
+ </td><td>
+ Command-line tool log
+ </td><td>
+
+ </td></tr><tr><td>
+ FreeIPA client
+ </td><td>
+ /var/log/ipaclient-install.log
+ </td><td>
+ Client installation log
+ </td><td>
+
+ </td></tr><tr><td>
+ Apache server
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/httpd/access</td></tr><tr><td>/var/log/httpd/error</td></tr></table>
+
+ </td><td>
+ These are standard access and error logs for Apache servers. These logs relate to the performance of the web UI.
+ </td><td>
+ <a href="http://httpd.apache.org/docs/current/logs.html">Apache log chapter</a>
+ </td></tr><tr><td>
+ Dogtag Certificate System
+ </td><td>
+ /var/log/pki-ca-install.log
+ </td><td>
+ The installation log for the FreeIPA CA.
+ </td><td>
+
+ </td></tr><tr><td>
+ Dogtag Certificate System
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/pki-ca/debug</td></tr><tr><td>/var/log/pki-ca/system</td></tr><tr><td>/var/log/pki-ca/transactions</td></tr><tr><td>/var/log/pki-ca/signedAudit</td></tr></table>
+
+ </td><td>
+ These logs mainly relate to certificate operations. In FreeIPA, this is used for service principals, hosts, and other entities which use certificates.
+ </td><td>
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/Logs.html">Logging chapter</a>
+ </td></tr><tr><td>
+ 389 Directory Server
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/access</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/audit</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/errors</td></tr></table>
+
+ </td><td>
+ The access and error logs both contain detailed information about attempted access and operations for the domain Directory Server instance. The error log setting can be changed to provide very detailed output.
+ </td><td>
+ The access log is buffered, so the server only writes to the log every 30 seconds, by default.
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Monitoring_Server_and_Database_Activity.html">Monitoring servers and databases</a>
+ </div></li><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Configuration_and_Command-Line_Tool_Reference/logs-reference.html">Log entries explained</a>
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ 389 Directory Server
+ </td><td>
+ <table border="0" summary="Simple list" class="simplelist"><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/access</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/audit</td></tr><tr><td>/var/log/dirsrv/slapd-<span class="emphasis"><em>REALM</em></span>/errors</td></tr></table>
+
+ </td><td>
+ This directory server instance is used by the FreeIPA CA to store certificate information. Most operational data here will be related to server-replica interactions.
+ </td><td>
+ The access log is buffered, so the server only writes to the log every 30 seconds, by default.
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Monitoring_Server_and_Database_Activity.html">Monitoring servers and databases</a>
+ </div></li><li class="listitem"><div class="para">
+ <a href="http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Configuration_and_Command-Line_Tool_Reference/logs-reference.html">Log entries explained</a>
+ </div></li></ul></div>
+
+ </td></tr><tr><td>
+ Kerberos
+ </td><td>
+ /var/log/krb5libs.log
+ </td><td>
+ This is the primary log file for Kerberos connections.
+ </td><td>
+ This location is configured in the <code class="filename">krb5.conf</code> file, so it could be different on some systems.
+ </td></tr><tr><td>
+ Kerberos
+ </td><td>
+ /var/log/krb5kdc.log
+ </td><td>
+ This is the primary log file for the Kerberos KDC server.
+ </td><td>
+ This location is configured in the <code class="filename">krb5.conf</code> file, so it could be different on some systems.
+ </td></tr><tr><td>
+ Kerberos
+ </td><td>
+ /var/log/kadmind.log
+ </td><td>
+ This is the primary log file for the Kerberos administration server.
+ </td><td>
+ This location is configured in the <code class="filename">krb5.conf</code> file, so it could be different on some systems.
+ </td></tr><tr><td>
+ DNS
+ </td><td>
+ /var/log/messages
+ </td><td>
+ DNS error messages are included with other system messages.
+ </td><td>
+ DNS logging is <span class="emphasis"><em>not</em></span> enabled by default. DNS logging is enabled by running the <code class="command">querylog</code> command:
+<pre class="screen">/usr/sbin/rndc querylog</pre>
+ This begins writing log messages to the system's <code class="filename">/var/log/messages</code> file. To turn off logging, run the <code class="command">querylog</code> command again.
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="server-debug"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="server-debug">16.1.3.1. Enabling Server Debug Logging</h4></div></div></div><div class="para">
+ Debug logging for the FreeIPA server is set in the <code class="filename">server.conf</code> file.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Edit or create the <code class="filename">server.conf</code> file.
+ </div><pre class="screen">vim server.conf</pre></li><li class="listitem"><div class="para">
+ Add the <code class="command">debug</code> line and set its value to true.
+ </div><pre class="programlisting">[global]
+debug=True</pre></li><li class="listitem"><div class="para">
+ Restart the Apache daemon to load the changes.
+ </div><pre class="screen">service httpd restart</pre></li></ol></div></div><div class="section" id="Server-Increasing_Client_Debugging_Output"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="Server-Increasing_Client_Debugging_Output">16.1.3.2. Debugging Command-Line Operations</h4></div></div></div><div class="para">
+ Any command-line operation with the <code class="command">ipa</code> command can return debug information by using the <code class="option">-v</code> option. For example:
+ </div><pre class="screen">$ ipa <strong class="userinput"><code>-v</code></strong> user-show admin
+ipa: INFO: trying https://ipaserver.example.com/ipa/xml
+First name: John
+Last name: Smythe
+User login [jsmythe]:
+ipa: INFO: Forwarding 'user_add' to server u'https://ipaserver.example.com/ipa/xml'
+--------------------
+Added user "jsmythe"
+--------------------
+ User login: jsmythe
+ First name: John
+ Last name: Smythe
+ Full name: John Smythe
+ Display name: John Smythe
+ Initials: JS
+ Home directory: /home/jsmythe
+ GECOS field: John Smythe
+ Login shell: /bin/sh
+ Kerberos principal: jsmythe at EXAMPLE.COM
+ UID: 1966800003
+ GID: 1966800003
+ Keytab: False
+ Password: False
+
+</pre><div class="para">
+ Using the option twice, <code class="option">-vv</code>, displays the XML-RPC exchange:
+<pre class="screen">$ ipa -vv user-add
+
+ipa: INFO: trying https://ipaserver.example.com/ipa/xml
+First name: Jane
+Last name: Russell
+User login [jrussell]:
+ipa: INFO: Forwarding 'user_add' to server u'https://ipaserver.example.com/ipa/xml'
+send: u'POST /ipa/xml HTTP/1.0\r\nHost: ipaserver.example.com\r\nAccept-Language: en-us\r\nAuthorization: negotiate YIIFgQYJKoZIhvcSAQICAQBuggVwMIIFbKADAgEFoQMCAQ6iBwMFACAAAACjggGHYYIBgzCCAX+gAwIBBaEZGxdSSFRTLkVORy5CT1MuUkVESEFULkNPTaI5MDegAwIBA6EwMC4bBEhUVFAbJmRlbGwtcGUxODUwLTAxLnJodHMuZW5nLmJvcy5yZWRoYXQuY29to4IBIDCCARygAwIBEqEDAgECooIBDgSCAQpV2YEWv03X+SENdUBfOhMFGc3Fvnd51nELV0rIB1tfGVjpNlkuQxXKSfFKVD3vyAUqkii255T0mnXyTwayE93W1U4sOshetmG50zeU4KDmhuupzQZSCb5xB0KPU4HMDvP1UnDFJUGCk9tcqDJiYE+lJrEcz8H+Vxvvl+nP6yIdUQKqoEuNhJaLWIiT8ieAzk8zvmDlDzpFYtInGWe9D5ko1Bb7Npu0SEpdVJB2gnB5vszCIdLlzHM4JUqX8p21AZV0UYA6QZOWX9OXhqHdElKcuHCN2s9FBRoFYK83gf1voS7xSFlzZaFsEGHNmdA0qXbzREKGqUr8fmWmNvBGpDiR2ILQep09lL56JqSCA8owggPGoAMCARKiggO9BIIDuarbB67zjmBu9Ax2K+0klSD99pNv97h9yxol8c6NGLB4CmE8Mo39rL4MMXHeOS0OCbn+TD97XVGLu+cgkfVcuIG4PMMBoajuSnPmIf7qDvfa8IYDFlDDnRB7I//IXtCc/Z4rBbaxk0SMIRLrsKf5wha7aWtN1JbizBMQw+J0UlN8JjsWxu0Ls75hBtIDbPf3fva3vwBf7kTBChBsheewSAlck9qUglyNxAODgFVvRrXbfkw51Uo++9qHnhh+zFSWepfv7
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
DsAEx0Zs696Rg0fWZy079A\r\nUser-Agent: xmlrpclib.py/1.0.1 (by www.pythonware.com)\r\nContent-Type: text/xml\r\nContent-Length: 1240\r\n\r\n'
+send: "<?xml version='1.0' encoding='UTF-8'?>\n<methodCall>\n<methodName>user_add</methodName>\n<params>\n<param>\n<value><array><data>\n<value><string>jrussell</string></value>\n</data></array></value>\n</param>\n<param>\n<value><struct>\n<member>\n<name>all</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>displayname</name>\n<value><string>Jane Russell</string></value>\n</member>\n<member>\n<name>cn</name>\n<value><string>Jane Russell</string></value>\n</member>\n<member>\n<name>noprivate</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>uidnumber</name>\n<value><int>999</int></value&
gt;\n</member>\n<member>\n<name>raw</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>version</name>\n<value><string>2.11</string></value>\n</member>\n<member>\n<name>gecos</name>\n<value><string>Jane Russell</string></value>\n</member>\n<member>\n<name>sn</name>\n<value><string>Russell</string></value>\n</member>\n<member>\n<name>krbprincipalname</name>\n<value><string>jrussell at EXAMPLE.COM</string></value>\n</member>\n<member>\n<name>givenname</name>\n<value><string>Jane</string></value>\n</member>\n<member>\n<name>initials</name>\n<value><string>JR</string></value>\n</member>\n</struct></value>\n</par
am>\n</params>\n</methodCall>\n"
+reply: 'HTTP/1.1 200 OK\r\n'
+header: Date: Thu, 15 Sep 2011 00:50:39 GMT
+header: Server: Apache/2.2.15 (Red Hat)
+header: WWW-Authenticate: Negotiate YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvVl5x6Zt9PbWNzvPEWkdu+3PTCq/ZVKjGHM+1zDBz81GL/f+/Pr75zTuveLYn9de0C3k27vz96fn2HQsy9qVH7sfqn0RWGQWzl+kDkuD6bJ/Dp/mpJvicW5gSkCSH6/UCNuE4I0xqwabLIz8MM/5o
+header: Connection: close
+header: Content-Type: text/xml; charset=utf-8
+body: "<?xml version='1.0' encoding='UTF-8'?>\n<methodResponse>\n<params>\n<param>\n<value><struct>\n<member>\n<name>result</name>\n<value><struct>\n<member>\n<name>dn</name>\n<value><string>uid=jrussell,cn=users,cn=accounts,dc=example,dc=com</string></value>\n</member>\n<member>\n<name>has_keytab</name>\n<value><boolean>0</boolean></value>\n</member>\n<member>\n<name>displayname</name>\n<value><array><data>\n<value><string>Jane Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>uid</name>\n<value><array><data>\n<value><string>jrussell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>objectcl
ass</name>\n<value><array><data>\n<value><string>top</string></value>\n<value><string>person</string></value>\n<value><string>organizationalperson</string></value>\n<value><string>inetorgperson</string></value>\n<value><string>inetuser</string></value>\n<value><string>posixaccount</string></value>\n<value><string>krbprincipalaux</string></value>\n<value><string>krbticketpolicyaux</string></value>\n<"
+body: 'value><string>ipaobject</string></value>\n</data></array></value>\n</member>\n<member>\n<name>loginshell</name>\n<value><array><data>\n<value><string>/bin/sh</string></value>\n</data></array></value>\n</member>\n<member>\n<name>uidnumber</name>\n<value><array><data>\n<value><string>1966800004</string></value>\n</data></array></value>\n</member>\n<member>\n<name>initials</name>\n<value><array><data>\n<value><string>JR</string></value>\n</data></array></value>\n</member>\n<member>\n<name>gidnumber</name>\n<value><array><data>\n<value><string>1966800004</string></value>\n</data></array></value>\n</me
mber>\n<member>\n<name>gecos</name>\n<value><array><data>\n<value><string>Jane Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>sn</name>\n<value><array><data>\n<value><string>Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>homedirectory</name>\n<value><array><data>\n<value><string>/home/jrussell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>has_password</name>\n<value><boolean>0</'
+body: 'boolean></value>\n</member>\n<member>\n<name>krbprincipalname</name>\n<value><array><data>\n<value><string>jrussell at EXAMPLE.COM</string></value>\n</data></array></value>\n</member>\n<member>\n<name>givenname</name>\n<value><array><data>\n<value><string>Jane</string></value>\n</data></array></value>\n</member>\n<member>\n<name>cn</name>\n<value><array><data>\n<value><string>Jane Russell</string></value>\n</data></array></value>\n</member>\n<member>\n<name>ipauniqueid</name>\n<value><array><data>\n<value><string>bba27e6e-df34-11e0-a5f4-001143d2c060</string></value>\n</data></array></value>\n</member>\n</struct></valu
e>\n</member>\n<member>\n<name>value</name>\n<value><string>jrussell</string></value>\n</member>\n<member>\n<name>summary</name>\n<value><string>Added user "jrussell"</string></value>\n</member>\n</struct></value>\n</param>\n</params>\n</methodResponse>\n'
+---------------------
+Added user "jrussell"
+---------------------
+ User login: jrussell
+ First name: Jane
+ Last name: Russell
+ Full name: Jane Russell
+ Display name: Jane Russell
+ Initials: JR
+ Home directory: /home/jrussell
+ GECOS field: Jane Russell
+ Login shell: /bin/sh
+ Kerberos principal: jrussell at EXAMPLE.COM
+ UID: 1966800004
+ GID: 1966800004
+ Keytab: False
+ Password: False</pre>
+
+ </div><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
+ The <code class="option">-v</code> and <code class="option">-vv</code> options are <span class="emphasis"><em>global</em></span> options and must be used before the subcommand when running <code class="command">ipa</code>.
+ </div></div></div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="defining-roles.html"><strong>Prev</strong>15.4. Defining Role-Based Access Controls</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="disabling-anon-binds.html"><strong>Next</strong>16.2. Disabling Anonymous Binds</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-tools.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-tools.html
index 3619d96..f622854 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-tools.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/server-tools.html
@@ -1,21 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.5. Server Scripts</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>B.5. Server Scripts</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="ipa-command-host.html" title="B.4. ipa Host Commands" /><link rel="next" href="client-tools.html" title="B.6. Client Scripts" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-command-host.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n"
href="client-tools.html"><strong>Next</strong></a></li></ul><div class="section" id="server-tools"><div class="titlepage"><div><div><h2 class="title" id="server-tools">B.5. Server Scripts</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="tools-reference.html" title="Appendix B. FreeIPA Tools Reference" /><link rel="prev" href="ipa-command-host.html" title="B.4. ipa Host Commands" /><link rel="next" href="client-tools.html" title="B.6. Client Scripts" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-command-host.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n
" href="client-tools.html"><strong>Next</strong></a></li></ul><div class="section" id="server-tools"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="server-tools">B.5. Server Scripts</h2></div></div></div><div class="para">
These are scripts that are used to manage the FreeIPA server configuration. These scripts do not manage FreeIPA domain entries; they manage the configuration of the server itself. This means that these scripts are run as system administrative users rather than domain administrative users.
- </div><div class="section" id="ipa-replica-install"><div class="titlepage"><div><div><h3 class="title" id="ipa-replica-install">B.5.1. ipa-replica-install</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-replica-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-replica-install">B.5.1. ipa-replica-install</h3></div></div></div><div class="para">
Uses a configuration file based on an existing FreeIPA server to create a replica, or copy, of that server. Once the replica is created, it functions as an equal participant and mirror of the original FreeIPA server within the FreeIPA domain. Any changes made on the server or any other replica are automatically propagated over to the other replicas and server.
</div><div class="para">
A replica is created using a file that contains all of the configuration for the FreeIPA server. This initial file is created by running the <code class="command">ipa-replica-prepare</code> on the FreeIPA server. Then the file is copied over to the replica machine, and the <code class="command">ipa-replica-install</code> script is run.
</div><div class="para">
As with the server and client install scripts, any replica arguments which require a parameter value (such as the Directory Manager password) will be prompted for during installation, unless the argument is passed with the command. Parameters with Boolean values (like configuring DNS) will assume that the default value should be used unless the argument is passed with the command.
- </div><div class="section" id="ipa-replica-install-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-install-location">B.5.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-replica-install-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-install-location">B.5.1.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -27,11 +27,11 @@
Package
</td><td>
ipa-server
- </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-install-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-install-syntax">B.5.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-install</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-install-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-install-syntax">B.5.1.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-install</code> [
<em class="replaceable"><code>options</code></em>
]
<em class="replaceable"><code>/path/to/replica_file</code></em>
- </p></div></div><div class="section" id="ipa-replica-install-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-install-options">B.5.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ </p></div></div><div class="section" id="ipa-replica-install-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-install-options">B.5.1.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
Short Parameter
</th><th>
Long Parameter
@@ -112,7 +112,7 @@
Disables checks for the replica's connection to the FreeIPA domain. If this is not used, then the default value is true, which checks that the replica can connect to the Kerberos realm.
</div>
<div class="para">
- This can be useful if the replica is unable to reach the Directory Server or the CA used by the original FreeIPA server, such as the server is offline or the server's firewall is blocking access on the required ports (<a class="xref" href="installing-ipa.html#prereq-ports">Section 2.1.3.3, “System Ports”</a>).
+ This can be useful if the replica is unable to reach the Directory Server or the CA used by the original FreeIPA server, such as the server is offline or the server's firewall is blocking access on the required ports (<a class="xref" href="installing-ipa.html#prereq-ports">Section 2.1.3.4, “System Ports”</a>).
</div>
</td></tr><tr><td>
@@ -121,7 +121,7 @@
--unattended
</td><td>
Disables user prompts so that the replica installation script runs without user interaction.
- </td></tr></tbody></table></div></div></div><div class="section" id="ipa-replica-prepare"><div class="titlepage"><div><div><h3 class="title" id="ipa-replica-prepare">B.5.2. ipa-replica-prepare</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div></div><div class="section" id="ipa-replica-prepare"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-replica-prepare">B.5.2. ipa-replica-prepare</h3></div></div></div><div class="para">
Creates a file that can be used to create a copy, or <span class="emphasis"><em>replica</em></span>, of the FreeIPA server.
</div><div class="para">
Each replica initialization file is unique to the replica machine because the configuration is based, in part, on the IP address and hostname of the replica machine. This host-specific configuration is especially critical for setting up services like Kerberos which use SSL because SSL certificates are created based on the hostname.
@@ -131,7 +131,7 @@
Once the configuration file is created on the server using the <code class="command">ipa-replica-prepare</code> command, then the replica file is copied over to the replica machine and the replica is configured using the <code class="command">ipa-replica-prepare</code> command.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
If DNS is managed by FreeIPA, then use either the <code class="option">--ip-address</code> option or configure DNS forwarders and allow reverse DNS lookups.
- </div></div></div><div class="section" id="ipa-replica-prepare-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-prepare-location">B.5.2.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div></div></div><div class="section" id="ipa-replica-prepare-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-prepare-location">B.5.2.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -143,7 +143,7 @@
Package
</td><td>
ipa-server
- </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-prepare-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-prepare-syntax">B.5.2.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-prepare</code> [
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-replica-prepare-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-prepare-syntax">B.5.2.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-replica-prepare</code> [
--dirsrv_pkcs12=<em class="replaceable"><code>file</code></em>
] [
--http_pkcs12=<em class="replaceable"><code>file</code></em>
@@ -155,7 +155,7 @@
--ip-address=<em class="replaceable"><code>ipAddress</code></em>
]
<em class="replaceable"><code>hostname</code></em>
- </p></div></div><div class="section" id="ipa-replica-prepare-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-replica-prepare-options">B.5.2.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </p></div></div><div class="section" id="ipa-replica-prepare-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-replica-prepare-options">B.5.2.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Parameter
</th><th>
Description
@@ -179,7 +179,7 @@
--ip-address
</td><td>
Gives the IP address of the replica server. Using this option automatically adds A and PTR records for the replica host to the FreeIPA DNS configuration.
- </td></tr></tbody></table></div></div></div><div class="section" id="ipa-server-install"><div class="titlepage"><div><div><h3 class="title" id="ipa-server-install">B.5.3. ipa-server-install</h3></div></div></div><div class="para">
+ </td></tr></tbody></table></div></div></div><div class="section" id="ipa-server-install"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-server-install">B.5.3. ipa-server-install</h3></div></div></div><div class="para">
Configures all of the services used by the FreeIPA server for the FreeIPA domain:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Dogtag Certificate System, for issuing server certificates
@@ -199,7 +199,7 @@
This script can be run interactively, which prompts for many of the server values, or information can be passed directly to the script so that the server can be configured without human intervention.
</div><div class="para">
The FreeIPA server configuration is very flexible. The setup script allows some customization to services like DNS, NTP, certificate issuance, and access control in FreeIPA so that the server can be suited to the network environment.
- </div><div class="section" id="ipa-server-install-location"><div class="titlepage"><div><div><h4 class="title" id="ipa-server-install-location">B.5.3.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="section" id="ipa-server-install-location"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-server-install-location">B.5.3.1. Location</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Location
@@ -211,7 +211,7 @@
Package
</td><td>
ipa-server
- </td></tr></tbody></table></div></div><div class="section" id="ipa-server-install-syntax"><div class="titlepage"><div><div><h4 class="title" id="ipa-server-install-syntax">B.5.3.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-server-install</code>
+ </td></tr></tbody></table></div></div><div class="section" id="ipa-server-install-syntax"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-server-install-syntax">B.5.3.2. Syntax</h4></div></div></div><div class="cmdsynopsis"><p><code class="command">ipa-server-install</code>
-a <em class="replaceable"><code>ipa_admin_password</code></em>
--hostname=<em class="replaceable"><code>hostname</code></em>
@@ -232,13 +232,17 @@
] [
--subject=<em class="replaceable"><code>subject_DN</code></em>
] [
+ --setup-dns
+ ] [
--forwarder=<em class="replaceable"><code>forwarder</code></em>
] [
--no-forwarders
] [
--no-reverse
] [
- --setup-dns
+ --zone-refresh=<em class="replaceable"><code>seconds</code></em>
+ ] [
+ --zone-notif
] [
--zonemgr=<em class="replaceable"><code>email_address</code></em>
] [
@@ -265,14 +269,14 @@
--help
] [
--version
- ]</p></div></div><div class="section" id="ipa-server-install-options"><div class="titlepage"><div><div><h4 class="title" id="ipa-server-install-options">B.5.3.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
+ ]</p></div></div><div class="section" id="ipa-server-install-options"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="ipa-server-install-options">B.5.3.3. Options</h4></div></div></div><div class="informaltable"><table border="1"><colgroup><col class="col1" width="33%" /><col class="col3" width="33%" /><col class="col2" width="33%" /></colgroup><thead><tr><th>
Argument
</th><th>
Alternate Argument
</th><th>
Description
</th></tr></thead><tbody><tr><td colspan="3">
- <span class="bold bold"><strong>Required Options</strong></span><sup>[<a id="id3405414" href="#ftn.id3405414" class="footnote">a</a>]</sup>
+ <span class="bold bold"><strong>Required Options</strong></span><sup>[<a id="id885014" href="#ftn.id885014" class="footnote">a</a>]</sup>
</td></tr><tr><td>
-a <span class="emphasis"><em>ipa_admin_password</em></span>
</td><td>
@@ -362,6 +366,18 @@
</td><td>
Tells the installation script to set up a DNS service within the FreeIPA domain. Using an integrated DNS service is optional, so if this option is not passed with the installation script, then no DNS is configured.
</td></tr><tr><td>
+ --zone-refresh=<span class="emphasis"><em>seconds</em></span>
+ </td><td>
+
+ </td><td>
+ Sets whether the FreeIPA server should periodically check to see when new DNS zones are added and update its DNS server accrordingly. The polling interval is set in seconds.
+ </td></tr><tr><td>
+ --zone-notif
+ </td><td>
+
+ </td><td>
+ Opens a persistent search with its Directory Server and captures any new zone changes immediately..
+ </td></tr><tr><td>
--zonemgr=<span class="emphasis"><em>email_address</em></span>
</td><td>
@@ -453,6 +469,6 @@
</td><td>
Prints the version number of the <code class="command">ipa-server-install</code> command.
- </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><p><sup>[<a id="ftn.id3405414" href="#id3405414" class="para">a</a>] </sup>
+ </td></tr></tbody><tbody class="footnotes"><tr><td colspan="3"><div class="footnote"><div class="para"><sup>[<a id="ftn.id885014" href="#id885014" class="para">a</a>] </sup>
The installation script will prompt for these options if they are not passed with the script.
- </p></div></td></tr></tbody></table></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-command-host.html"><strong>Prev</strong>B.4. ipa Host Commands</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="client-tools.html"><strong>Next</strong>B.6. Client Scripts</a></li></ul></body></html>
+ </div></div></td></tr></tbody></table></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-command-host.html"><strong>Prev</strong>B.4. ipa Host Commands</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="client-tools.html"><strong>Next</strong>B.6. Client Scripts</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/service-interactions.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/service-interactions.html
index 2054181..a8a21d0 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/service-interactions.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/service-interactions.html
@@ -1,32 +1,32 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>1.3. Relationships Between Servers and Clients</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>1.3. Relationships Between Servers and Clients</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /><link rel="prev" href="ipa-linux-services.html" title="1.2. Bringing Linux Services Together" /><link rel="next" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-linux-services.html"><strong>Prev</strong></a><
/li><li class="next"><a accesskey="n" href="installing-ipa.html"><strong>Next</strong></a></li></ul><div class="section" id="service-interactions"><div class="titlepage"><div><div><h2 class="title" id="service-interactions">1.3. Relationships Between Servers and Clients</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="introduction.html" title="Chapter 1. Introduction to FreeIPA" /><link rel="prev" href="ipa-linux-services.html" title="1.2. Bringing Linux Services Together" /><link rel="next" href="installing-ipa.html" title="Chapter 2. Installing a FreeIPA Server" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="ipa-linux-services.html"><strong>Prev</strong></a>
</li><li class="next"><a accesskey="n" href="installing-ipa.html"><strong>Next</strong></a></li></ul><div class="section" id="service-interactions"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="service-interactions">1.3. Relationships Between Servers and Clients</h2></div></div></div><div class="para">
FreeIPA itself defines a <span class="emphasis"><em>domain</em></span>, a group of machines that have shared configuration, policies, and identity stores. This shared configuration allows the machines (and users) within the domain to be aware of each other and operate together. This awareness can be used to enable cross-platform compatibility, like unifying Windows and Linux systems, or to enable infrastructure-wide single sign-on.
- </div><div class="section" id="ipa-servers-replicas"><div class="titlepage"><div><div><h3 class="title" id="ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</h3></div></div></div><div class="para">
+ </div><div class="section" id="ipa-servers-replicas"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-servers-replicas">1.3.1. About FreeIPA Servers and Replicas</h3></div></div></div><div class="para">
FreeIPA works by having identified servers which are the master stores of information for user and machine identities and domain-wide policies. These servers also host domain-related services such as Kerberos and DNS. The server essentially is a central repository of identity and policy information. This information is sent routinely to the clients.
</div><div class="para">
Servers can be cloned and their information mirrored onto subordinate FreeIPA servers called <span class="emphasis"><em>replicas</em></span>. FreeIPA servers are the data masters; replicas contain copies of that information, which is synchronized between the internal 389 Directory Server and Certificate System databases through mutual <span class="emphasis"><em>replication agreements</em></span>.
- </div><div class="figure" id="fig.replica1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-replica.png" width="600" alt="Server and Replica Interactions" /></div></div><h6>Figure 1.2. Server and Replica Interactions</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.replica1"><div class="figure-contents"><div class="mediaobject"><img src="images/ipa-replica.png" width="444" alt="Server and Replica Interactions" /></div></div><h6>Figure 1.2. Server and Replica Interactions</h6></div><br class="figure-break" /><div class="para">
Replicas can communicate with clients, the same as servers, so replicas provide a means to balance the loads on servers while still minimizing the number of data masters and centralizing configuration in the servers.
- </div></div><div class="section" id="ipa-clients"><div class="titlepage"><div><div><h3 class="title" id="ipa-clients">1.3.2. About FreeIPA Clients</h3></div></div></div><div class="para">
+ </div></div><div class="section" id="ipa-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="ipa-clients">1.3.2. About FreeIPA Clients</h3></div></div></div><div class="para">
A client is simply any machine which is configured to operate within the FreeIPA domain, using its Kerberos and DNS services, NTP settings, and certificate services. That's an important distinction: a client does not require a daemon or (necessarily) an installed product. It requires only system configurations which direct it to use FreeIPA services.
</div><div class="para">
For Fedora systems, a certain number of platform tools are available for FreeIPA to use, such as SSSD. These are <span class="emphasis"><em>FreeIPA-enabled platform applications</em></span>, which is simply a way of saying that they are aspects of the underlying platform that work with FreeIPA services. Other tools, like certain PAM and NSS modules and FreeIPA command-line utilities, are provided as FreeIPA-specific packages that must be installed on the machine. These are <span class="emphasis"><em>FreeIPA-related components</em></span>.
- </div><div class="figure" id="fig.serverclient1"><div class="figure-contents"><div class="mediaobject"><img src="images/ServerClient1.png" width="600" alt="Server and Client Interactions" /></div></div><h6>Figure 1.3. Server and Client Interactions</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.serverclient1"><div class="figure-contents"><div class="mediaobject"><img src="images/ServerClient1.png" width="444" alt="Server and Client Interactions" /></div></div><h6>Figure 1.3. Server and Client Interactions</h6></div><br class="figure-break" /><div class="para">
FreeIPA uses the local storage (cache) on a client to improve performance in a few ways:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Store FreeIPA information when the machine is offline.
</div></li><li class="listitem"><div class="para">
Keep information active beyond its normal timeout period of the client cannot access the central server. The cache is persistent even after rebooting the machine.
</div></li><li class="listitem"><div class="para">
- Reduce the roundtrip time of requests by checking information locally before looking at the server.
+ Reduce the round-trip time of requests by checking information locally before looking at the server.
</div></li></ul></div><div class="para">
Information is stored either in an LDB database (similar to LDAP) or the local filesystem (as XML files), depending on the <span class="emphasis"><em>type</em></span> of information.
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
@@ -35,7 +35,7 @@
Policy information is more static than identity information, and it can included configuration for SELinux or sudo. These policies are set globally on the server and then are propagated to the clients. On the client, the policy information is stored in the filesystem in XML files which can be downloaded and converted into a native file for whatever service is being managed.
</div></li></ul></div><div class="para">
A specific set of services on the FreeIPA server interact with a subset of services and modules on the FreeIPA client. A client is any machine (a <span class="emphasis"><em>host</em></span>) which can retrieve a keytab or certificates from the FreeIPA domain.
- </div><div class="figure" id="fig.IPA_Architecture"><div class="figure-contents"><div class="mediaobject"><img src="images/IPA_arch.png" width="600" alt="Interactions Between FreeIPA Services" /></div></div><h6>Figure 1.4. Interactions Between FreeIPA Services</h6></div><br class="figure-break" /><div class="para">
+ </div><div class="figure" id="fig.IPA_Architecture"><div class="figure-contents"><div class="mediaobject"><img src="images/IPA_arch.png" width="444" alt="Interactions Between FreeIPA Services" /></div></div><h6>Figure 1.4. Interactions Between FreeIPA Services</h6></div><br class="figure-break" /><div class="para">
<a class="xref" href="service-interactions.html#fig.IPA_Architecture">Figure 1.4, “Interactions Between FreeIPA Services”</a> shows that Fedora uses two native daemons to interact with the FreeIPA server:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
SSSD provides the user authentication for the machine and enforces host-based access control rules.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/setting-up-clients.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/setting-up-clients.html
index 6315d82..12eb6ff 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/setting-up-clients.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/setting-up-clients.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 3. Setting up Systems as FreeIPA Clients</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 3. Setting up Systems as FreeIPA Clients</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Uninstalling_IPA_Servers.html" title="2.5. Uninstalling FreeIPA Servers and Replicas" /><link rel="next" href="Installing_the_IPA_Client_on_Linux.html" title="3.2. Configuring a Fedora System as a FreeIPA Client" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Uninstallin
g_IPA_Servers.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Installing_the_IPA_Client_on_Linux.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="setting-up-clients" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 3. Setting up Systems as FreeIPA Clients</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="setting-up-clients.html#what-happens-clients">3.1. What Happens in Client Setup</a></span></dt><dt><span class="section"><a href="Installing_the_IPA_Client_on_Linux.html">3.2. Configuring a Fedora System as a FreeIPA Client</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html">3.3. Configuring a Solaris System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</a></span></dt><dt><span c
lass="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html">3.4. Configuring an HP-UX System as a FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_
PAM">3.4.4. Configuring PAM</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#hp-test">3.4.7. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html">3.5. Configuring an AIX System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2.
Configuring the AIX Client</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configurin
g_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#testing-config-on-mac">3.6.5. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="troubleshooting-client-install.html">3.7. Troubleshooting Client Installations</a></span></dt><dt><span class="section"><a href="uninstalling-clients.html">3.8. Uninstalling a FreeIPA Client</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Uninstalling_IPA_Servers.html" title="2.5. Uninstalling FreeIPA Servers and Replicas" /><link rel="next" href="Installing_the_IPA_Client_on_Linux.html" title="3.2. Configuring a Fedora System as a FreeIPA Client" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Uninstalli
ng_IPA_Servers.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Installing_the_IPA_Client_on_Linux.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="setting-up-clients" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 3. Setting up Systems as FreeIPA Clients</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="setting-up-clients.html#what-happens-clients">3.1. What Happens in Client Setup</a></span></dt><dt><span class="section"><a href="Installing_the_IPA_Client_on_Linux.html">3.2. Configuring a Fedora System as a FreeIPA Client</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html">3.3. Configuring a Solaris System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris_10">3.3.1. Configuring Solaris 10</a></span></dt><dt><span
class="section"><a href="Configuring_an_IPA_Client_on_Solaris.html#Configuring_an_IPA_Client_on_Solaris-Configuring_an_IPA_Client_on_Solaris_9">3.3.2. Configuring Solaris 9</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html">3.4. Configuring an HP-UX System as a FreeIPA</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_NTP">3.4.1. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_LDAP_Authentication">3.4.2. Configuring LDAP Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring_Kerberos">3.4.3. Configuring Kerberos</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_Kerberos_and_PAM-Configuring
_PAM">3.4.4. Configuring PAM</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_SSH">3.4.5. Configuring SSH</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#Configuring_an_IPA_Client_on_HP_UX-Configuring_Access_Control">3.4.6. Configuring Access Control</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_HP_UX.html#hp-test">3.4.7. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html">3.5. Configuring an AIX System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Prerequisites">3.5.1. Prerequisites</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_AIX.html#Configuring_an_IPA_Client_on_AIX-Configuring_Client_Authentication">3.5.2
. Configuring the AIX Client</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html">3.6. Configuring a Macintosh OS X System as a FreeIPA Client</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_Kerberos_Authentication">3.6.1. Configuring Kerberos Authentication</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_LDAP_Authorization">3.6.2. Configuring LDAP Authorization</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuring_an_IPA_Client_on_Macintosh_OS_X-Configuring_the_LDAP_Authorization_Options">3.6.3. Configuring the LDAP Authorization Options</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#Configuri
ng_an_IPA_Client_on_Macintosh_OS_X-Configuring_NTP">3.6.4. Configuring NTP</a></span></dt><dt><span class="section"><a href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html#testing-config-on-mac">3.6.5. Testing the Configuration</a></span></dt></dl></dd><dt><span class="section"><a href="troubleshooting-client-install.html">3.7. Troubleshooting Client Installations</a></span></dt><dt><span class="section"><a href="uninstalling-clients.html">3.8. Uninstalling a FreeIPA Client</a></span></dt></dl></div><div class="para">
A <span class="emphasis"><em>client</em></span> is any system which is a member of the FreeIPA domain. While this is frequently a Fedora system (and FreeIPA has special tools to make configuring Fedora clients very simple), machines with other operating systems can also be added to the FreeIPA domain.
</div><div class="para">
One important aspect of a FreeIPA client is that <span class="emphasis"><em>only</em></span> the system configuration determines whether the system is part of the domain. (The configuration includes things like belonging to the Kerberos domain, DNS domain, and having the proper authentication and certificate setup.) FreeIPA does not require any sort of agent or daemon running on a client.
@@ -15,7 +15,7 @@
This chapter explains how to configure a system to join a FreeIPA domain.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
Clients can only be configured after at least one FreeIPA server has been installed.
- </div></div></div><div class="section" id="what-happens-clients"><div class="titlepage"><div><div><h2 class="title" id="what-happens-clients">3.1. What Happens in Client Setup</h2></div></div></div><div class="para">
+ </div></div></div><div class="section" id="what-happens-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="what-happens-clients">3.1. What Happens in Client Setup</h2></div></div></div><div class="para">
Whether the client configuration is performed automatically on Fedora systems using the client setup script or manually on other systems, the general process of configuring a machine to serve as a FreeIPA client is mostly the same, with slight variation depending on the platform:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
Retrieve the CA certificate for the FreeIPA CA.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/sudo.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/sudo.html
index b62a2d6..f0ba6ac 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/sudo.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/sudo.html
@@ -1,20 +1,20 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 12. Policy: Using sudo</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 13. Policy: Using sudo</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="configuring-host-access.html" title="11.7. Configuring Host-Based Access Control" /><link rel="next" href="defining-sudocmds.html" title="12.2. Setting up sudo Commands and Command Groups" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-host-access.html"><stro
ng>Prev</strong></a></li><li class="next"><a accesskey="n" href="defining-sudocmds.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="sudo" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 12. Policy: Using sudo</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="sudo.html#about-sudo">12.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="defining-sudocmds.html">12.2. Setting up sudo Commands and Command Groups</a></span></dt><dt><span class="section"><a href="defining-sudorules.html">12.3. Defining sudo Rules</a></span></dt><dt><span class="section"><a href="example-configuring-sudo.html">12.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">12.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="example-con
figuring-sudo.html#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">12.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Kerberos_Errors.html" title="12.6. Troubleshooting Kerberos Errors" /><link rel="next" href="defining-sudocmds.html" title="13.2. Setting up sudo Commands and Command Groups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Kerberos_Errors.html"><strong>Prev</strong></a><
/li><li class="next"><a accesskey="n" href="defining-sudocmds.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="sudo" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 13. Policy: Using sudo</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="sudo.html#about-sudo">13.1. About sudo and IPA</a></span></dt><dt><span class="section"><a href="defining-sudocmds.html">13.2. Setting up sudo Commands and Command Groups</a></span></dt><dd><dl><dt><span class="section"><a href="defining-sudocmds.html#adding-sudo-cmds">13.2.1. Adding sudo Commands</a></span></dt><dt><span class="section"><a href="defining-sudocmds.html#adding-sudo-cmdgrp">13.2.2. Adding sudo Command Groups</a></span></dt></dl></dd><dt><span class="section"><a href="defining-sudorules.html">13.3. Defining sudo Rules</a></span></dt><dd><dl><dt><span class="section"><a href="defining-sudorules.html#sudo-rules-ui">13.3.1. Defining sudo Rules
in the Web UI</a></span></dt><dt><span class="section"><a href="defining-sudorules.html#sudo-rules-cmd">13.3.2. Defining sudo Rules in the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="example-configuring-sudo.html">13.4. An Example of Configuring sudo</a></span></dt><dd><dl><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Server_Configuration_for_sudo_Rules">13.4.1. Server Configuration for sudo Rules</a></span></dt><dt><span class="section"><a href="example-configuring-sudo.html#Setting_up_sudo_Rules-Client_Configuration_for_sudo_Rules">13.4.2. Client Configuration for sudo Rules</a></span></dt></dl></dd></dl></div><div class="para">
FreeIPA provides a mechanism for predictably and consistently apply <code class="command">sudo</code> policies across the FreeIPA domain. The <code class="command">sudo</code> policies apply to domain users and domain hosts.
- </div><div class="section" id="about-sudo"><div class="titlepage"><div><div><h2 class="title" id="about-sudo">12.1. About sudo and IPA</h2></div></div></div><div class="para">
+ </div><div class="section" id="about-sudo"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-sudo">13.1. About sudo and IPA</h2></div></div></div><div class="para">
The <code class="command">sudo</code> command allows a system administrator to delegate authority to specific users to run specific commands as root. <code class="command">sudo</code> provides an audit trail of the commands and their arguments, so access can be tracked.
</div><div class="para">
<code class="command">sudo</code> uses a local configuration file, <code class="filename">/etc/sudoers</code>, which defines the commands and users with sudo access. While this file can be shared among machines, there's no native way to distribute <code class="command">sudo</code> configuration files among machines.
</div><div class="para">
- FreeIPA uses its centralized LDAP database to contain the <code class="command">sudo</code> configuration, which makes it globally available to all domain hosts. FreeIPA also has a specialized LDAP schema specifically for <code class="command">sudo</code> entries that allows a lot more flexible and simpler configuration. This schema adds two key features:
+ FreeIPA uses its centralized LDAP database to contain the <code class="command">sudo</code> configuration, which makes it globally available to all domain hosts. FreeIPA also has a specialized LDAP schema for <code class="command">sudo</code> entries that allows a lot more flexible and simpler configuration. This schema adds two key features:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
The FreeIPA schema supports host groups in addition to netgroups for <code class="command">sudo</code>, while <code class="command">sudo</code> only supports netgroups.
</div><div class="para">
@@ -27,4 +27,4 @@
FreeIPA also defines a default <code class="command">sudo</code> user, <code class="systemitem">uid=sudo,cn=sysaccounts,cn=etc,$SUFFIX</code>, which can be set in the LDAP/<code class="command">sudo</code> configuration file, <code class="filename">/etc/nss_ldap.conf</code>.
</div><div class="para">
Both <code class="command">sudo</code> and FreeIPA support user groups as part of the <code class="command">sudo</code> configuration. User groups can be either POSIX or Unix groups. Creating POSIX groups can create some access issues because any users in the group inherit POSIX rights from the group. Having the choice between POSIX and Unix groups allows administrators the choice in group formatting and to avoid problems with inherited permissions or GID information.
- </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="configuring-host-access.html"><strong>Prev</strong>11.7. Configuring Host-Based Access Control</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="defining-sudocmds.html"><strong>Next</strong>12.2. Setting up sudo Commands and Command Groups</a></li></ul></body></html>
+ </div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Kerberos_Errors.html"><strong>Prev</strong>12.6. Troubleshooting Kerberos Errors</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="defining-sudocmds.html"><strong>Next</strong>13.2. Setting up sudo Commands and Command Groups</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/tools-reference.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/tools-reference.html
index 543430e..b7228b2 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/tools-reference.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/tools-reference.html
@@ -1,14 +1,14 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Appendix B. FreeIPA Tools Reference</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Appendix B. FreeIPA Tools Reference</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html" title="Appendix A. Frequently Asked Questions" /><link rel="next" href="ipa.html" title="B.2. ipa" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="chap-Enterprise_Identity_Management_Guide-Frequen
tly_Asked_Questions.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ipa.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="appendix" id="tools-reference" lang="en-US"><div class="titlepage"><div><div><h1 class="title">FreeIPA Tools Reference</h1></div></div></div><div class="toc"><dl><dt><span class="section"><a href="tools-reference.html#special-chars">B.1. Using Special Characters</a></span></dt><dt><span class="section"><a href="ipa.html">B.2. ipa</a></span></dt><dd><dl><dt><span class="section"><a href="ipa.html#ipa-location">B.2.1. Location</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-syntax">B.2.2. Syntax</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-topics">B.2.3. Help Topics</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-global-options">B.2.4. Global Options</a></span></dt><dt><span class="section"><a href="ipa.html#ipa-return-codes">B.2.5. Return Codes</a></span></dt><d
t><span class="section"><a href="ipa.html#ipa-commands">B.2.6. Commands</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-dns.html">B.3. ipa DNS Commands</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-dns.html#ipa-command-dnszone-add">B.3.1. ipa dnszone-add</a></span></dt></dl></dd><dt><span class="section"><a href="ipa-command-host.html">B.4. ipa Host Commands</a></span></dt><dd><dl><dt><span class="section"><a href="ipa-command-host.html#ipa-host-add">B.4.1. ipa host-add</a></span></dt></dl></dd><dt><span class="section"><a href="server-tools.html">B.5. Server Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="server-tools.html#ipa-replica-install">B.5.1. ipa-replica-install</a></span></dt><dt><span class="section"><a href="server-tools.html#ipa-replica-prepare">B.5.2. ipa-replica-prepare</a></span></dt><dt><span class="section"><a href="server-tools.html#ipa-server-install">B.5.3. ipa-server-install</a></span></dt></dl></dd><dt>
<span class="section"><a href="client-tools.html">B.6. Client Scripts</a></span></dt><dd><dl><dt><span class="section"><a href="client-tools.html#ipa-client-install">B.6.1. ipa-client-install</a></span></dt></dl></dd></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html" title="Appendix A. Frequently Asked Questions" /><link rel="next" href="ipa.html" title="B.2. ipa" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="chap-Enterprise_Identity_Management_Guide-Freque
ntly_Asked_Questions.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="ipa.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="appendix" id="tools-reference" lang="en-US"><div class="titlepage"><div><div><h1 class="title">FreeIPA Tools Reference</h1></div></div></div><div class="para">
FreeIPA provides a variety of command-line tools that can be used to manage FreeIPA servers and clients, allowing an extensive range of functionality that can be managed remotely, scheduled, or scripted.
- </div><div class="section" id="special-chars"><div class="titlepage"><div><div><h2 class="title" id="special-chars">B.1. Using Special Characters</h2></div></div></div><div class="para">
+ </div><div class="section" id="special-chars"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="special-chars">B.1. Using Special Characters</h2></div></div></div><div class="para">
The FreeIPA command-line tools are run as any other utilities in a shell. If there are special characters in the command — such as angle brackets (> and <), ampersands (&), asterisks (*), and pipes (|) — the characters must be escaped. Otherwise, the command fails because the shell cannot properly parse the unescaped characters.
</div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="chap-Enterprise_Identity_Management_Guide-Frequently_Asked_Questions.html"><strong>Prev</strong>Appendix A. Frequently Asked Questions</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="ipa.html"><strong>Next</strong>B.2. ipa</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/troubleshooting-client-install.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/troubleshooting-client-install.html
index 3c79668..4344a04 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/troubleshooting-client-install.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/troubleshooting-client-install.html
@@ -1,19 +1,21 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.7. Troubleshooting Client Installations</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.7. Troubleshooting Client Installations</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html" title="3.6. Configuring a Macintosh OS X System as a FreeIPA Client" /><link rel="next" href="uninstalling-clients.html" title="3.8. Uninstalling a FreeIPA Client" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a ac
cesskey="p" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="uninstalling-clients.html"><strong>Next</strong></a></li></ul><div class="section" id="troubleshooting-client-install"><div class="titlepage"><div><div><h2 class="title" id="troubleshooting-client-install">3.7. Troubleshooting Client Installations</h2></div></div></div><a id="id3264400" class="indexterm"></a><a id="id3264415" class="indexterm"></a><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html" title="3.6. Configuring a Macintosh OS X System as a FreeIPA Client" /><link rel="next" href="uninstalling-clients.html" title="3.8. Uninstalling a FreeIPA Client" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a a
ccesskey="p" href="Configuring_an_IPA_Client_on_Macintosh_OS_X.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="uninstalling-clients.html"><strong>Next</strong></a></li></ul><div class="section" id="troubleshooting-client-install"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="troubleshooting-client-install">3.7. Troubleshooting Client Installations</h2></div></div></div><a id="id790849" class="indexterm"></a><a id="id790865" class="indexterm"></a><div class="para">
+ The client installation log is located in <code class="filename">/var/log/ipaclient-install.log</code>. The FreeIPA logs, both for the server and client and for FreeIPA-associated services, are covered in <a class="xref" href="server-config.html#logging">Section 16.1.3, “Checking FreeIPA Server Logs”</a>.
+ </div><div class="para">
These are some issues and workarounds for client installation problems.
- </div><div class="formalpara"><h5 class="formalpara" id="id3264436">The client can't resolve reverse hostnames when using an external DNS.</h5>
+ </div><div class="formalpara"><h5 class="formalpara" id="id790897">The client can't resolve reverse hostnames when using an external DNS.</h5>
While FreeIPA can host its own DNS server as part of the domain services, it can also use external DNS name server. However, because of some of the limitations of reverse DNS, there can be problems with resolving reverse lookups if the external DNS is listed in the client's <code class="filename">/etc/resolv.conf</code> file or if there are other resources on the network with SRV records, like Active Directory.
</div><div class="para">
The problem is that the external DNS name server returns the wrong hostname for the FreeIPA server.
- </div><a id="id3142433" class="indexterm"></a><a id="id3142445" class="indexterm"></a><div class="para">
+ </div><a id="id790921" class="indexterm"></a><a id="id658272" class="indexterm"></a><div class="para">
One way this exhibits is errors with finding the FreeIPA server in the Kerberos database:
</div><pre class="screen">Jun 30 11:11:48 server1 krb5kdc[1279](info): AS_REQ (4 etypes {18 17 16 23}) 192.168.60.135: NEEDED_PREAUTH: admin EXAMPLE COM for krbtgt/EXAMPLE COM EXAMPLE COM, Additional pre-authentication required
Jun 30 11:11:48 server1 krb5kdc[1279](info): AS_REQ (4 etypes {18 17 16 23}) 192.168.60.135: ISSUE: authtime 1309425108, etypes {rep=18 tkt=18 ses=18}, admin EXAMPLE COM for krbtgt/EXAMPLE COM EXAMPLE COM
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/uninstalling-clients.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/uninstalling-clients.html
index 0c6e4e7..c0f2271 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/uninstalling-clients.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/uninstalling-clients.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.8. Uninstalling a FreeIPA Client</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>3.8. Uninstalling a FreeIPA Client</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="troubleshooting-client-install.html" title="3.7. Troubleshooting Client Installations" /><link rel="next" href="basic-usage.html" title="Chapter 4. Basic Usage" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="troubleshooting-client-install.htm
l"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="basic-usage.html"><strong>Next</strong></a></li></ul><div class="section" id="uninstalling-clients"><div class="titlepage"><div><div><h2 class="title" id="uninstalling-clients">3.8. Uninstalling a FreeIPA Client</h2></div></div></div><a id="id3142527" class="indexterm"></a><a id="id3142538" class="indexterm"></a><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="setting-up-clients.html" title="Chapter 3. Setting up Systems as FreeIPA Clients" /><link rel="prev" href="troubleshooting-client-install.html" title="3.7. Troubleshooting Client Installations" /><link rel="next" href="basic-usage.html" title="Chapter 4. Basic Usage" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="troubleshooting-client-install.ht
ml"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="basic-usage.html"><strong>Next</strong></a></li></ul><div class="section" id="uninstalling-clients"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="uninstalling-clients">3.8. Uninstalling a FreeIPA Client</h2></div></div></div><a id="id658346" class="indexterm"></a><a id="id658358" class="indexterm"></a><div class="para">
For Fedora clients, the <code class="command">ipa-client-install</code> utility can be used to uninstall the client and remove it from the FreeIPA domain. To remove the client, use the <code class="option">--uninstall</code> option.
</div><pre class="programlisting"><span class="perl_Comment"># ipa-client-install --uninstall</span></pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
There is an uninstall option with the <code class="command">ipa-join</code> command. This is called by <code class="command">ipa-client-install --uninstall</code> as part of the uninstallation process. However, while the <code class="command">ipa-join</code> option removes the client from the domain, it does not actually uninstall the client or properly remove all of the FreeIPA-related configuration. Do not run <code class="command">ipa-join -u</code> to attempt to uninstall the FreeIPA client. The only way to uninstall a client completely is to use <code class="command">ipa-client-install --uninstall</code>.
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/upgrading-server.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/upgrading-server.html
index 4dd0519..f4b8254 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/upgrading-server.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/upgrading-server.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>13.12. Testing Before Upgrading the FreeIPA Server</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>16.8. Testing Before Upgrading the FreeIPA Server</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 13. Configuring the FreeIPA Server" /><link rel="prev" href="promoting-replica.html" title="13.11. Promoting a Read-Only Replica to a FreeIPA Server" /><link rel="next" href="managing-clients.html" title="Chapter 14. Managing Client Machines in the FreeIPA Domain" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="pr
omoting-replica.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="managing-clients.html"><strong>Next</strong></a></li></ul><div class="section" id="upgrading-server"><div class="titlepage"><div><div><h2 class="title" id="upgrading-server">13.12. Testing Before Upgrading the FreeIPA Server</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="server-config.html" title="Chapter 16. Configuring the FreeIPA Server" /><link rel="prev" href="promoting-replica.html" title="16.7. Promoting a Read-Only Replica to a FreeIPA Server" /><link rel="next" href="Migrating_from_a_Directory_Server_to_IPA.html" title="Chapter 17. Migrating from a 389 Directory Server to FreeIPA" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"
><a accesskey="p" href="promoting-replica.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Next</strong></a></li></ul><div class="section" id="upgrading-server"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="upgrading-server">16.8. Testing Before Upgrading the FreeIPA Server</h2></div></div></div><div class="para">
It can be beneficial, and safer, to test newer versions of FreeIPA before upgrading production systems. There is a relatively simple way to do this, by creating a sacrificial replica (which is a read-write server) and testing on that system.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Set up a replica based on one of the production servers, with the same version of FreeIPA as is running in production, as described in <a class="xref" href="Setting_up_IPA_Replicas.html">Section 2.4, “Setting up FreeIPA Replicas”</a>. For this example, this is called Test Replica. Make sure that Test Replica can successfully connect to the <span class="emphasis"><em>production</em></span> server and domain.
@@ -18,9 +18,9 @@
</div></li><li class="listitem"><div class="para">
Reconnect Test Replica to the network.
</div></li><li class="listitem"><div class="para">
- Upgrade the packages on Test Replica using <code class="command">yum</code>. For example:
+ Upgrade the packages on Test Replica using <code class="command">yum</code> or whatever package update tool is appropriate for your system. For example:
</div><pre class="programlisting"><span class="perl_Comment"># yum update freeipa*</span></pre></li><li class="listitem"><div class="para">
Test common things on Test Replica, like getting Kerberos credentials, opening the server UI, and running commands.
</div></li></ol></div><div class="para">
If the update affects the <span class="package">ds-replication</span> package or features which are used for replication between servers and replicas, then create two test replicas which communicate with each other (such as, make a test replica off a production server and then a replica off the test replica). Make sure that the two replicas can communicate with each other before and after updating the FreeIPA packages.
- </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="promoting-replica.html"><strong>Prev</strong>13.11. Promoting a Read-Only Replica to a FreeIPA...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-clients.html"><strong>Next</strong>Chapter 14. Managing Client Machines in the FreeI...</a></li></ul></body></html>
+ </div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="promoting-replica.html"><strong>Prev</strong>16.7. Promoting a Read-Only Replica to a FreeIPA ...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="Migrating_from_a_Directory_Server_to_IPA.html"><strong>Next</strong>Chapter 17. Migrating from a 389 Directory Server...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-groups.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-groups.html
index 4c3758e..49abb4e 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-groups.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-groups.html
@@ -1,13 +1,13 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.6. Managing User Groups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.5. Managing User Groups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="user-pwdpolicy.html" title="5.5. Defining Password Policies" /><link rel="next" href="searching.html" title="5.7. Searching for Users and Groups" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="user-pwdpolicy.html"><strong>Prev</strong></a></li><li class
="next"><a accesskey="n" href="searching.html"><strong>Next</strong></a></li></ul><div class="section" id="user-groups"><div class="titlepage"><div><div><h2 class="title" id="user-groups">5.6. Managing User Groups</h2></div></div></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="Managing-Unique_UID_and_GID_Attributes.html" title="5.4. Managing Unique UID and GID Number Assignments" /><link rel="next" href="searching.html" title="5.6. Searching for Users and Groups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing-Unique
_UID_and_GID_Attributes.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="searching.html"><strong>Next</strong></a></li></ul><div class="section" id="user-groups"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="user-groups">5.5. Managing User Groups</h2></div></div></div><div class="para">
User groups are a way of centralizing control over important management tasks, particularly access control and password policies. Three groups are created during the installation, specifically for use by FreeIPA operations:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
ipausers, which contains all users.
@@ -23,7 +23,7 @@
Some operating systems limit the number of groups that can be assigned to system users. For example, Solaris and AIX systems both limit users to 16 groups per user. This can be an issue when using nested groups, when a user may be automatically added to multiple groups.
</div></div></div><div class="para">
When a group entry is created, it is automatically assigned certain LDAP object classes. (LDAP object classes and attributes are discussed in detail in the <em class="citetitle">Directory Server Deployment Guide</em> and the <em class="citetitle">Directory Server Schema Reference</em>.) For groups, only two attributes truly matter: the name and the description.
- </div><div class="table" id="tab.default-group-objclasses"><h6>Table 5.5. Default FreeIPA Group Object Classes</h6><div class="table-contents"><table summary="Default FreeIPA Group Object Classes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ </div><div class="table" id="tab.default-group-objclasses"><h6>Table 5.3. Default FreeIPA Group Object Classes</h6><div class="table-contents"><table summary="Default FreeIPA Group Object Classes" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
Description
</th><th>
Object Classes
@@ -37,15 +37,33 @@
</td><td>
<table border="0" summary="Simple list" class="simplelist"><tr><td>groupofnames</td></tr><tr><td>posixgroup</td></tr></table>
- </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="Configuring_IPA_Groups-Creating_IPA_Groups"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Groups-Creating_IPA_Groups">5.6.1. Creating User Groups</h3></div></div></div><div class="para">
- New groups are created using the <code class="command">group-add</code> command. (This adds only the group; members are added separately.)
- </div><div class="para">
- Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
- </div><pre class="screen">$ ipa group-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>" [--nonposix]</pre><div class="para">
- Additionally, there is one other configuration option, <code class="option">--nonposix</code>. By default, all groups are created as POSIX groups, which allows interoperability with Windows users and groups and programs like Samba. However, a group can be created as purely Linux group by using the <code class="option">--nonposix</code> option, which does not add the <code class="command">posixGroup</code> object class to the entry.
- </div><div class="para">
- For example:
- </div><pre class="screen">$ ipa group-add examplegroup --desc="for examples"
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="Configuring_IPA_Groups-Creating_IPA_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_IPA_Groups-Creating_IPA_Groups">5.5.1. Creating User Groups</h3></div></div></div><div class="section" id="new-group-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="new-group-ui">5.5.1.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>User Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Add</strong></span> link at the top of the groups list.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Enter all of the information for the group.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-add.png" width="444" /></div></div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ A unique name. This is the identifier used for the group in the FreeIPA domain, and it cannot be changed after it is created. The name cannot contain spaces, but other separators like an underscore (_) are allowed.
+ </div></li><li class="listitem"><div class="para">
+ A text description of the group.
+ </div></li><li class="listitem"><div class="para">
+ Whether the group is a Posix group, which adds Windows-specific information to the entry. By default, groups are not Posix groups.
+ </div></li><li class="listitem"><div class="para">
+ Optionally, the GID number for the group. This is generally not necessary because of the risk of collisions; FreeIPA will not override the given GID number, even if it not unique.
+ </div></li></ul></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Add and Edit</strong></span> button to go immediately to the member selection page.
+ </div></li><li class="listitem"><div class="para">
+ Select the members, as described in <a class="xref" href="user-groups.html#group-members-ui">Section 5.5.2.1, “With the Web UI (Group Page)”</a>.
+ </div></li></ol></div></div><div class="section" id="new-group-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="new-group-cmd">5.5.1.2. With the Command Line</h4></div></div></div><div class="para">
+ New groups are created using the <code class="command">group-add</code> command. (This adds only the group; members are added separately.)
+ </div><div class="para">
+ Two attributes are always required: the group name and the group description. If those attributes are not given as arguments, then the script prompts for them.
+ </div><pre class="screen">$ ipa group-add <em class="replaceable"><code>groupName</code></em> --desc="<em class="replaceable"><code>description</code></em>" [--nonposix]</pre><div class="para">
+ Additionally, there is one other configuration option, <code class="option">--nonposix</code>. By default, all groups are created as POSIX groups, which allows interoperability with Windows users and groups and programs like Samba. However, a group can be created as purely Linux group by using the <code class="option">--nonposix</code> option, which does not add the <code class="command">posixGroup</code> object class to the entry.
+ </div><div class="para">
+ For example:
+ </div><pre class="screen">$ ipa group-add examplegroup --desc="for examples"
----------------------
Added group "examplegroup"
@@ -53,8 +71,8 @@ Added group "examplegroup"
Group name: examplegroup
Description: for examples
GID: 855800010</pre><div class="para">
- When no arguments are used, the command prompts for the required group account information:
- </div><pre class="screen">$ ipa group-add
+ When no arguments are used, the command prompts for the required group account information:
+ </div><pre class="screen">$ ipa group-add
Group name: engineering
Description: for engineers
-------------------------
@@ -64,20 +82,52 @@ Added group "engineering"
Description: for engineers
GID: 387115842
</pre><div class="important"><div class="admonition_header"><h2>IMPORTANT</h2></div><div class="admonition"><div class="para">
- When a group is created without specifying a GID number, then the group entry is assigned the ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 13.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a group always has a unique number for its GID number.
- </div><div class="para">
- If a number is <span class="emphasis"><em>manually</em></span> assigned to a group entry, the server does not validate that the <em class="parameter"><code>gidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ When a group is created without specifying a GID number, then the group entry is assigned the ID number that is next available in the server or replica range. (Number ranges are described more in <a class="xref" href="Managing-Unique_UID_and_GID_Attributes.html">Section 5.4, “Managing Unique UID and GID Number Assignments”</a>.) This means that a group always has a unique number for its GID number.
+ </div><div class="para">
+ If a number is <span class="emphasis"><em>manually</em></span> assigned to a group entry, the server does not validate that the <em class="parameter"><code>gidNumber</code></em> is unique. It will allow duplicate IDs; this is expected (though discouraged) behavior for POSIX entries.
+ </div><div class="para">
+ If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa group-find --all</code>.
+ </div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ You cannot edit the group name. The group name is the primary key, so changing it is the equivalent of deleting the group and creating a new one.
+ </div></div></div></div></div><div class="section" id="adding-members"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="adding-members">5.5.2. Adding Group Members</h3></div></div></div><div class="section" id="group-members-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="group-members-ui">5.5.2.1. With the Web UI (Group Page)</h4></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This procedure adds a user to a group. User groups can contain other user groups as their members. These are <span class="emphasis"><em>nested</em></span> groups.
+ </div><div class="para">
+ It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div><div class="para">
+ When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
+ </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>User Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the group to which to add members.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/groups-menu.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the users to add, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the names to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/groups-addmembers.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div><div class="para">
+ Group members can be users or other user groups. It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div></div><div class="section" id="groups-ui-users"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="groups-ui-users">5.5.2.2. With the Web UI (User's Page)</h4></div></div></div><div class="para">
+ Users can also be added to a group through the user's page.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>Users</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Click the name of the user to edit.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/user-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>User Groups</strong></span> tab on the user entry page.
+ </div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Enroll</strong></span> link at the top of the task area.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-links.png" /></div></div></li><li class="listitem"><div class="para">
+ Click the checkbox by the names of the groups for the user to join, and click the right arrows button, <span class="guibutton"><strong>>></strong></span>, to move the groups to the selection box.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-addmembers-user.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guibutton"><strong>Enroll</strong></span> button.
+ </div></li></ol></div></div><div class="section" id="group-members-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="group-members-cmd">5.5.2.3. With the Command Line</h4></div></div></div><div class="para">
+ Members are added to a group using the <code class="command">group-add-member</code> command. This command can add both users as group members and other groups as group members.
</div><div class="para">
- If two entries are assigned the same ID number, only the first entry is returned in a search for that ID number. However, both entries will be returned in searches for other attributes or with <code class="command">ipa group-find --all</code>.
- </div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- You cannot edit the group name. The group name is the primary key, so changing it is the equivalent of deleting the group and creating a new one.
- </div></div></div></div><div class="section" id="adding-members"><div class="titlepage"><div><div><h3 class="title" id="adding-members">5.6.2. Adding Group Members</h3></div></div></div><div class="para">
- Members are added to a group using the <code class="command">group-add-member</code> command. This command can add both users as group members and other groups as group members.
- </div><div class="para">
- The syntax of the <code class="command">group-add-member</code> command requires only th group name and a comma-separated list of users to add:
- </div><pre class="screen">$ ipa group-add-member <em class="replaceable"><code>groupName</code></em> [--users=<em class="replaceable"><code>list</code></em>] [--groups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
- For example, this adds three users to the <code class="command">engineering</code> group:
- </div><pre class="screen">$ ipa group-add-member engineering --users=jsmith,bjensen,mreynolds
+ The syntax of the <code class="command">group-add-member</code> command requires only the group name and a comma-separated list of users to add:
+ </div><pre class="screen">$ ipa group-add-member <em class="replaceable"><code>groupName</code></em> [--users=<em class="replaceable"><code>list</code></em>] [--groups=<em class="replaceable"><code>list</code></em>]</pre><div class="para">
+ For example, this adds three users to the <code class="command">engineering</code> group:
+ </div><pre class="screen">$ ipa group-add-member engineering --users=jsmith,bjensen,mreynolds
Group name: engineering
Description: for engineers
GID: 387115842
@@ -86,8 +136,8 @@ Added group "engineering"
Number of members added 3
-------------------------
</pre><div class="para">
- Likewise, other groups can be added as members, which creates nested groups:
- </div><pre class="screen">$ ipa group-add-member engineering --groups=dev,qe1,dev2
+ Likewise, other groups can be added as members, which creates nested groups:
+ </div><pre class="screen">$ ipa group-add-member engineering --groups=dev,qe1,dev2
Group name: engineering
Description: for engineers
GID: 387115842
@@ -96,20 +146,20 @@ Number of members added 3
Number of members added 3
-------------------------
</pre><div class="para">
- When displaying nested groups, members are listed as members and the members of any member groups are listed as indirect members. For example:
- </div><pre class="screen">$ ipa group-show examplegroup
+ When displaying nested groups, members are listed as members and the members of any member groups are listed as indirect members. For example:
+ </div><pre class="screen">$ ipa group-show examplegroup
Group name: examplegroup
Description: for examples
GID: 93200002
Member users: jsmith,bjensen,mreynolds
Member groups: californiausers
Indirect Member users: sbeckett,acalavicci</pre><div class="para">
- It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
- </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
- </div></div></div><div class="para">
- A group member is removed using the <code class="command">group-remove-member</code> command.
- </div><pre class="screen">$ ipa group-remove-member engineering --users=jsmith
+ It can take up to several minutes for the members of the child group to show up as members of the parent group. This is especially true on virtual machines where the nested groups have more than 500 members.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ When creating nested groups, be careful not to create <span class="emphasis"><em>recursive</em></span> groups. For example, if GroupA is a member of GroupB, do not add GroupB as a member of GroupA. Recursive groups are not supported and can cause unpredictable behavior.
+ </div></div></div><div class="para">
+ A group member is removed using the <code class="command">group-remove-member</code> command.
+ </div><pre class="screen">$ ipa group-remove-member engineering --users=jsmith
Group name: engineering
Description: for engineers
@@ -117,10 +167,28 @@ Number of members added 3
Member users: bjensen,mreynolds
---------------------------
Number of members removed 1
----------------------------</pre></div><div class="section" id="Configuring_IPA_Groups-Deleting_IPA_Groups"><div class="titlepage"><div><div><h3 class="title" id="Configuring_IPA_Groups-Deleting_IPA_Groups">5.6.3. Deleting User Groups</h3></div></div></div><div class="para">
+---------------------------</pre></div><div class="section" id="viewing-group-members"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-group-members">5.5.2.4. Viewing Direct and Indirect Members of a Group</h4></div></div></div><div class="para">
+ User groups can contain other user groups as members. This is called a <span class="emphasis"><em>nested group</em></span>. This also means that a group has two types of members:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Direct members</em></span>, which are added explicitly to the group
+ </div></li><li class="listitem"><div class="para">
+ <span class="emphasis"><em>Indirect members</em></span>, which are members of the group because they are members of another user group which is a member of the group
+ </div></li></ul></div><div class="para">
+ The FreeIPA web UI has an easy way to view direct and indirect members of a group. The members list is filtered by member type, and this can be toggled by selecting the <span class="guilabel"><strong>Direct</strong></span> and <span class="guilabel"><strong>Indirect</strong></span> radio buttons at the top right corner of the members list.
+ </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/groups-menu.png" width="444" alt="Indirect and Direct Members" /></div></div><h6>Figure 5.1. Indirect and Direct Members</h6></div><br class="figure-break" /><div class="para">
+ Being able to track indirect members makes it easier to assign group membership properly, without duplicating membership.
+ </div></div></div><div class="section" id="Configuring_IPA_Groups-Deleting_IPA_Groups"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Configuring_IPA_Groups-Deleting_IPA_Groups">5.5.3. Deleting User Groups</h3></div></div></div><div class="para">
When a user group is deleted, only the group is removed. The user accounts of group members (including nested groups) are not affected. Additionally, any access control delegations that apply to that group are removed.
</div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
Deleting a group is immediate and permanent. If any group configuration (such as delegations) is required, it must be assigned to another group or a new group created.
- </div></div></div><div class="para">
- The <code class="command">group-del</code> command to deletes the specified group. For example:
- </div><pre class="screen">$ ipa group-del examplegroup</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="user-pwdpolicy.html"><strong>Prev</strong>5.5. Defining Password Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="searching.html"><strong>Next</strong>5.7. Searching for Users and Groups</a></li></ul></body></html>
+ </div></div></div><div class="section" id="deleting-group-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="deleting-group-ui">5.5.3.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <span class="guilabel"><strong>Identity</strong></span> tab, and select the <span class="guilabel"><strong>User Groups</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ Select the checkbox by the name of the group to delete.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-list.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Delete</strong></span> link at the top of the task area.
+ </div></li><li class="listitem"><div class="para">
+ When prompted, confirm the delete action.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/group-delete.png" width="444" /></div></div></li></ol></div></div><div class="section" id="deleting-group-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="deleting-group-cmd">5.5.3.2. With the Command Line</h4></div></div></div><div class="para">
+ The <code class="command">group-del</code> command to deletes the specified group. For example:
+ </div><pre class="screen">$ ipa group-del examplegroup</pre></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Managing-Unique_UID_and_GID_Attributes.html"><strong>Prev</strong>5.4. Managing Unique UID and GID Number Assignmen...</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="searching.html"><strong>Next</strong>5.6. Searching for Users and Groups</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-pwdpolicy.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-pwdpolicy.html
index e3de115..73e8031 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-pwdpolicy.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/user-pwdpolicy.html
@@ -1,180 +1,121 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>5.5. Defining Password Policies</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 11. Policy: Defining Password Policies</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /><link rel="prev" href="changing-pwds.html" title="5.4. Changing Passwords" /><link rel="next" href="user-groups.html" title="5.6. Managing User Groups" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="changing-pwds.html"><strong>Prev</strong></a></li><li class="next"><a accessk
ey="n" href="user-groups.html"><strong>Next</strong></a></li></ul><div class="section" id="user-pwdpolicy"><div class="titlepage"><div><div><h2 class="title" id="user-pwdpolicy">5.5. Defining Password Policies</h2></div></div></div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA, by default, does not expose passwords to clients, even hashed passwords, for system security.
- </div></div></div><div class="section" id="about-pwd-policy"><div class="titlepage"><div><div><h3 class="title" id="about-pwd-policy">5.5.1. About Password Policies and Policy Attributes</h3></div></div></div><div class="para">
- A <span class="emphasis"><em>password policy</em></span> sets certain standards for passwords, such as the password complexity and the rules for changing passwords. There are three main configuration areas that are defined within the password policy:
- </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Strength or complexity requirements
- </div></li><li class="listitem"><div class="para">
- History
- </div></li><li class="listitem"><div class="para">
- Account lockout
- </div></li></ul></div><div class="para">
- The FreeIPA password policy is enforced jointly by the KDC and the LDAP server. While the password policy is set in the LDAP directory and is based on 389 Directory Server password policy attributes, the policy is ultimately constrained by the KDC password policy framework. The KDC policy is less flexible than the 389 Directory Server policy framework, so the FreeIPA password policy can only implement password policy elements supported in the KDC. Any other policy settings made within the 389 Directory Server are not visible or enforced in FreeIPA.
- </div><div class="para">
- Password policies are assigned either globally or to groups in FreeIPA, not to individual users. The password policy is assigned a weight, so that if a user belongs to multiple groups with different password policies, the policy with the highest priority will take precedence.
- </div><div class="para">
- The different policy attributes that can be set are listed in <a class="xref" href="user-pwdpolicy.html#tab.pwpolicy-attrs">Table 5.4, “Password Policy Settings”</a>.
- </div><div class="table" id="tab.pwpolicy-attrs"><h6>Table 5.4. Password Policy Settings</h6><div class="table-contents"><table summary="Password Policy Settings" border="1"><colgroup><col width="33%" /><col width="33%" /><col width="33%" /></colgroup><thead><tr><th>
- Configuration Property
- </th><th>
- Command-Line Option
- </th><th>
- Description
- </th></tr></thead><tbody><tr><td>
- Minimum Password Lifetime
- </td><td>
- --minlife
- </td><td>
- Sets the minimum period of time, in hours, that a user's password must be in effect before the user can change it. This can prevent a user from changing a password and then immediately changing it to the original value. The default value is one hour.
- </td></tr><tr><td>
- Maximum Password Lifetime
- </td><td>
- --maxlife
- </td><td>
- Sets the maximum period of time, in days, that a user's password can be in effect before it must be changed. The default value is 90 days.
- </td></tr><tr><td>
- Minimum Number of Character Classes
- </td><td>
- --minclasses
- </td><td>
- Sets the minimum number of different classes, or types, of character that must exist in a password before it is considered valid. For example, setting this value to 3 requires that any password must have characters from at least three categories in order to be approved. The default value is zero (0), meaning there are no required classes.
- <div class="para">
- There are six character classes:
- </div>
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- Upper-case characters
- </div></li><li class="listitem"><div class="para">
- Lower-case characters
- </div></li><li class="listitem"><div class="para">
- Digits
- </div></li><li class="listitem"><div class="para">
- Special characters (for example, punctuation)
- </div></li><li class="listitem"><div class="para">
- 8-bit characters (characters whose decimal code starts at 128 or below)
- </div></li><li class="listitem"><div class="para">
- Number of repeated characters
- </div><div class="para">
- This weights in the opposite direction, so that if you have too many repeated characters you will not meet the quorum to satisfy the "level" expressed by <span class="property">krbPwdMinDiffChars</span>.
- </div></li></ul></div>
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="migrating-from-nis.html" title="10.4. Migrating from NIS to FreeIPA" /><link rel="next" href="viewing-the_Password_Policy.html" title="11.2. Viewing Password Policies" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="migrating-from-nis.html"><strong>Prev</strong></a></li>
<li class="next"><a accesskey="n" href="viewing-the_Password_Policy.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="user-pwdpolicy" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 11. Policy: Defining Password Policies</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="user-pwdpolicy.html#about-pwd-policy">11.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="viewing-the_Password_Policy.html">11.2. Viewing Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="viewing-the_Password_Policy.html#viewing-global">11.2.1. Viewing the Global Password Policy</a></span></dt><dt><span class="section"><a href="viewing-the_Password_Policy.html#viewing-group-pwd-policies">11.2.2. Viewing Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="viewing-the_Password_Policy.html#viewing-pwdpolicy-user">11.2.3. Vie
wing the Password Policy in Effect for a User</a></span></dt></dl></dd><dt><span class="section"><a href="The_IPA_Password_Policy-Editing_the_Password_Policy.html">11.3. Editing the Global Password Policy</a></span></dt><dd><dl><dt><span class="section"><a href="The_IPA_Password_Policy-Editing_the_Password_Policy.html#edit-global-policy-ui">11.3.1. With the UI</a></span></dt><dt><span class="section"><a href="The_IPA_Password_Policy-Editing_the_Password_Policy.html#edit-global-policy-cmd">11.3.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_Different_Password_Policies_for_Different_User_Groups.html">11.4. Creating Group-Level Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="Setting_Different_Password_Policies_for_Different_User_Groups.html#creating-group-policy-ui">11.4.1. With the Web UI</a></span></dt><dt><span class="section"><a href="Setting_Different_Password_Policies_for_Different_User_Groups.html#
creating-group-policy-cmd">11.4.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Setting_the_Priority_of_Password_Policies.html">11.5. Changing the Priority of Group Password Policies</a></span></dt><dt><span class="section"><a href="Setting_Account-lockout_Policies.html">11.6. Setting Account Lockout Policies</a></span></dt><dt><span class="section"><a href="Using_SSH_for_Password_Authentication.html">11.7. Enabling a Password Change Dialog</a></span></dt></dl></div><div class="para">
+ All users must have a password which they use to authenticate to the Kerberos domain. FreeIPA defines and enforces rules about password complexity, password histories, and account lockouts in order to maintain security.
+ </div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ FreeIPA, by default, does not expose passwords to clients, even hashed passwords, for system security.
+ </div></div></div><div class="section" id="about-pwd-policy"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="about-pwd-policy">11.1. About Password Policies and Policy Attributes</h2></div></div></div><div class="para">
+ A <span class="emphasis"><em>password policy</em></span> sets certain standards for passwords, such as the password complexity and the rules for changing passwords. A password policy minimizes the inherent risk of using passwords by ensuring that they meet adequate complexity standards to thwart brute force attacks and they are changed frequently enough to mitigate the risk of someone revealing or discovering a password.
+ </div><div class="para">
+ There are three main configuration areas that are defined within the password policy:
+ </div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Strength or complexity requirements
+ </div></li><li class="listitem"><div class="para">
+ History
+ </div></li><li class="listitem"><div class="para">
+ Account lockout
+ </div></li></ul></div><div class="para">
+ The FreeIPA password policy is enforced jointly by the KDC and the LDAP server. While the password policy is set in the LDAP directory and is based on 389 Directory Server password policy attributes, the policy is ultimately constrained by the KDC password policy framework. The KDC policy is less flexible than the 389 Directory Server policy framework, so the FreeIPA password policy can only implement password policy elements supported in the KDC. Any other policy settings made within the 389 Directory Server are not visible or enforced in FreeIPA.
+ </div><div class="para">
+ Password policies are assigned either globally or to groups in FreeIPA, not to individual users. The password policy is assigned a weight, so that if a user belongs to multiple groups with different password policies, the policy with the highest priority will take precedence.
+ </div><div class="para">
+ The different policy attributes that can be set are listed in <a class="xref" href="user-pwdpolicy.html#tab.pwpolicy-attrs">Table 11.1, “Password Policy Settings”</a>.
+ </div><div class="table" id="tab.pwpolicy-attrs"><h6>Table 11.1. Password Policy Settings</h6><div class="table-contents"><table summary="Password Policy Settings" border="1"><colgroup><col class="col1" width="33%" /><col class="col2" width="33%" /><col class="col3" width="33%" /></colgroup><thead><tr><th>
+ Configuration Property
+ </th><th>
+ Command-Line Option
+ </th><th>
+ Description
+ </th></tr></thead><tbody><tr><td colspan="3">
+ <span class="bold bold"><strong>Options for both the UI and CLI</strong></span>
+ </td></tr><tr><td>
+ Minimum Password Lifetime
+ </td><td>
+ --minlife
+ </td><td>
+ Sets the minimum period of time, in hours, that a user's password must be in effect before the user can change it. This can prevent a user from changing a password and then immediately changing it to the original value. The default value is one hour.
+ </td></tr><tr><td>
+ Maximum Password Lifetime
+ </td><td>
+ --maxlife
+ </td><td>
+ Sets the maximum period of time, in days, that a user's password can be in effect before it must be changed. The default value is 90 days.
+ </td></tr><tr><td>
+ Minimum Number of Character Classes
+ </td><td>
+ --minclasses
+ </td><td>
+ Sets the minimum number of different classes, or types, of character that must exist in a password before it is considered valid. For example, setting this value to 3 requires that any password must have characters from at least three categories in order to be approved. The default value is zero (0), meaning there are no required classes.
+ <div class="para">
+ There are six character classes:
+ </div>
+ <div class="itemizedlist"><ul><li class="listitem"><div class="para">
+ Upper-case characters
+ </div></li><li class="listitem"><div class="para">
+ Lower-case characters
+ </div></li><li class="listitem"><div class="para">
+ Digits
+ </div></li><li class="listitem"><div class="para">
+ Special characters (for example, punctuation)
+ </div></li><li class="listitem"><div class="para">
+ 8-bit characters (characters whose decimal code starts at 128 or below)
+ </div></li><li class="listitem"><div class="para">
+ Number of repeated characters
+ </div><div class="para">
+ This weights in the opposite direction, so that if you have too many repeated characters you will not meet the quorum to satisfy the "level" expressed by <span class="property">krbPwdMinDiffChars</span>.
+ </div></li></ul></div>
- </td></tr><tr><td>
- Minimum Length of Password
- </td><td>
- --minlength
- </td><td>
- Sets the minimum number of characters for a password. The default value is eight characters.
- </td></tr><tr><td>
- Password History
- </td><td>
- --history
- </td><td>
- Sets the number of previous passwords that are stored and which a user is prevented from using. For example, if this is set to ten, FreeIPA prevents a user from reusing any of their previous ten passwords. The default value is zero (0), which disables password history.
- <div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- Even with the password history set to zero, users cannot reuse a <span class="emphasis"><em>current</em></span> password.
- </div></div></div>
+ </td></tr><tr><td>
+ Minimum Length of Password
+ </td><td>
+ --minlength
+ </td><td>
+ Sets the minimum number of characters for a password. The default value is eight characters.
+ </td></tr><tr><td>
+ Password History
+ </td><td>
+ --history
+ </td><td>
+ Sets the number of previous passwords that are stored and which a user is prevented from using. For example, if this is set to ten, FreeIPA prevents a user from reusing any of their previous ten passwords. The default value is zero (0), which disables password history.
+ <div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ Even with the password history set to zero, users cannot reuse a <span class="emphasis"><em>current</em></span> password.
+ </div></div></div>
- </td></tr><tr><td>
- Priority
- </td><td>
- --priority
- </td><td>
- Sets the priority which determines which policy is in effect. The lower the number, the higher priority.
- </td></tr><tr><td>
- Maximum Consecutive Failures
- </td><td>
- --maxfail
- </td><td>
- Specifies the maximum number of consecutive failures to input the correct password before the user's account is locked.
- </td></tr><tr><td>
- Fail Interval
- </td><td>
- --failinterval
- </td><td>
- Specifies the period (in seconds) after which the failure count will be reset.
- </td></tr><tr><td>
- Lockout Time
- </td><td>
- --lockouttime
- </td><td>
- Specifies the period (in seconds) for which a lockout is enforced.
- </td></tr></tbody></table></div></div><br class="table-break" /></div><div class="section" id="viewing-the_Password_Policy"><div class="titlepage"><div><div><h3 class="title" id="viewing-the_Password_Policy">5.5.2. Viewing Password Policies</h3></div></div></div><div class="para">
- The password policies, both global and group-level, can be viewed using the <code class="command">pwpolicy-show</code> command.
- </div><div class="para">
- To view the global policy, simply run the <code class="command">pwpolicy-show</code> command with no arguments:
- </div><pre class="screen">$ ipa pwpolicy-show
+ </td></tr><tr><td colspan="3">
+ <span class="bold bold"><strong>Options for the CLI only</strong></span>
+ </td></tr><tr><td>
+ Priority
+ </td><td>
+ --priority
+ </td><td>
+ Sets the priority which determines which policy is in effect. The lower the number, the higher priority.
+ <div class="para">
+ Although this priority is required when the policy is first created in the UI, it cannot be reset in the UI. It can only be reset using the CLI.
+ </div>
- Group: global_policy
- Max lifetime (days): 90
- Min lifetime (hours): 1
- History size: 0
- Character classes: 0
- Min length: 8
- Max failures: 6
- Failure reset interval: 60
- Lockout duration: 600</pre><div class="para">
- For a group-level password policy, specify the group name with the command:
- </div><pre class="screen">$ ipa pwpolicy-show examplegroup
-
- Group: global_policy
- Max lifetime (days): 90
- Min lifetime (hours): 1
- History size: 3
- Character classes: 4
- Min length: 8
- Max failures: 3
- Failure reset interval: 15
- Lockout duration: 150</pre><div class="para">
- A user may belong to multiple groups, each with their own separate password policies. These policies are not additive. Only one policy is in effect at a time and it applies to all password policy attributes. To see which policy is in effect for a specific user, the <code class="command">pwpolicy-show</code> command can be run for a specific user. The results also show <span class="emphasis"><em>which</em></span> group policy is in effect for that user.
- </div><pre class="screen">$ ipa pwpolicy-show jsmith
-
- Group: admins
- Max lifetime (days): 90
- Min lifetime (hours): 1
- History size: 0
- Character classes: 0
- Min length: 8
- Max failures: 6
- Failure reset interval: 60
- Lockout duration: 600</pre></div><div class="section" id="The_IPA_Password_Policy-Editing_the_Password_Policy"><div class="titlepage"><div><div><h3 class="title" id="The_IPA_Password_Policy-Editing_the_Password_Policy">5.5.3. Editing the Global Password Policy</h3></div></div></div><div class="para">
- A password policy can be selective; it may only define certain elements. A <span class="emphasis"><em>global</em></span> password policy sets defaults that are used for every user entry, unless a group policy takes priority.
- </div><div class="para">
- A global policy always exists, so there is no reason to add a global password policy. To edit the global password policy, use the <code class="command">pwpolicy-mod</code> command with the attributes to change:
- </div><pre class="screen">ipa pwpolicy-mod <em class="replaceable"><code>--attribute=value</code></em></pre><div class="para">
- For example:
- </div><pre class="screen">ipa pwpolicy-mod --lockouttime=300 --history=5 --minlength=8</pre></div><div class="section" id="Setting_Different_Password_Policies_for_Different_User_Groups"><div class="titlepage"><div><div><h3 class="title" id="Setting_Different_Password_Policies_for_Different_User_Groups">5.5.4. Setting Group-Level Password Policies</h3></div></div></div><div class="para">
- Group-level policies override the global policies and offer specific policies that only apply to group members. Password policies are not cumulative. Either a group policy or the global policy is in effect for a user or group, but not both simultaneously.
- </div><div class="para">
- Group-level policies do not exist by default, so they must be created manually.
- </div><pre class="screen">$ ipa pwpolicy-add <em class="replaceable"><code>groupName --attribute-value</code></em></pre><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- It is not possible to set a password policy for a non-existent group.
- </div></div></div><div class="para">
- For example:
- </div><pre class="screen">$ ipa pwpolicy-add examplegroup --minlife=7 --maxlife=49 --history= --priority=1
-Group: examplegroup
-Max lifetime (days): 49
-Min lifetime (hours): 7
-Priority: 1
-</pre><div class="note"><div class="admonition_header"><h2>TIP</h2></div><div class="admonition"><div class="para">
- Setting an attribute to a blank value effectively removes that attribute from the password policy.
- </div></div></div></div><div class="section" id="Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies"><div class="titlepage"><div><div><h3 class="title" id="Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies">5.5.5. Setting the Priority of Group Password Policies</h3></div></div></div><div class="para">
- A user may belong to multiple groups, each with different password policies. Since only one policy can be in effect for a user, there has to be a method to assign precedence to policies. That is done through <span class="emphasis"><em>priority</em></span>.
- </div><div class="para">
- The highest priority is zero (0). The lower the number, the higher the priority.
- </div><pre class="screen">$ ipa pwpolicy-add examplegroup --priority=10</pre><div class="para">
- When a user belongs to multiple groups, the group password policy with the lowest number has the priority.
- </div></div><div class="section" id="The_IPA_Password_Policy-Using_SSH_for_Password_Authentication"><div class="titlepage"><div><div><h3 class="title" id="The_IPA_Password_Policy-Using_SSH_for_Password_Authentication">5.5.6. Enabling a Password Change Dialog</h3></div></div></div><div class="para">
- To use password authentication with new users rather than Kerberos tickets and GSS-API, enable <span class="emphasis"><em>challenge-response</em></span> authentication. Using challenge-response authentication enables FreeIPA to open a password change dialog box. This is not enabled by default because some SSL clients may not support challenge-response authentication, and it is needed only if the password has expired.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open the <code class="filename">/etc/ssh/sshd_config</code> file.
- </div></li><li class="listitem"><div class="para">
- Set <em class="parameter"><code>ChallengeResponseAuthentication</code></em> to <code class="literal">yes</code>.
- </div></li></ol></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="changing-pwds.html"><strong>Prev</strong>5.4. Changing Passwords</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="user-groups.html"><strong>Next</strong>5.6. Managing User Groups</a></li></ul></body></html>
+ </td></tr><tr><td>
+ Maximum Consecutive Failures
+ </td><td>
+ --maxfail
+ </td><td>
+ Specifies the maximum number of consecutive failures to input the correct password before the user's account is locked.
+ </td></tr><tr><td>
+ Fail Interval
+ </td><td>
+ --failinterval
+ </td><td>
+ Specifies the period (in seconds) after which the failure count will be reset.
+ </td></tr><tr><td>
+ Lockout Time
+ </td><td>
+ --lockouttime
+ </td><td>
+ Specifies the period (in seconds) for which a lockout is enforced.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="migrating-from-nis.html"><strong>Prev</strong>10.4. Migrating from NIS to FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="viewing-the_Password_Policy.html"><strong>Next</strong>11.2. Viewing Password Policies</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/users.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/users.html
index bcfb8c8e..e28b49f 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/users.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/users.html
@@ -1,19 +1,19 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 5. Identity: Managing Users and User Groups</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.1-0.0.11" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Chapter 5. Identity: Managing Users and User Groups</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="Troubleshooting-UI.html" title="4.7. Troubleshooting UI Connection Problems" /><link rel="next" href="managing-users.html" title="5.2. Managing User Accounts" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="Troubleshooting-UI.html"><strong>Prev</strong></a></li><li class=
"next"><a accesskey="n" href="managing-users.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="users" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 5. Identity: Managing Users and User Groups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="users.html#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="users.html#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="users.html#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="users.html#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="managing-users.html">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="managing-users.html#about-user-entries">5.2.1. About User
Entries</a></span></dt><dt><span class="section"><a href="managing-users.html#adding-users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="managing-users.html#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="managing-users.html#Configuring_IPA_Users-Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="managing-users.html#Configuring_IPA_Users-Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">5.3. Specifying Default User Settings</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#config-show">5.3.1. Showing the Settings Configuration</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#adding-cus
tom-objclasses">5.3.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-limits">5.3.3. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-fields">5.3.4. Setting Search Attributes</a></span></dt></dl></dd><dt><span class="section"><a href="changing-pwds.html">5.4. Changing Passwords</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html">5.5. Defining Password Policies</a></span></dt><dd><dl><dt><span class="section"><a href="user-pwdpolicy.html#about-pwd-policy">5.5.1. About Password Policies and Policy Attributes</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#viewing-the_Password_Policy">5.5.2. Viewing Password Policies</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#The_IPA_Password_Policy-Editing_the_P
assword_Policy">5.5.3. Editing the Global Password Policy</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#Setting_Different_Password_Policies_for_Different_User_Groups">5.5.4. Setting Group-Level Password Policies</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#Setting_Different_Password_Policies_for_Different_User_Groups-Setting_the_Priority_of_Password_Policies">5.5.5. Setting the Priority of Group Password Policies</a></span></dt><dt><span class="section"><a href="user-pwdpolicy.html#The_IPA_Password_Policy-Using_SSH_for_Password_Authentication">5.5.6. Enabling a Password Change Dialog</a></span></dt></dl></dd><dt><span class="section"><a href="user-groups.html">5.6. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Creating_IPA_Groups">5.6.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="user-groups.html#adding-members">5.6.2. Adding G
roup Members</a></span></dt><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Deleting_IPA_Groups">5.6.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="searching.html">5.7. Searching for Users and Groups</a></span></dt></dl></div><div class="para">
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="prev" href="using-the-ui.html" title="4.3. Using the FreeIPA Web UI" /><link rel="next" href="managing-users.html" title="5.2. Managing User Accounts" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="using-the-ui.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" h
ref="managing-users.html"><strong>Next</strong></a></li></ul><div xml:lang="en-US" class="chapter" id="users" lang="en-US"><div class="titlepage"><div><div><h2 class="title">Chapter 5. Identity: Managing Users and User Groups</h2></div></div></div><div class="toc"><dl><dt><span class="section"><a href="users.html#home-directories">5.1. Setting up User Home Directories</a></span></dt><dd><dl><dt><span class="section"><a href="users.html#homedir-reqs">5.1.1. About Home Directories</a></span></dt><dt><span class="section"><a href="users.html#homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</a></span></dt><dt><span class="section"><a href="users.html#automounting-home-dirs">5.1.3. Manually Automounting Home Directories</a></span></dt></dl></dd><dt><span class="section"><a href="managing-users.html">5.2. Managing User Accounts</a></span></dt><dd><dl><dt><span class="section"><a href="managing-users.html#about-user-entries">5.2.1. About User Entries</a></span></dt><
dt><span class="section"><a href="managing-users.html#adding-users">5.2.2. Adding Users</a></span></dt><dt><span class="section"><a href="managing-users.html#editing-users">5.2.3. Editing Users</a></span></dt><dt><span class="section"><a href="managing-users.html#Activating_and_Deactivating_User_Accounts">5.2.4. Activating and Deactivating User Accounts</a></span></dt><dt><span class="section"><a href="managing-users.html#Deleting_IPA_Users">5.2.5. Deleting Users</a></span></dt></dl></dd><dt><span class="section"><a href="changing-pwds.html">5.3. Changing Passwords</a></span></dt><dd><dl><dt><span class="section"><a href="changing-pwds.html#pwd-reset-ui">5.3.1. From the Web UI</a></span></dt><dt><span class="section"><a href="changing-pwds.html#pwd-reset-cmd">5.3.2. From the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html">5.4. Managing Unique UID and GID Number Assignments</a></span></dt><dd><dl><dt><span
class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#id-ranges-at-install">5.4.1. About ID Range Assignments During Installation</a></span></dt><dt><span class="section"><a href="Managing-Unique_UID_and_GID_Attributes.html#Assigning_UIDs_and_GIDs-Adding_New_Ranges">5.4.2. Adding New Ranges</a></span></dt></dl></dd><dt><span class="section"><a href="user-groups.html">5.5. Managing User Groups</a></span></dt><dd><dl><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Creating_IPA_Groups">5.5.1. Creating User Groups</a></span></dt><dt><span class="section"><a href="user-groups.html#adding-members">5.5.2. Adding Group Members</a></span></dt><dt><span class="section"><a href="user-groups.html#Configuring_IPA_Groups-Deleting_IPA_Groups">5.5.3. Deleting User Groups</a></span></dt></dl></dd><dt><span class="section"><a href="searching.html">5.6. Searching for Users and Groups</a></span></dt><dd><dl><dt><span class="section"><a href="searching.h
tml#user-search-ui">5.6.1. With the UI</a></span></dt><dt><span class="section"><a href="searching.html#user-search-cmd">5.6.2. With the Command Line</a></span></dt></dl></dd><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html">5.7. Specifying Default User and Group Settings</a></span></dt><dd><dl><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#config-show">5.7.1. Viewing the Settings Configuration</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#adding-custom-objclasses">5.7.2. Applying Custom Object Classes to New User Entries</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#adding-custom-objclasses-groups">5.7.3. Applying Custom Object Classes to New Group Entries</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Setti
ngs.html#search-limits">5.7.4. Setting Default Search Limits</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-fields">5.7.5. Setting User Search Attributes</a></span></dt><dt><span class="section"><a href="Configuring_IPA_Users-Specifying_Default_User_Settings.html#search-fields-groups">5.7.6. Setting Group Search Attributes</a></span></dt></dl></dd></dl></div><div class="para">
Users in FreeIPA are able to access services and servers within the domain through Kerberos authentication. A number of configuration settings — like search limits and password policies — can be applied to user accounts. User groups can be used for access control and other management tasks.
</div><div class="para">
This chapter covers general management tasks for users, groups, password policies, and other configuration for users.
- </div><div class="section" id="home-directories"><div class="titlepage"><div><div><h2 class="title" id="home-directories">5.1. Setting up User Home Directories</h2></div></div></div><div class="para">
+ </div><div class="section" id="home-directories"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="home-directories">5.1. Setting up User Home Directories</h2></div></div></div><div class="para">
A home directory is required for any FreeIPA user. Without a home directory in the expected location, a user may be unable to log into the domain. While systems administrators can manage home directories outside of FreeIPA, it is also possible to use a PAM module to create home directories automatically on both FreeIPA servers and clients.
- </div><div class="section" id="homedir-reqs"><div class="titlepage"><div><div><h3 class="title" id="homedir-reqs">5.1.1. About Home Directories</h3></div></div></div><div class="para">
+ </div><div class="section" id="homedir-reqs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="homedir-reqs">5.1.1. About Home Directories</h3></div></div></div><div class="para">
FreeIPA, as part of managing users, can manage user home directories. However, FreeIPA has certain defined parameters for any managed home directories:
</div><div class="itemizedlist"><ul><li class="listitem"><div class="para">
The default prefix for users' home directories is <code class="filename">/home</code>.
@@ -25,10 +25,10 @@
It is possible to use an NFS file server that provides <code class="filename">/home</code> that can be made available to all machines in the domain and then automounted on the FreeIPA server. Using automounts for home directories is described in <a class="xref" href="users.html#automounting-home-dirs">Section 5.1.3, “Manually Automounting Home Directories”</a>.
</div></li><li class="listitem"><div class="para">
If a suitable directory and mechanism are not available for to create home directories, users may not be able to log in.
- </div></li></ul></div></div><div class="section" id="homedir-pammod"><div class="titlepage"><div><div><h3 class="title" id="homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</h3></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="homedir-pammod"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="homedir-pammod">5.1.2. Enabling the PAM Home Directory Module</h3></div></div></div><div class="para">
For a home directory to be created automatically when a user logs in, FreeIPA can use either the <code class="systemitem module">pam_oddjob_mkhomedir</code> module or the <code class="systemitem module">pam_mkhomedir</code> module. Because it requires fewer permissions and works well with SELinux, FreeIPA preferentially uses the <code class="systemitem module">pam_oddjob_mkhomedir</code> module. If that module is not installed, then it falls back to the <code class="systemitem module">pam_mkhomedir</code> module.
</div><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
- FreeIPA does not require the <code class="systemitem module">pam_oddjob_mkhomedir</code> module or <code class="systemitem module">pam_mkhomedir</code> module. The <code class="systemitem">*_mkhomedir</code> module may try to create home directories even when the shared storage is not available.
+ FreeIPA does not require the <code class="systemitem module">pam_oddjob_mkhomedir</code> module or <code class="systemitem module">pam_mkhomedir</code> module. This is because the <code class="systemitem">*_mkhomedir</code> module may try to create home directories even when the shared storage is not available. If the module is unable to create the home directory, then users can be blocked from logging into the FreeIPA domain.
</div><div class="para">
The system administrator must activate this module on each client or server as needed.
</div></div></div><div class="para">
@@ -39,7 +39,7 @@
The <code class="systemitem module">pam_oddjob_mkhomedir</code> module can be enabled using the system's <code class="command">authconfig</code> command. For example:
</div><pre class="programlisting">authconfig --enablemkhomedir</pre><div class="para">
This option can be used for both server and client machines post-installation.
- </div></li></ul></div></div><div class="section" id="automounting-home-dirs"><div class="titlepage"><div><div><h3 class="title" id="automounting-home-dirs">5.1.3. Manually Automounting Home Directories</h3></div></div></div><div class="para">
+ </div></li></ul></div></div><div class="section" id="automounting-home-dirs"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="automounting-home-dirs">5.1.3. Manually Automounting Home Directories</h3></div></div></div><div class="para">
While PAM modules can be used to create home directories for user automatically, this may not be desirable behavior in every environment. In that case, home directories can be manually added to the FreeIPA server from separate locations using NFS shares and <code class="command">automount</code>.
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
Create a new location for the user directory maps:
@@ -50,5 +50,5 @@ Location: userdirs</pre></li><li class="listitem"><div class="para">
Key: /share
Mount information: -ro,soft, ipaserver.example.com:/home/share</pre></li></ol></div><div class="para">
- Using automounts with FreeIPA is described in detail in <a class="xref" href="automount.html">Chapter 7, <i>Identity: Using Automount</i></a>.
- </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="Troubleshooting-UI.html"><strong>Prev</strong>4.7. Troubleshooting UI Connection Problems</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-users.html"><strong>Next</strong>5.2. Managing User Accounts</a></li></ul></body></html>
+ Using automounts with FreeIPA is described in detail in <a class="xref" href="automount.html">Chapter 9, <em>Policy: Using Automount</em></a>.
+ </div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="using-the-ui.html"><strong>Prev</strong>4.3. Using the FreeIPA Web UI</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="managing-users.html"><strong>Next</strong>5.2. Managing User Accounts</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/using-the-ui.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/using-the-ui.html
index 2fc2c3c..780135a 100644
--- a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/using-the-ui.html
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/using-the-ui.html
@@ -1,144 +1,137 @@
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
-<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>4.2. Using the FreeIPA UI</title><link rel="stylesheet" href="Common_Content/css/default.css" type="text/css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.5" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-0.1-0.0.5" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>4.3. Using the FreeIPA Web UI</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
addID('Fedora');
addID('Fedora.15');
addID('Fedora.15.books');
addID('Fedora.15.FreeIPA_Guide');
- </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="basic-usage.html" title="Chapter 4. Basic UI Usage" /><link rel="prev" href="basic-usage.html" title="Chapter 4. Basic UI Usage" /><link rel="next" href="switching-users.html" title="4.3. Switching Users" /></head><body class="toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="basic-usage.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="switching
-users.html"><strong>Next</strong></a></li></ul><div class="section" id="using-the-ui"><div class="titlepage"><div><div><h2 class="title" id="using-the-ui">4.2. Using the FreeIPA UI</h2></div></div></div><div class="section" id="config-browser"><div class="titlepage"><div><div><h3 class="title" id="config-browser">4.2.1. Configuring the Browser</h3></div></div></div><div class="para">
- XXXXXXXXXXX FIX ME XXXXXXXX
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="basic-usage.html" title="Chapter 4. Basic Usage" /><link rel="prev" href="logging-in.html" title="4.2. Logging into FreeIPA" /><link rel="next" href="users.html" title="Chapter 5. Identity: Managing Users and User Groups" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p" href="logging-in.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n
" href="users.html"><strong>Next</strong></a></li></ul><div class="section" id="using-the-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="using-the-ui">4.3. Using the FreeIPA Web UI</h2></div></div></div><div class="para">
+ In order to use the web UI, the user must be authenticated with the FreeIPA Kerberos domain and have an active Kerberos ticket (<a class="xref" href="logging-in.html">Section 4.2, “Logging into FreeIPA”</a>). Generally, the web UI can only be accessed from a FreeIPA server or client machine and the user must be locally authenticated. There are a couple of ways to work around this, either by configuring Kerberos on a non-domain machine to connect to the Kerberos domain (<a class="xref" href="using-the-ui.html#Using_a_Browser_on_Another_System">Section 4.3.3, “Using a Browser on Another System”</a>) or by enabling password authentication to the UI (<a class="xref" href="using-the-ui.html#Enabling_UsernamePassword_Authentication_in_Your_Browser">Section 4.3.4, “Enabling Username/Password Authentication in Your Browser”</a>).
+ </div><div class="section" id="opening-the-web-ui"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="opening-the-web-ui">4.3.1. Opening the FreeIPA Web UI</h3></div></div></div><div class="para">
+ The browser must be properly configured, as described in <a class="xref" href="using-the-ui.html#config-browser">Section 4.3.2, “Configuring the Browser”</a>, to support Kerberos authentication so that the user can connect to the UI.
</div><div class="para">
- Firefox can use your Kerberos credentials for authentication, but you need to specify which domains to communicate with, and using which attributes.
+ To open the web UI:
</div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open Firefox, and type "about:config" in the <span class="guilabel"><strong>Address Bar</strong></span>.
+ Get a valid Kerberos ticket using <code class="command">kinit</code>, as in <a class="xref" href="logging-in.html">Section 4.2, “Logging into FreeIPA”</a>.
</div></li><li class="listitem"><div class="para">
- In the <span class="guilabel"><strong>Search</strong></span> field, type "negotiate".
+ Open the FreeIPA URL. The full URL is <code class="command">http://</code><span class="emphasis"><em>IPAserver-FQDN</em></span><code class="command">/ipa/ui</code>, but this service is also accessed simply by opening <code class="command">http://</code><span class="emphasis"><em>IPAserver-FQDN</em></span>. For example:
+ </div><pre class="screen">http://server.example.com
+http://server.example.com/ipa/ui</pre></li></ol></div></div><div class="section" id="config-browser"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="config-browser">4.3.2. Configuring the Browser</h3></div></div></div><div class="para">
+ Firefox can use Kerberos credentials to authenticate to the FreeIPA UI, but Kerberos negotiation needs to be configured to use the FreeIPA domain. At the first log-in attempt, if Firefox has not been configured to support Kerberos authentication, then an error message appears.
+ </div><div class="figure" id="fig.kerb-error-browser"><div class="figure-contents"><div class="mediaobject"><img src="images/browser-kinit-rhel.png" width="444" alt="Kerberos Authentication Error" /></div></div><h6>Figure 4.10. Kerberos Authentication Error</h6></div><br class="figure-break" /><div class="para">
+ If you see that error, then the FreeIPA web UI can perform the required configuration:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>follow these directions</strong></span> link.
+ </div></li><li class="listitem"><div class="para">
+ Click the link to import the CA certificate for the FreeIPA server.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/configuring-browser1.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Set the web site and software developer (first and last) trust bits for the CA certificate.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/Accept_CA_No_Exception.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Configure Firefox</strong></span> button. This automatically fills out all the <code class="command">negotiate</code> settings in the Firefox configuration to use the FreeIPA domain settings.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/configuring-browser2.png" /></div></div><div class="para">
+ When the process is complete, a success box pops up saying that Firefox has been configured for single sign-on. For there, you are redirected to the FreeIPA web UI.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/configuring-browser3.png" /></div></div></li></ol></div><div class="para">
+ This can also be done manually:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open Firefox.
</div></li><li class="listitem"><div class="para">
- Enter the domain names, including the preceding period (.):
+ Type <code class="command">about:config</code> in the address bar.
+ </div></li><li class="listitem"><div class="para">
+ In the <span class="guilabel"><strong>Search</strong></span> field, type <code class="command">negotiate</code> to filter out the Kerberos-related parameters.
+ </div></li><li class="listitem"><div class="para">
+ On Fedora, enter the domain name for the URI parameters, including the preceding period (.) and set the <code class="command">gsslib</code> parameter to true:
<pre class="programlisting">network.negotiate-auth.trusted-uris .example.com
network.negotiate-auth.delegation-uris .example.com
-network.negotiate-auth.using-native-gsslib true
-</pre>
+network.negotiate-auth.using-native-gsslib true</pre>
</div><div class="para">
- If you are configuring Firefox on Microsoft Windows, make the following changes instead:
+ On Windows, enter the domain name for the URI parameters, including the preceding period (.) and set the <code class="command">sspi</code> parameter to false:
<pre class="programlisting">network.negotiate-auth.trusted-uris .example.com
network.auth.use-sspi false
network.negotiate-auth.delegation-uris .example.com
</pre>
</div></li><li class="listitem"><div class="para">
- In Firefox, navigate to the FreeIPA server (use the fully-qualified domain name, for example, <code class="systemitem">http://ipaserver.example.com</code>). Ensure that there are no Kerberos authentication errors, and that you can see and interact with the Web interface.
- </div></li></ol></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Navigate to <code class="uri">http://ipa.example.com/ipa/config/ca.crt</code>
+ Open the web UI by going to the fully-qualified domain name of the FreeIPA server such as <code class="systemitem">http://ipaserver.example.com</code>. Make sure that you can open the web UI and that there are no Kerberos authentication errors.
</div></li><li class="listitem"><div class="para">
- Select at least the first (<span class="guilabel"><strong>Trust this CA to identify web sites</strong></span>) and third (<span class="guilabel"><strong>Trust this CA to identify software developers</strong></span>) check boxes.
+ Next, download the FreeIPA server's CA certificate from <code class="systemitem">http://ipa.example.com/ipa/config/ca.crt</code>.
</div></li><li class="listitem"><div class="para">
- Click <span class="guibutton"><strong>OK</strong></span>.
- </div><div class="informalfigure"><div class="mediaobject"><img src="images/Accept_CA_No_Exception.png" width="600" /></div></div></li></ol></div><div class="para">
- Rather than permanently adding an exception, you can leave all boxes unchecked and click <span class="guibutton"><strong>OK</strong></span> to proceed. At this point the Kerberos authentication will fail, so you need to click the associated link and then click <span class="guibutton"><strong>Import the FreeIPA Certificate Authority</strong></span>.
- </div><div class="formalpara" id="Using_the_Browser_Interface-Configuring_Kerberos_Authentication"><h5 class="formalpara">Configuring Kerberos Authentication</h5>
- Use the following procedure to configure your browser for Kerberos authentication against your newly-installed domain.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Type "about:config" in the address bar. Accept that you will be careful.
- </div></li><li class="listitem"><div class="para">
- In the Search field, type "negotiate".
+ Select the first (<span class="guilabel"><strong>Trust this CA to identify web sites</strong></span>) and third (<span class="guilabel"><strong>Trust this CA to identify software developers</strong></span>) check boxes.
+ </div></li></ol></div></div><div class="section" id="Using_a_Browser_on_Another_System"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Using_a_Browser_on_Another_System">4.3.3. Using a Browser on Another System</h3></div></div></div><div class="para">
+ It is possible to connect to the FreeIPA web UI from a system which is <span class="emphasis"><em>not</em></span> a member of the FreeIPA domain. In this case, it is possible to specify a FreeIPA-specific Kerberos configuration file on the external (non-FreeIPA) machine before running <code class="command">kinit</code>, and then the user can authenticate against the FreeIPA server domain.
+ </div><div class="para">
+ This is especially useful there are multiple realms or overlapping domains across your infrastructure.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Copy the <code class="filename">/etc/krb5.conf</code> file from the FreeIPA server.
+ </div><div class="para">
+
+<pre class="screen"># scp /etc/krb5.conf root at externalmachine.example.com:/etc/krb5_ipa.conf</pre>
+
+ </div><div class="warning"><div class="admonition_header"><h2>WARNING</h2></div><div class="admonition"><div class="para">
+ Do not overwrite the existing <code class="filename">krb5.conf</code> file.
+ </div></div></div></li><li class="listitem"><div class="para">
+ On the external machine, set the terminal session to use the copied FreeIPA Kerberos configuration file:
+<pre class="screen">$ export KRB5_CONFIG=/etc/krb5_ipa.conf</pre>
+
</div></li><li class="listitem"><div class="para">
- Ensure the following lines reflect your setup. Replace "example.com" with your own FreeIPA server's domain, including the preceding period (.):
- <div class="itemizedlist"><ul><li class="listitem"><div class="para">
- network.negotiate-auth.trusted-uris .example.com
- </div></li><li class="listitem"><div class="para">
- network.negotiate-auth.delegation-uris .example.com
- </div></li><li class="listitem"><div class="para">
- network.negotiate-auth.using-native-gsslib true
- </div></li></ul></div>
+ Configure Firefox on the external machine as in <a class="xref" href="using-the-ui.html#config-browser">Section 4.3.2, “Configuring the Browser”</a>.
+ </div></li></ol></div></div><div class="section" id="Enabling_UsernamePassword_Authentication_in_Your_Browser"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Enabling_UsernamePassword_Authentication_in_Your_Browser">4.3.4. Enabling Username/Password Authentication in Your Browser</h3></div></div></div><div class="para">
+ If Kerberos authentication fails, then browser login also fails. That prevents access to the FreeIPA web UI. Configuring username/password authentication for the UI allows users to log in even if there are problems with the Kerberos service.
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Open the <code class="filename">ipa.conf</code> file used by the Apache web service.
+ </div><pre class="screen">vim /etc/httpd/conf.d/ipa.conf</pre></li><li class="listitem"><div class="para">
+ In the <code class="command"><Location "/ipa"></code> location definition, change the <em class="parameter"><code>KrbMethodK5Passwd</code></em> attribute from off to on.
+ </div><pre class="screen">KrbMethodK5Passwd on</pre></li><li class="listitem"><div class="para">
+ Restart the <code class="systemitem">httpd</code> service:
+<pre class="screen"># service httpd restart</pre>
- </div></li></ol></div><div class="formalpara" id="Using_the_Browser_Interface-Displaying_the_IPA_Homepage"><h5 class="formalpara">Displaying the FreeIPA Homepage</h5>
- Your browser should now be fully configured and ready to connect to the FreeIPA server. In the address bar, type “localhost” or the name of the host. The FreeIPA homepage should now display. Explore this page and the links it provides, familiarize yourself with the available options, and file a bug whenever you find something is not working.
- </div><div class="section" id="Configuring_Your_Local_Browser-Troubleshooting"><div class="titlepage"><div><div><h4 class="title" id="Configuring_Your_Local_Browser-Troubleshooting">4.2.1.1. Troubleshooting</h4></div></div></div><div class="para">
- If you have followed the configuration steps and Negotiate authentication is not working, you can turn on verbose logging of the authentication process, and potentially find the cause of the problem.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Exit the browser.
- </div></li><li class="listitem"><div class="para">
- Open a shell, and run the following commands:
+ </div></li></ol></div><div class="para">
+ When this is configured, the web UI prompts for a FreeIPA username and password if it can't detect any Kerberos credentials.
+ </div><div class="figure"><div class="figure-contents"><div class="mediaobject"><img src="images/password-prompt.png" width="444" alt="FreeIPA Password Prompt" /></div></div><h6>Figure 4.11. FreeIPA Password Prompt</h6></div><br class="figure-break" /><div class="note"><div class="admonition_header"><h2>NOTE</h2></div><div class="admonition"><div class="para">
+ This must be configured on every FreeIPA server in the domain.
+ </div></div></div></div><div class="section" id="Troubleshooting-UI"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="Troubleshooting-UI">4.3.5. Troubleshooting UI Connection Problems</h3></div></div></div><div class="para">
+ If negotiate authentication is not working, turn on verbose logging for the authentication process to help diagnose the issue:
+ </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Close all browser windows.
+ </div></li><li class="listitem"><div class="para">
+ In a terminal, set the new log levels for Firefox:
<pre class="screen">export NSPR_LOG_MODULES=negotiateauth:5
export NSPR_LOG_FILE=/tmp/moz.log
</pre>
- </div><div class="para">
- This will enable verbose logging, and all information will be logged to <code class="filename">/tmp/moz.log</code>, which may give a clue to the problem. Restart your browser from that shell, and visit the website you were unable to authenticate to earlier.
- </div></li></ol></div><div class="formalpara" id="Troubleshooting-Analyzing_the_Symptoms"><h5 class="formalpara">Analyzing the Symptoms</h5>
- Refer to the following symptoms and possible solutions to help resolve issues with Negotiate authentication.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- If you receive output similar to the following:
+ </div><div class="para">
+ This enables verbose logging and logs all information to <code class="filename">/tmp/moz.log</code>.
+ </div></li><li class="listitem"><div class="para">
+ Restart the browser from the same terminal window and attempt t .
+ </div></li></ol></div><div class="para">
+ Some of the common error messages and workarounds are in <a class="xref" href="using-the-ui.html#tab.ui-troubleshooting">Table 4.2, “UI Error Log Messages”</a>.
+ </div><div class="table" id="tab.ui-troubleshooting"><h6>Table 4.2. UI Error Log Messages</h6><div class="table-contents"><table summary="UI Error Log Messages" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Error Log Message
+ </th><th>
+ Description and Fix
+ </th></tr></thead><tbody><tr><td>
+
<pre class="screen">-1208550944[90039d0]: entering nsNegotiateAuth::GetNextToken()
-1208550944[90039d0]: gss_init_sec_context() failed: Miscellaneous failure
-No credentials cache found
-</pre>
- it means that you do not have any Kerberos tickets, and need to run <code class="command">kinit</code>.
- </div></li><li class="listitem"><div class="para">
- If you can run <code class="command">kinit</code> successfully but you are unable to authenticate, and the log file contains output similar to the following:
+No credentials cache found</pre>
+
+ </td><td>
+ There are no Kerberos tickets. Run <code class="command">kinit</code>.
+ </td></tr><tr><td>
+
<pre class="screen">-1208994096[8d683d8]: entering nsAuthGSSAPI::GetNextToken()
-1208994096[8d683d8]: gss_init_sec_context() failed: Miscellaneous failure
-Server not found in Kerberos database
-</pre>
- it generally indicates a Kerberos configuration problem. Ensure you have the following in the [domain_realm] section of the <code class="filename">/etc/krb5.conf</code> file:
-<pre class="screen">.example.com = EXAMPLE.COM
-example.com = EXAMPLE.COM
-</pre>
-
- </div></li><li class="listitem"><div class="para">
- If nothing appears in the log file it is possible that you are behind a proxy, and that proxy is removing the HTTP headers required for Negotiate authentication. Try to connect to the server using HTTPS instead, which allows the request to pass through unmodified. Then proceed to debug using the log file, as described above.
- </div></li></ol></div></div></div><div class="section" id="logging-in"><div class="titlepage"><div><div><h3 class="title" id="logging-in">4.2.2. Logging into the FreeIPA UI</h3></div></div></div><div class="para">
- XXXXXXXXXXX FIX ME XXXXXXXX
- </div><div class="para">
- To be able to perform any administrative task you need to authenticate to the server. During the configuration step you were prompted to create two users. The first of these, Directory Manager, is the superuser, used to perform rare, low-level tasks. The second user, admin, is used to perform normal administrative activities.
- </div><div class="para">
- To authenticate as the admin user:
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Open a new terminal window. This is to ensure that all default aspects of the environment (especially paths) are set correctly.
- </div></li><li class="listitem"><div class="para">
- In this window, type <code class="command">kinit admin</code>.
- </div></li><li class="listitem"><div class="para">
- When you are prompted to enter a password, use the password that you specified during the configuration step for the admin user.
- </div></li></ol></div><div class="para">
- As a result of this operation you will acquire what is known as a Kerberos <span class="emphasis"><em>ticket</em></span>. You can use the <code class="command">klist</code> command to inspect the details of the ticket that you have acquired.
- </div><div class="para">
- You can now authenticate using the newly-created user and temporary password. Type <code class="command">kinit</code> <em class="replaceable"><code>userLogin</code></em> to log in to FreeIPA. This will prompt you for a password and then immediately request a password change.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- The Kerberos client libraries used by the <code class="command">kinit</code> utility have some limitations. One of these limitations is the fact that the on-disc ticket storage is overwritten with any new invocation of <code class="command">kinit</code>. This means that if you authenticated as admin, then added aa new user, set the password and then tried to authenticate as that user, the administrator's ticket would be lost. To prevent this from happening, a special environment variable, <code class="varname">KRB5CCNAME</code>, can be used. This allows you to keep credential caches separate in different shells. Refer to the <code class="command">kinit</code> man page for more information.
- </div></div></div><div class="para">
- You can browse the FreeIPA man pages and help system to explore other FreeIPA commands. Please take some time to become familiar with the ways other FreeIPA objects can be created and modified.
- </div></div><div class="section" id="Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System"><div class="titlepage"><div><div><h3 class="title" id="Configuring_a_Browser_to_Work_with_IPA-Using_a_Browser_on_Another_System">4.2.3. Using a Browser on Another System</h3></div></div></div><div class="para">
- If you are unable, or prefer not, to update <code class="filename">/etc/krb5.conf</code> with the FreeIPA realm information, you can create another copy and set an appropriate environment variable. You can then run <code class="command">kinit</code> as before and use your browser to connect to FreeIPA. This is especially useful if you need to manage multiple realms, and if you have overlapping domains.
- </div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="para">
- This procedure is not necessary if you use <code class="command">ipa-client-install</code> to set up your client.
- </div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Copy the <code class="filename">/etc/krb5.conf</code> file from the FreeIPA server to the client system. Do not overwrite the existing <code class="filename">krb5.conf</code> file. Run the following command on the FreeIPA server:
- </div><div class="para">
-
-<pre class="screen"> # scp /etc/krb5.conf root at ipaclient:/etc/krb5_ipa.conf</pre>
+Server not found in Kerberos database</pre>
- </div></li><li class="listitem"><div class="para">
- On the FreeIPA client, open a shell and run the following commands:
-<pre class="screen">$ export KRB5_CONFIG=/etc/krb5_ipa.conf
-$ kinit user at EXAMPLE.COM
-$ /usr/bin/firefox</pre>
-
- </div></li><li class="listitem"><div class="para">
- Configure and test Firefox.
- </div></li></ol></div></div><div class="section" id="Enabling_UsernamePassword_Authentication_in_Your_Browser"><div class="titlepage"><div><div><h3 class="title" id="Enabling_UsernamePassword_Authentication_in_Your_Browser">4.2.4. Enabling Username/Password Authentication in Your Browser</h3></div></div></div><div class="para">
- If Kerberos authentication fails, the browser login will also fail, preventing access to the FreeIPA web interface. You can configure FreeIPA to display a username/password authentication dialog box if this situation occurs.
- </div><div class="orderedlist"><ol><li class="listitem"><div class="para">
- Edit the <code class="filename">/etc/httpd/conf.d/ipa.conf</code> file, and change the <em class="parameter"><code>KrbMethodK5Passwd</code></em> attribute from off to on.
- </div></li><li class="listitem"><div class="para">
- Restart the <code class="systemitem">httpd</code> service:
-<pre class="screen"># service httpd restart</pre>
+ </td><td>
+ This can occur when you have successfully obtained Kerberos tickets but are still unable to authenticate to the UI. This indicates that there is a problem with the Kerberos configuration. The first place to check is the <code class="command">[domain_realm]</code> section in the <code class="filename">/etc/krb5.conf</code> file. Make sure that the FreeIPA Kerberos domain entry is correct and matches the configuration in the Firefox negotiation parameters. For example:
+<pre class="screen">.example.com = EXAMPLE.COM
+example.com = EXAMPLE.COM</pre>
- </div></li></ol></div><div class="note"><div class="admonition_header"><h2>Note</h2></div><div class="admonition"><div class="itemizedlist"><ul><li class="listitem"><div class="para">
- You need to perform this procedure on all of the FreeIPA servers in your deployment.
- </div></li><li class="listitem"><div class="para">
- This change may not be preserved between FreeIPA updates.
- </div></li></ul></div></div></div></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="basic-usage.html"><strong>Prev</strong>Chapter 4. Basic UI Usage</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="switching-users.html"><strong>Next</strong>4.3. Switching Users</a></li></ul></body></html>
+ </td></tr><tr><td>
+ Nothing is in the log file.
+ </td><td>
+ It is possible that you are behind a proxy which is removing the HTTP headers required for negotiate authentication. Try to connect to the server using HTTPS instead, which allows the request to pass through unmodified. Then check the log file again.
+ </td></tr></tbody></table></div></div><br class="table-break" /></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="logging-in.html"><strong>Prev</strong>4.2. Logging into FreeIPA</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="users.html"><strong>Next</strong>Chapter 5. Identity: Managing Users and User Grou...</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/html/FreeIPA_Guide/viewing-the_Password_Policy.html b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/viewing-the_Password_Policy.html
new file mode 100644
index 0000000..9d6b418
--- /dev/null
+++ b/public_html/en-US/Fedora/15/html/FreeIPA_Guide/viewing-the_Password_Policy.html
@@ -0,0 +1,108 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>11.2. Viewing Password Policies</title><link rel="stylesheet" type="text/css" href="Common_Content/css/default.css" /><link rel="stylesheet" media="print" href="Common_Content/css/print.css" type="text/css" /><meta name="generator" content="publican 2.7" /><meta name="package" content="Fedora-FreeIPA_Guide-15-en-US-2.1.2-0.0.17" /><script type="text/javascript" src="../../../../../toc.js"></script><script type="text/javascript">
+ addID('Fedora');
+
+ addID('Fedora.15');
+
+ addID('Fedora.15.books');
+ addID('Fedora.15.FreeIPA_Guide');
+ </script><link rel="home" href="index.html" title="FreeIPA: Identity/Policy Management" /><link rel="up" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="prev" href="user-pwdpolicy.html" title="Chapter 11. Policy: Defining Password Policies" /><link rel="next" href="The_IPA_Password_Policy-Editing_the_Password_Policy.html" title="11.3. Editing the Global Password Policy" /></head><body class=" toc_embeded "><div id="tocdiv" class="toc"><iframe id="tocframe" class="toc" src="../../../../toc.html">This is an iframe, to view it upgrade your browser or enable iframe display.</iframe></div><p id="title"><a class="left" href="http://www.fedoraproject.org"><img src="Common_Content/images/image_left.png" alt="Product Site" /></a><a class="right" href="http://docs.fedoraproject.org"><img src="Common_Content/images/image_right.png" alt="Documentation Site" /></a></p><ul class="docnav"><li class="previous"><a accesskey="p
" href="user-pwdpolicy.html"><strong>Prev</strong></a></li><li class="next"><a accesskey="n" href="The_IPA_Password_Policy-Editing_the_Password_Policy.html"><strong>Next</strong></a></li></ul><div class="section" id="viewing-the_Password_Policy"><div class="titlepage"><div><div keep-together.within-column="always"><h2 class="title" id="viewing-the_Password_Policy">11.2. Viewing Password Policies</h2></div></div></div><div class="para">
+ There can be multiple password policies configured in FreeIPA. There is always a global policy, which is created with the server. Additional policies can be created for groups in FreeIPA.
+ </div><div class="para">
+ The UI lists all of the group password policies and the global policy on the <span class="guilabel"><strong>Password Policies</strong></span> page.
+ </div><div class="para">
+ Using the CLI, both global and group-level password policies can be viewed using the <code class="command">pwpolicy-show</code> command. The CLI can also display the password policy in effect for a user.
+ </div><div class="section" id="viewing-global"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="viewing-global">11.2.1. Viewing the Global Password Policy</h3></div></div></div><div class="para">
+ The global password policy is created with the server. This applies to every user until a group-level password policy supersedes it.
+ </div><div class="para">
+ The default settings for the global password policy are listed in <a class="xref" href="viewing-the_Password_Policy.html#tab.default-global">Table 11.2, “Default Global Password Policy”</a>.
+ </div><div class="table" id="tab.default-global"><h6>Table 11.2. Default Global Password Policy</h6><div class="table-contents"><table summary="Default Global Password Policy" border="1"><colgroup><col width="50%" /><col width="50%" /></colgroup><thead><tr><th>
+ Attribute
+ </th><th>
+ Value
+ </th></tr></thead><tbody><tr><td>
+ Max lifetime
+ </td><td>
+ 90
+ </td></tr><tr><td>
+ Max lifetime
+ </td><td>
+ 90 (days)
+ </td></tr><tr><td>
+ Min lifetime
+ </td><td>
+ 1 (hour)
+ </td></tr><tr><td>
+ History size
+ </td><td>
+ 0 (unset)
+ </td></tr><tr><td>
+ Character classes
+ </td><td>
+ 0 (unset)
+ </td></tr><tr><td>
+ Min length
+ </td><td>
+ 8
+ </td></tr><tr><td>
+ Max failures
+ </td><td>
+ 6
+ </td></tr><tr><td>
+ Failure reset interval
+ </td><td>
+ 60
+ </td></tr><tr><td>
+ Lockout duration
+ </td><td>
+ 600
+ </td></tr></tbody></table></div></div><br class="table-break" /><div class="section" id="viewing-global-pwdpolicy-u"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-global-pwdpolicy-u">11.2.1.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. The global password policy is defined by the <span class="guilabel"><strong>global_policy</strong></span> group. Click the group link.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ The global policy is displayed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-global.png" width="444" /></div></div></li></ol></div></div><div class="section" id="viewing-global-pwdpolicy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-global-pwdpolicy-cmd">11.2.1.2. With the Command Line</h4></div></div></div><div class="para">
+ To view the global policy, simply run the <code class="command">pwpolicy-show</code> command with no arguments:
+ </div><pre class="screen">$ ipa pwpolicy-show
+
+ Group: global_policy
+ Max lifetime (days): 90
+ Min lifetime (hours): 1
+ History size: 0
+ Character classes: 0
+ Min length: 8
+ Max failures: 6
+ Failure reset interval: 60
+ Lockout duration: 600</pre></div></div><div class="section" id="viewing-group-pwd-policies"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="viewing-group-pwd-policies">11.2.2. Viewing Group-Level Password Policies</h3></div></div></div><div class="section" id="viewing-group-pwdpolicy-u"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-group-pwdpolicy-u">11.2.2.1. With the Web UI</h4></div></div></div><div class="orderedlist"><ol><li class="listitem"><div class="para">
+ Click the <span class="guilabel"><strong>Policy</strong></span> tab, and then click the <span class="guilabel"><strong>Password Policies</strong></span> subtab.
+ </div></li><li class="listitem"><div class="para">
+ All of the policies in the UI are listed by group. Click the name of the group which is assigned the policy.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy-page.png" width="444" /></div></div></li><li class="listitem"><div class="para">
+ The group policy is displayed.
+ </div><div class="informalfigure"><div class="mediaobject"><img src="images/pwd-policy2.png" width="444" /></div></div></li></ol></div></div><div class="section" id="viewing-group-pwdpolicy-cmd"><div class="titlepage"><div><div keep-together.within-column="always"><h4 class="title" id="viewing-group-pwdpolicy-cmd">11.2.2.2. With the Command Line</h4></div></div></div><div class="para">
+ For a group-level password policy, specify the group name with the command:
+ </div><pre class="screen">$ ipa pwpolicy-show examplegroup
+
+ Group: global_policy
+ Max lifetime (days): 90
+ Min lifetime (hours): 1
+ History size: 3
+ Character classes: 4
+ Min length: 8
+ Max failures: 3
+ Failure reset interval: 15
+ Lockout duration: 150</pre></div></div><div class="section" id="viewing-pwdpolicy-user"><div class="titlepage"><div><div keep-together.within-column="always"><h3 class="title" id="viewing-pwdpolicy-user">11.2.3. Viewing the Password Policy in Effect for a User</h3></div></div></div><div class="para">
+ A user may belong to multiple groups, each with their own separate password policies. These policies are not additive. Only one policy is in effect at a time and it applies to all password policy attributes. To see which policy is in effect for a specific user, the <code class="command">pwpolicy-show</code> command can be run for a specific user. The results also show <span class="emphasis"><em>which</em></span> group policy is in effect for that user.
+ </div><pre class="screen">$ ipa pwpolicy-show jsmith
+
+ Group: admins
+ Max lifetime (days): 90
+ Min lifetime (hours): 1
+ History size: 0
+ Character classes: 0
+ Min length: 8
+ Max failures: 6
+ Failure reset interval: 60
+ Lockout duration: 600</pre></div></div><ul class="docnav"><li class="previous"><a accesskey="p" href="user-pwdpolicy.html"><strong>Prev</strong>Chapter 11. Policy: Defining Password Policies</a></li><li class="up"><a accesskey="u" href="#"><strong>Up</strong></a></li><li class="home"><a accesskey="h" href="index.html"><strong>Home</strong></a></li><li class="next"><a accesskey="n" href="The_IPA_Password_Policy-Editing_the_Password_Policy.html"><strong>Next</strong>11.3. Editing the Global Password Policy</a></li></ul></body></html>
diff --git a/public_html/en-US/Fedora/15/pdf/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.pdf b/public_html/en-US/Fedora/15/pdf/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.pdf
index da6bf9c..fded5e2 100644
Binary files a/public_html/en-US/Fedora/15/pdf/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.pdf and b/public_html/en-US/Fedora/15/pdf/FreeIPA_Guide/Fedora-15-FreeIPA_Guide-en-US.pdf differ
diff --git a/public_html/en-US/opds-Fedora.xml b/public_html/en-US/opds-Fedora.xml
index 948c053..228cf80 100644
--- a/public_html/en-US/opds-Fedora.xml
+++ b/public_html/en-US/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/en-US/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>en-US</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/en-US/opds-Fedora_Contributor_Documentation.xml b/public_html/en-US/opds-Fedora_Contributor_Documentation.xml
index 348729b..46f5cee 100644
--- a/public_html/en-US/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/en-US/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/en-US/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/en-US/opds-Fedora_Core.xml b/public_html/en-US/opds-Fedora_Core.xml
index b3d9ecb..90d553e 100644
--- a/public_html/en-US/opds-Fedora_Core.xml
+++ b/public_html/en-US/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/en-US/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/en-US/opds-Fedora_Draft_Documentation.xml b/public_html/en-US/opds-Fedora_Draft_Documentation.xml
index 825dcee..83c884c 100644
--- a/public_html/en-US/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/en-US/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/en-US/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/en-US/opds.xml b/public_html/en-US/opds.xml
index 2f57493..6c312cb 100644
--- a/public_html/en-US/opds.xml
+++ b/public_html/en-US/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/en-US/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/en-US/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>en-US</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/en-US/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>en-US</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/en-US/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>en-US</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/en-US/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>en-US</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/en-US/toc.html b/public_html/en-US/toc.html
index ea07b50..58c0d8d 100644
--- a/public_html/en-US/toc.html
+++ b/public_html/en-US/toc.html
@@ -305,7 +305,7 @@
<a class="type" href="./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed">
@@ -797,7 +797,7 @@
<a class="type" href="./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -808,10 +808,10 @@
<div id='Fedora..Security_Guide' class="book collapsed">
<a class="type" href="Fedora//html/Security_Guide/index.html" onclick="window.top.location='./Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types" onclick="work=0;">
- <a class="type" href="./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="./Fedora//html/Security_Guide/index.html" onclick="window.top.location='./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -846,7 +846,7 @@
<a class="type" href="./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1069,7 +1069,7 @@
<a class="type" href="./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/es-ES/opds-Fedora.xml b/public_html/es-ES/opds-Fedora.xml
index ece0063..b205677 100644
--- a/public_html/es-ES/opds-Fedora.xml
+++ b/public_html/es-ES/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/es-ES/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>es-ES</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1293,7 +1293,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1305,7 +1305,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/es-ES/opds-Fedora_15.xml b/public_html/es-ES/opds-Fedora_15.xml
index a990df3..7b711c2 100644
--- a/public_html/es-ES/opds-Fedora_15.xml
+++ b/public_html/es-ES/opds-Fedora_15.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/es-ES/opds-Fedora_15.xml</id>
<title>Fedora 15</title>
<subtitle>Fedora 15</subtitle>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/es-ES/opds-Fedora_Contributor_Documentation.xml b/public_html/es-ES/opds-Fedora_Contributor_Documentation.xml
index 1142dc7..4db01ac 100644
--- a/public_html/es-ES/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/es-ES/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/es-ES/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/es-ES/opds-Fedora_Core.xml b/public_html/es-ES/opds-Fedora_Core.xml
index 1c58652..51fe7a0 100644
--- a/public_html/es-ES/opds-Fedora_Core.xml
+++ b/public_html/es-ES/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/es-ES/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/es-ES/opds-Fedora_Draft_Documentation.xml b/public_html/es-ES/opds-Fedora_Draft_Documentation.xml
index 1f6facb..e4d7252 100644
--- a/public_html/es-ES/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/es-ES/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/es-ES/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/es-ES/opds.xml b/public_html/es-ES/opds.xml
index 78fd678..f7de157 100644
--- a/public_html/es-ES/opds.xml
+++ b/public_html/es-ES/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/es-ES/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/es-ES/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>es-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora 15</title>
<id>http://docs.fedoraproject.org/es-ES/Fedora_15/opds-Fedora_15.xml</id>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>es-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_15.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/es-ES/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>es-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/es-ES/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>es-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -47,7 +47,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/es-ES/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:17</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>es-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/es-ES/toc.html b/public_html/es-ES/toc.html
index a914166..7c5077b 100644
--- a/public_html/es-ES/toc.html
+++ b/public_html/es-ES/toc.html
@@ -101,7 +101,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-es-ES.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-es-ES.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-es-ES.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-es-ES.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-es-ES.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -240,7 +240,7 @@
<a class="type" href="./Fedora/14/epub/Software_Management_Guide/Fedora-14-Software_Management_Guide-es-ES.epub" >epub</a>
<a class="type" href="./Fedora/14/html/Software_Management_Guide/index.html" onclick="window.top.location='./Fedora/14/html/Software_Management_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/14/html-single/Software_Management_Guide/index.html" onclick="window.top.location='./Fedora/14/html-single/Software_Management_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/14/pdf/Software_Management_Guide/Fedora-0.1-Software_Management_Guide-es-ES.pdf" onclick="window.top.location='./Fedora/14/pdf/Software_Management_Guide/Fedora-0.1-Software_Management_Guide-es-ES.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/14/pdf/Software_Management_Guide/Fedora-14-Software_Management_Guide-es-ES.pdf" onclick="window.top.location='./Fedora/14/pdf/Software_Management_Guide/Fedora-14-Software_Management_Guide-es-ES.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.14.User_Guide' class="book collapsed">
@@ -313,7 +313,7 @@
<a class="type" href="./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-es-ES.epub" >epub</a>
<a class="type" href="./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-es-ES.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-es-ES.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-es-ES.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-es-ES.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed">
@@ -987,7 +987,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1003,10 +1003,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1063,7 +1063,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1326,7 +1326,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/fa-IR/opds-Fedora.xml b/public_html/fa-IR/opds-Fedora.xml
index 98c5bc2..56cb3fe 100644
--- a/public_html/fa-IR/opds-Fedora.xml
+++ b/public_html/fa-IR/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fa-IR/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>fa-IR</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/fa-IR/opds-Fedora_Contributor_Documentation.xml b/public_html/fa-IR/opds-Fedora_Contributor_Documentation.xml
index 1363993..cb4f2d1 100644
--- a/public_html/fa-IR/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/fa-IR/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fa-IR/opds-Fedora_Contributor_Documentation.xml</id>
<title>مستندات مشارکت کننده فدورا</title>
<subtitle>مستندات مشارکت کننده فدورا</subtitle>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fa-IR/opds-Fedora_Core.xml b/public_html/fa-IR/opds-Fedora_Core.xml
index 13e5055..7407fa0 100644
--- a/public_html/fa-IR/opds-Fedora_Core.xml
+++ b/public_html/fa-IR/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fa-IR/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fa-IR/opds-Fedora_Draft_Documentation.xml b/public_html/fa-IR/opds-Fedora_Draft_Documentation.xml
index f734c53..1a21e0a 100644
--- a/public_html/fa-IR/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/fa-IR/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fa-IR/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fa-IR/opds.xml b/public_html/fa-IR/opds.xml
index 2fc4cdb..981c8c2 100644
--- a/public_html/fa-IR/opds.xml
+++ b/public_html/fa-IR/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/fa-IR/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/fa-IR/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fa-IR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>مستندات مشارکت کننده فدورا</title>
<id>http://docs.fedoraproject.org/fa-IR/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fa-IR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/fa-IR/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fa-IR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/fa-IR/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fa-IR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/fa-IR/toc.html b/public_html/fa-IR/toc.html
index 190d6cf..2751afc 100644
--- a/public_html/fa-IR/toc.html
+++ b/public_html/fa-IR/toc.html
@@ -331,7 +331,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -849,7 +849,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -865,10 +865,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -907,7 +907,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1170,7 +1170,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/fi-FI/opds-Fedora.xml b/public_html/fi-FI/opds-Fedora.xml
index e9c5d29..8982d17 100644
--- a/public_html/fi-FI/opds-Fedora.xml
+++ b/public_html/fi-FI/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fi-FI/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>fi-FI</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/fi-FI/opds-Fedora_Contributor_Documentation.xml b/public_html/fi-FI/opds-Fedora_Contributor_Documentation.xml
index 1df2c2e..6e67f5c 100644
--- a/public_html/fi-FI/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/fi-FI/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fi-FI/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fi-FI/opds-Fedora_Core.xml b/public_html/fi-FI/opds-Fedora_Core.xml
index 38452ad..fc879f7 100644
--- a/public_html/fi-FI/opds-Fedora_Core.xml
+++ b/public_html/fi-FI/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fi-FI/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fi-FI/opds-Fedora_Draft_Documentation.xml b/public_html/fi-FI/opds-Fedora_Draft_Documentation.xml
index a010f94..02edecb 100644
--- a/public_html/fi-FI/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/fi-FI/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fi-FI/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fi-FI/opds.xml b/public_html/fi-FI/opds.xml
index 80ebc79..7a11b52 100644
--- a/public_html/fi-FI/opds.xml
+++ b/public_html/fi-FI/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/fi-FI/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:20</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/fi-FI/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fi-FI</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/fi-FI/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fi-FI</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/fi-FI/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fi-FI</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/fi-FI/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fi-FI</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/fi-FI/toc.html b/public_html/fi-FI/toc.html
index b990e5a..e643a18 100644
--- a/public_html/fi-FI/toc.html
+++ b/public_html/fi-FI/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-fi-FI.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-fi-FI.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-fi-FI.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-fi-FI.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-fi-FI.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -341,7 +341,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Installation_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.13.Installation_Guide.types');">
@@ -665,7 +665,7 @@
<a class="type" href="./Fedora/10/epub/Fedora_Live_Images/Fedora-10-Fedora_Live_Images-fi-FI.epub" >epub</a>
<a class="type" href="./Fedora/10/html/Fedora_Live_Images/index.html" onclick="window.top.location='./Fedora/10/html/Fedora_Live_Images/index.html';return false;">html</a>
<a class="type" href="./Fedora/10/html-single/Fedora_Live_Images/index.html" onclick="window.top.location='./Fedora/10/html-single/Fedora_Live_Images/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/10/pdf/Fedora_Live_Images/Fedora-13-Fedora_Live_Images-fi-FI.pdf" onclick="window.top.location='./Fedora/10/pdf/Fedora_Live_Images/Fedora-13-Fedora_Live_Images-fi-FI.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/10/pdf/Fedora_Live_Images/Fedora-10-Fedora_Live_Images-fi-FI.pdf" onclick="window.top.location='./Fedora/10/pdf/Fedora_Live_Images/Fedora-10-Fedora_Live_Images-fi-FI.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.10.Making_Fedora_Discs' class="book collapsed">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/fr-FR/opds-Fedora.xml b/public_html/fr-FR/opds-Fedora.xml
index 2371811..67eb73f 100644
--- a/public_html/fr-FR/opds-Fedora.xml
+++ b/public_html/fr-FR/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fr-FR/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:20</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>fr-FR</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1294,7 +1294,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1306,7 +1306,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/fr-FR/opds-Fedora_Contributor_Documentation.xml b/public_html/fr-FR/opds-Fedora_Contributor_Documentation.xml
index 19bc652..7ce9c60 100644
--- a/public_html/fr-FR/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/fr-FR/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fr-FR/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fr-FR/opds-Fedora_Core.xml b/public_html/fr-FR/opds-Fedora_Core.xml
index bcc02a9..7324026 100644
--- a/public_html/fr-FR/opds-Fedora_Core.xml
+++ b/public_html/fr-FR/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fr-FR/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:23</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fr-FR/opds-Fedora_Draft_Documentation.xml b/public_html/fr-FR/opds-Fedora_Draft_Documentation.xml
index 77b0ee9..9b60972 100644
--- a/public_html/fr-FR/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/fr-FR/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/fr-FR/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/fr-FR/opds.xml b/public_html/fr-FR/opds.xml
index eb58a2e..fb2e103 100644
--- a/public_html/fr-FR/opds.xml
+++ b/public_html/fr-FR/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/fr-FR/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/fr-FR/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:20</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fr-FR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/fr-FR/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fr-FR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/fr-FR/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fr-FR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/fr-FR/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>fr-FR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/fr-FR/toc.html b/public_html/fr-FR/toc.html
index 67892dd..c461d0f 100644
--- a/public_html/fr-FR/toc.html
+++ b/public_html/fr-FR/toc.html
@@ -366,7 +366,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Installation_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.13.Installation_Guide.types');">
@@ -848,7 +848,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -864,10 +864,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -907,7 +907,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1170,7 +1170,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/gu-IN/opds-Fedora.xml b/public_html/gu-IN/opds-Fedora.xml
index 8139153..e33ff95 100644
--- a/public_html/gu-IN/opds-Fedora.xml
+++ b/public_html/gu-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/gu-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>gu-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/gu-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/gu-IN/opds-Fedora_Contributor_Documentation.xml
index 4fbeed2..1b0de47 100644
--- a/public_html/gu-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/gu-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/gu-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/gu-IN/opds-Fedora_Core.xml b/public_html/gu-IN/opds-Fedora_Core.xml
index 6a86e8a..19c7a49 100644
--- a/public_html/gu-IN/opds-Fedora_Core.xml
+++ b/public_html/gu-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/gu-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/gu-IN/opds-Fedora_Draft_Documentation.xml b/public_html/gu-IN/opds-Fedora_Draft_Documentation.xml
index d62a217..e0260f4 100644
--- a/public_html/gu-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/gu-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/gu-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/gu-IN/opds.xml b/public_html/gu-IN/opds.xml
index 5353169..35b4a1a 100644
--- a/public_html/gu-IN/opds.xml
+++ b/public_html/gu-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/gu-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/gu-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>gu-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/gu-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>gu-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/gu-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>gu-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/gu-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>gu-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/gu-IN/toc.html b/public_html/gu-IN/toc.html
index da9d2ad..a0ccf2e 100644
--- a/public_html/gu-IN/toc.html
+++ b/public_html/gu-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/he-IL/opds-Fedora.xml b/public_html/he-IL/opds-Fedora.xml
index 205ed97..85666d9 100644
--- a/public_html/he-IL/opds-Fedora.xml
+++ b/public_html/he-IL/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/he-IL/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>he-IL</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/he-IL/opds-Fedora_Contributor_Documentation.xml b/public_html/he-IL/opds-Fedora_Contributor_Documentation.xml
index 81eb69c..19be381 100644
--- a/public_html/he-IL/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/he-IL/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/he-IL/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/he-IL/opds-Fedora_Core.xml b/public_html/he-IL/opds-Fedora_Core.xml
index b9db676..750ba8c 100644
--- a/public_html/he-IL/opds-Fedora_Core.xml
+++ b/public_html/he-IL/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/he-IL/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/he-IL/opds-Fedora_Draft_Documentation.xml b/public_html/he-IL/opds-Fedora_Draft_Documentation.xml
index cd6f20f..7d8df4c 100644
--- a/public_html/he-IL/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/he-IL/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/he-IL/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/he-IL/opds.xml b/public_html/he-IL/opds.xml
index a105000..e4180da 100644
--- a/public_html/he-IL/opds.xml
+++ b/public_html/he-IL/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/he-IL/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/he-IL/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>he-IL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/he-IL/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>he-IL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/he-IL/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>he-IL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/he-IL/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>he-IL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/he-IL/toc.html b/public_html/he-IL/toc.html
index e33077a..fe47be4 100644
--- a/public_html/he-IL/toc.html
+++ b/public_html/he-IL/toc.html
@@ -332,7 +332,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/hi-IN/opds-Fedora.xml b/public_html/hi-IN/opds-Fedora.xml
index 9ebf1a3..a290745 100644
--- a/public_html/hi-IN/opds-Fedora.xml
+++ b/public_html/hi-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hi-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>hi-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/hi-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/hi-IN/opds-Fedora_Contributor_Documentation.xml
index 2d5fda9..5d47d03 100644
--- a/public_html/hi-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/hi-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hi-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/hi-IN/opds-Fedora_Core.xml b/public_html/hi-IN/opds-Fedora_Core.xml
index b392927..c3ece6b 100644
--- a/public_html/hi-IN/opds-Fedora_Core.xml
+++ b/public_html/hi-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hi-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/hi-IN/opds-Fedora_Draft_Documentation.xml b/public_html/hi-IN/opds-Fedora_Draft_Documentation.xml
index a69fdf2..14a6820 100644
--- a/public_html/hi-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/hi-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hi-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/hi-IN/opds.xml b/public_html/hi-IN/opds.xml
index 938bf97..d605ba1 100644
--- a/public_html/hi-IN/opds.xml
+++ b/public_html/hi-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/hi-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/hi-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hi-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/hi-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hi-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/hi-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hi-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/hi-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hi-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/hi-IN/toc.html b/public_html/hi-IN/toc.html
index 477430d..8f09819 100644
--- a/public_html/hi-IN/toc.html
+++ b/public_html/hi-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/hu-HU/opds-Fedora.xml b/public_html/hu-HU/opds-Fedora.xml
index 0787fd2..5455cf6 100644
--- a/public_html/hu-HU/opds-Fedora.xml
+++ b/public_html/hu-HU/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hu-HU/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>hu-HU</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/hu-HU/opds-Fedora_Contributor_Documentation.xml b/public_html/hu-HU/opds-Fedora_Contributor_Documentation.xml
index f2822ef..4faa1fc 100644
--- a/public_html/hu-HU/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/hu-HU/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hu-HU/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/hu-HU/opds-Fedora_Core.xml b/public_html/hu-HU/opds-Fedora_Core.xml
index 87c75b1..3a91eb7 100644
--- a/public_html/hu-HU/opds-Fedora_Core.xml
+++ b/public_html/hu-HU/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hu-HU/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/hu-HU/opds-Fedora_Draft_Documentation.xml b/public_html/hu-HU/opds-Fedora_Draft_Documentation.xml
index f580070..ebbcf05 100644
--- a/public_html/hu-HU/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/hu-HU/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/hu-HU/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/hu-HU/opds.xml b/public_html/hu-HU/opds.xml
index b97988b..5e26dc1 100644
--- a/public_html/hu-HU/opds.xml
+++ b/public_html/hu-HU/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/hu-HU/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/hu-HU/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hu-HU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/hu-HU/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hu-HU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/hu-HU/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hu-HU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/hu-HU/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hu-HU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/hu-HU/toc.html b/public_html/hu-HU/toc.html
index 18da234..b7429e0 100644
--- a/public_html/hu-HU/toc.html
+++ b/public_html/hu-HU/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/id-ID/opds-Fedora.xml b/public_html/id-ID/opds-Fedora.xml
index ccfda1e..91256d0 100644
--- a/public_html/id-ID/opds-Fedora.xml
+++ b/public_html/id-ID/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/id-ID/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>id-ID</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/id-ID/opds-Fedora_Contributor_Documentation.xml b/public_html/id-ID/opds-Fedora_Contributor_Documentation.xml
index c4eeadf..2b53ef4 100644
--- a/public_html/id-ID/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/id-ID/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/id-ID/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/id-ID/opds-Fedora_Core.xml b/public_html/id-ID/opds-Fedora_Core.xml
index c5ac329..97c6f8b 100644
--- a/public_html/id-ID/opds-Fedora_Core.xml
+++ b/public_html/id-ID/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/id-ID/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/id-ID/opds-Fedora_Draft_Documentation.xml b/public_html/id-ID/opds-Fedora_Draft_Documentation.xml
index dddd6cc..91791b5 100644
--- a/public_html/id-ID/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/id-ID/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/id-ID/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/id-ID/opds.xml b/public_html/id-ID/opds.xml
index 2699f9b..b46b569 100644
--- a/public_html/id-ID/opds.xml
+++ b/public_html/id-ID/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/id-ID/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/id-ID/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>id-ID</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/id-ID/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>id-ID</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/id-ID/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>id-ID</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/id-ID/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>id-ID</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/id-ID/toc.html b/public_html/id-ID/toc.html
index 8d32c6e..63e641e 100644
--- a/public_html/id-ID/toc.html
+++ b/public_html/id-ID/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-id-ID.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-id-ID.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-id-ID.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-id-ID.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-id-ID.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15' class="version collapsed untranslated" onclick="toggle(event, 'Fedora.15.untrans_books');">
@@ -332,7 +332,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Fedora_Live_Images' class="book collapsed" onclick="toggle(event, 'Fedora.13.Fedora_Live_Images.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/it-IT/opds-Fedora.xml b/public_html/it-IT/opds-Fedora.xml
index b698ff2..9003ab1 100644
--- a/public_html/it-IT/opds-Fedora.xml
+++ b/public_html/it-IT/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/it-IT/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:27</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>it-IT</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1294,7 +1294,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1306,7 +1306,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/it-IT/opds-Fedora_Contributor_Documentation.xml b/public_html/it-IT/opds-Fedora_Contributor_Documentation.xml
index a0fd185..84e6b3c 100644
--- a/public_html/it-IT/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/it-IT/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/it-IT/opds-Fedora_Contributor_Documentation.xml</id>
<title>Documentazione Collaboratori Fedora</title>
<subtitle>Documentazione Collaboratori Fedora</subtitle>
- <updated>2011-09-16T14:56:27</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/it-IT/opds-Fedora_Core.xml b/public_html/it-IT/opds-Fedora_Core.xml
index 4b67b14..5dfc11e 100644
--- a/public_html/it-IT/opds-Fedora_Core.xml
+++ b/public_html/it-IT/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/it-IT/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:27</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/it-IT/opds-Fedora_Draft_Documentation.xml b/public_html/it-IT/opds-Fedora_Draft_Documentation.xml
index 6bf125a..3b8a384 100644
--- a/public_html/it-IT/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/it-IT/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/it-IT/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:28</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/it-IT/opds.xml b/public_html/it-IT/opds.xml
index fbb50dd..9b571a3 100644
--- a/public_html/it-IT/opds.xml
+++ b/public_html/it-IT/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/it-IT/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:28</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/it-IT/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:27</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>it-IT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Documentazione Collaboratori Fedora</title>
<id>http://docs.fedoraproject.org/it-IT/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:27</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>it-IT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/it-IT/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:27</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>it-IT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/it-IT/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:28</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>it-IT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/it-IT/toc.html b/public_html/it-IT/toc.html
index c1186e7..a6f34f7 100644
--- a/public_html/it-IT/toc.html
+++ b/public_html/it-IT/toc.html
@@ -1005,7 +1005,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1021,10 +1021,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1064,7 +1064,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1327,7 +1327,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ja-JP/opds-Fedora.xml b/public_html/ja-JP/opds-Fedora.xml
index 95bfdcf..f0beebb 100644
--- a/public_html/ja-JP/opds-Fedora.xml
+++ b/public_html/ja-JP/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja-JP/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ja-JP</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1332,7 +1332,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1344,7 +1344,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ja-JP/opds-Fedora_Contributor_Documentation.xml b/public_html/ja-JP/opds-Fedora_Contributor_Documentation.xml
index 81ac991..0eba9f3 100644
--- a/public_html/ja-JP/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ja-JP/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja-JP/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora コントリビュータ用ドキュメント</title>
<subtitle>Fedora コントリビュータ用ドキュメント</subtitle>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ja-JP/opds-Fedora_Core.xml b/public_html/ja-JP/opds-Fedora_Core.xml
index bd5ece1..ba1b871 100644
--- a/public_html/ja-JP/opds-Fedora_Core.xml
+++ b/public_html/ja-JP/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja-JP/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ja-JP/opds-Fedora_Draft_Documentation.xml b/public_html/ja-JP/opds-Fedora_Draft_Documentation.xml
index a800c44..971acdc 100644
--- a/public_html/ja-JP/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ja-JP/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja-JP/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora ドラフト文書</title>
<subtitle>Fedora ドラフト文書</subtitle>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ja-JP/opds.xml b/public_html/ja-JP/opds.xml
index 489fef7..54e2f89 100644
--- a/public_html/ja-JP/opds.xml
+++ b/public_html/ja-JP/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ja-JP/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ja-JP/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja-JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora コントリビュータ用ドキュメント</title>
<id>http://docs.fedoraproject.org/ja-JP/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja-JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ja-JP/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja-JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora ドラフト文書</title>
<id>http://docs.fedoraproject.org/ja-JP/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja-JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ja-JP/toc.html b/public_html/ja-JP/toc.html
index 0763f66..3da40fb 100644
--- a/public_html/ja-JP/toc.html
+++ b/public_html/ja-JP/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ja-JP.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ja-JP.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ja-JP.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ja-JP.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ja-JP.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -333,7 +333,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -851,7 +851,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -867,10 +867,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -910,7 +910,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1173,7 +1173,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ja_JP/opds-Fedora.xml b/public_html/ja_JP/opds-Fedora.xml
index 2d295e5..03724ee 100644
--- a/public_html/ja_JP/opds-Fedora.xml
+++ b/public_html/ja_JP/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja_JP/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ja_JP</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ja_JP/opds-Fedora_Contributor_Documentation.xml b/public_html/ja_JP/opds-Fedora_Contributor_Documentation.xml
index 5243de2..f9b45ca 100644
--- a/public_html/ja_JP/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ja_JP/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja_JP/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ja_JP/opds-Fedora_Core.xml b/public_html/ja_JP/opds-Fedora_Core.xml
index d005597..42ad0cc 100644
--- a/public_html/ja_JP/opds-Fedora_Core.xml
+++ b/public_html/ja_JP/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja_JP/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ja_JP/opds-Fedora_Draft_Documentation.xml b/public_html/ja_JP/opds-Fedora_Draft_Documentation.xml
index bc3f1b1..d90f6f8 100644
--- a/public_html/ja_JP/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ja_JP/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ja_JP/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora ドラフト文書</title>
<subtitle>Fedora ドラフト文書</subtitle>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ja_JP/opds.xml b/public_html/ja_JP/opds.xml
index 6819b03..9fd5d14 100644
--- a/public_html/ja_JP/opds.xml
+++ b/public_html/ja_JP/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ja_JP/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ja_JP/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja_JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/ja_JP/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja_JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ja_JP/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja_JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora ドラフト文書</title>
<id>http://docs.fedoraproject.org/ja_JP/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja_JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ja_JP/toc.html b/public_html/ja_JP/toc.html
index 4fb3efe..159c166 100644
--- a/public_html/ja_JP/toc.html
+++ b/public_html/ja_JP/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/kn-IN/opds-Fedora.xml b/public_html/kn-IN/opds-Fedora.xml
index a83b173..90ea58a 100644
--- a/public_html/kn-IN/opds-Fedora.xml
+++ b/public_html/kn-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/kn-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>kn-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/kn-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/kn-IN/opds-Fedora_Contributor_Documentation.xml
index 0fde014..197306c 100644
--- a/public_html/kn-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/kn-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/kn-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/kn-IN/opds-Fedora_Core.xml b/public_html/kn-IN/opds-Fedora_Core.xml
index 5588156..ebc60c7 100644
--- a/public_html/kn-IN/opds-Fedora_Core.xml
+++ b/public_html/kn-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/kn-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/kn-IN/opds-Fedora_Draft_Documentation.xml b/public_html/kn-IN/opds-Fedora_Draft_Documentation.xml
index 5554638..288af4a 100644
--- a/public_html/kn-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/kn-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/kn-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/kn-IN/opds.xml b/public_html/kn-IN/opds.xml
index a1f7c0d..30713eb 100644
--- a/public_html/kn-IN/opds.xml
+++ b/public_html/kn-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/kn-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/kn-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>kn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/kn-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>kn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/kn-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>kn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/kn-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>kn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/kn-IN/toc.html b/public_html/kn-IN/toc.html
index 2292336..b2fee28 100644
--- a/public_html/kn-IN/toc.html
+++ b/public_html/kn-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ko-KR/opds-Fedora.xml b/public_html/ko-KR/opds-Fedora.xml
index ca816fc..fdb79ba 100644
--- a/public_html/ko-KR/opds-Fedora.xml
+++ b/public_html/ko-KR/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ko-KR/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ko-KR</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ko-KR/opds-Fedora_Contributor_Documentation.xml b/public_html/ko-KR/opds-Fedora_Contributor_Documentation.xml
index 8da4a8d..561149e 100644
--- a/public_html/ko-KR/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ko-KR/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ko-KR/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ko-KR/opds-Fedora_Core.xml b/public_html/ko-KR/opds-Fedora_Core.xml
index c267584..dee37fc 100644
--- a/public_html/ko-KR/opds-Fedora_Core.xml
+++ b/public_html/ko-KR/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ko-KR/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ko-KR/opds-Fedora_Draft_Documentation.xml b/public_html/ko-KR/opds-Fedora_Draft_Documentation.xml
index 3782a07..76b6153 100644
--- a/public_html/ko-KR/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ko-KR/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ko-KR/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ko-KR/opds.xml b/public_html/ko-KR/opds.xml
index 79f7c58..d9c0256 100644
--- a/public_html/ko-KR/opds.xml
+++ b/public_html/ko-KR/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ko-KR/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ko-KR/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ko-KR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/ko-KR/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ko-KR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ko-KR/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ko-KR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/ko-KR/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ko-KR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ko-KR/toc.html b/public_html/ko-KR/toc.html
index 517e989..c04ebf5 100644
--- a/public_html/ko-KR/toc.html
+++ b/public_html/ko-KR/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ml-IN/opds-Fedora.xml b/public_html/ml-IN/opds-Fedora.xml
index 6cc5ac8..7657918 100644
--- a/public_html/ml-IN/opds-Fedora.xml
+++ b/public_html/ml-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ml-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ml-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ml-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/ml-IN/opds-Fedora_Contributor_Documentation.xml
index e521ba3..8991662 100644
--- a/public_html/ml-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ml-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ml-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ml-IN/opds-Fedora_Core.xml b/public_html/ml-IN/opds-Fedora_Core.xml
index 8e67d54..7bd3b26 100644
--- a/public_html/ml-IN/opds-Fedora_Core.xml
+++ b/public_html/ml-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ml-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ml-IN/opds-Fedora_Draft_Documentation.xml b/public_html/ml-IN/opds-Fedora_Draft_Documentation.xml
index 76ee16c..7835f06 100644
--- a/public_html/ml-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ml-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ml-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ml-IN/opds.xml b/public_html/ml-IN/opds.xml
index f2c8576..f1681d4 100644
--- a/public_html/ml-IN/opds.xml
+++ b/public_html/ml-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ml-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ml-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ml-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/ml-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ml-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ml-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ml-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/ml-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ml-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ml-IN/toc.html b/public_html/ml-IN/toc.html
index 7d43315..d81cd8c 100644
--- a/public_html/ml-IN/toc.html
+++ b/public_html/ml-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/mr-IN/opds-Fedora.xml b/public_html/mr-IN/opds-Fedora.xml
index 51f604a..14b2745 100644
--- a/public_html/mr-IN/opds-Fedora.xml
+++ b/public_html/mr-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/mr-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>mr-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/mr-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/mr-IN/opds-Fedora_Contributor_Documentation.xml
index 9c453b3..a2a723c 100644
--- a/public_html/mr-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/mr-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/mr-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/mr-IN/opds-Fedora_Core.xml b/public_html/mr-IN/opds-Fedora_Core.xml
index 86a6084..2e09ab2 100644
--- a/public_html/mr-IN/opds-Fedora_Core.xml
+++ b/public_html/mr-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/mr-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/mr-IN/opds-Fedora_Draft_Documentation.xml b/public_html/mr-IN/opds-Fedora_Draft_Documentation.xml
index 2f224ef..17a1920 100644
--- a/public_html/mr-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/mr-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/mr-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/mr-IN/opds.xml b/public_html/mr-IN/opds.xml
index 37f354f..16041dd 100644
--- a/public_html/mr-IN/opds.xml
+++ b/public_html/mr-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/mr-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/mr-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>mr-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/mr-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>mr-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/mr-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>mr-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/mr-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>mr-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/mr-IN/toc.html b/public_html/mr-IN/toc.html
index bf79f4a..1c5ca01 100644
--- a/public_html/mr-IN/toc.html
+++ b/public_html/mr-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/nb-NO/opds-Fedora.xml b/public_html/nb-NO/opds-Fedora.xml
index 0ead901..dc44eaf 100644
--- a/public_html/nb-NO/opds-Fedora.xml
+++ b/public_html/nb-NO/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nb-NO/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>nb-NO</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/nb-NO/opds-Fedora_Contributor_Documentation.xml b/public_html/nb-NO/opds-Fedora_Contributor_Documentation.xml
index bbc7b73..6f0143f 100644
--- a/public_html/nb-NO/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/nb-NO/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nb-NO/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/nb-NO/opds-Fedora_Core.xml b/public_html/nb-NO/opds-Fedora_Core.xml
index d3121db..af49bd9 100644
--- a/public_html/nb-NO/opds-Fedora_Core.xml
+++ b/public_html/nb-NO/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nb-NO/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/nb-NO/opds-Fedora_Draft_Documentation.xml b/public_html/nb-NO/opds-Fedora_Draft_Documentation.xml
index 857ac2f..0c9e593 100644
--- a/public_html/nb-NO/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/nb-NO/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nb-NO/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/nb-NO/opds.xml b/public_html/nb-NO/opds.xml
index 616b2a6..b6e2f81 100644
--- a/public_html/nb-NO/opds.xml
+++ b/public_html/nb-NO/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/nb-NO/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/nb-NO/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>nb-NO</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/nb-NO/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>nb-NO</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/nb-NO/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>nb-NO</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/nb-NO/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>nb-NO</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/nb-NO/toc.html b/public_html/nb-NO/toc.html
index c0d61cc..7672faa 100644
--- a/public_html/nb-NO/toc.html
+++ b/public_html/nb-NO/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/nl-NL/opds-Fedora.xml b/public_html/nl-NL/opds-Fedora.xml
index 088830a..dae50a9 100644
--- a/public_html/nl-NL/opds-Fedora.xml
+++ b/public_html/nl-NL/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nl-NL/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>nl-NL</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1294,7 +1294,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1306,7 +1306,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/nl-NL/opds-Fedora_Contributor_Documentation.xml b/public_html/nl-NL/opds-Fedora_Contributor_Documentation.xml
index a1b0018..57eacad 100644
--- a/public_html/nl-NL/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/nl-NL/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nl-NL/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/nl-NL/opds-Fedora_Core.xml b/public_html/nl-NL/opds-Fedora_Core.xml
index 36c8c65..9621a95 100644
--- a/public_html/nl-NL/opds-Fedora_Core.xml
+++ b/public_html/nl-NL/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nl-NL/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/nl-NL/opds-Fedora_Draft_Documentation.xml b/public_html/nl-NL/opds-Fedora_Draft_Documentation.xml
index b93472b..012cb23 100644
--- a/public_html/nl-NL/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/nl-NL/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/nl-NL/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/nl-NL/opds.xml b/public_html/nl-NL/opds.xml
index c464ebc..9735da3 100644
--- a/public_html/nl-NL/opds.xml
+++ b/public_html/nl-NL/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/nl-NL/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/nl-NL/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>nl-NL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/nl-NL/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>nl-NL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/nl-NL/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>nl-NL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/nl-NL/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:36</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>nl-NL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/nl-NL/toc.html b/public_html/nl-NL/toc.html
index ffd445b..3a2fe1c 100644
--- a/public_html/nl-NL/toc.html
+++ b/public_html/nl-NL/toc.html
@@ -1023,7 +1023,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1039,10 +1039,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1082,7 +1082,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1345,7 +1345,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/opds.xml b/public_html/opds.xml
index 36786ec..853ee76 100644
--- a/public_html/opds.xml
+++ b/public_html/opds.xml
@@ -7,7 +7,7 @@
<link rel="start" href="http://docs.fedoraproject.org/opds.xml" type="application/atom+xml;type=feed;profile=opds-catalog"/>
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<title>Fedora Documentation</title>
- <updated>2011-09-16T14:57:03</updated>
+ <updated>2011-09-16T17:58:31</updated>
<!--author>
<name></name>
<uri></uri>
@@ -16,7 +16,7 @@
<entry>
<title>অসমীয়া</title>
<id>as-IN/opds.xml</id>
- <updated>2011-09-16T14:56:06</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>as-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="as-IN/opds.xml"/>
@@ -24,7 +24,7 @@
<entry>
<title>български</title>
<id>bg-BG/opds.xml</id>
- <updated>2011-09-16T14:56:07</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bg-BG</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="bg-BG/opds.xml"/>
@@ -32,7 +32,7 @@
<entry>
<title>বাংলা</title>
<id>bn-IN/opds.xml</id>
- <updated>2011-09-16T14:56:08</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="bn-IN/opds.xml"/>
@@ -40,7 +40,7 @@
<entry>
<title>Bosanski</title>
<id>bs-BA/opds.xml</id>
- <updated>2011-09-16T14:56:09</updated>
+ <updated>2011-09-16T17:58:21</updated>
<dc:language>bs-BA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="bs-BA/opds.xml"/>
@@ -48,7 +48,7 @@
<entry>
<title>Català</title>
<id>ca-ES/opds.xml</id>
- <updated>2011-09-16T14:56:10</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>ca-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ca-ES/opds.xml"/>
@@ -56,7 +56,7 @@
<entry>
<title>Čeština</title>
<id>cs-CZ/opds.xml</id>
- <updated>2011-09-16T14:56:11</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>cs-CZ</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="cs-CZ/opds.xml"/>
@@ -64,7 +64,7 @@
<entry>
<title>Dansk</title>
<id>da-DK/opds.xml</id>
- <updated>2011-09-16T14:56:12</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>da-DK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="da-DK/opds.xml"/>
@@ -72,7 +72,7 @@
<entry>
<title>Deutsch</title>
<id>de-DE/opds.xml</id>
- <updated>2011-09-16T14:56:14</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>de-DE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="de-DE/opds.xml"/>
@@ -80,7 +80,7 @@
<entry>
<title>Ελληνικά</title>
<id>el-GR/opds.xml</id>
- <updated>2011-09-16T14:56:15</updated>
+ <updated>2011-09-16T17:58:22</updated>
<dc:language>el-GR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="el-GR/opds.xml"/>
@@ -88,7 +88,7 @@
<entry>
<title>English</title>
<id>en-US/opds.xml</id>
- <updated>2011-09-16T14:56:16</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>en-US</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="en-US/opds.xml"/>
@@ -96,7 +96,7 @@
<entry>
<title>Español</title>
<id>es-ES/opds.xml</id>
- <updated>2011-09-16T14:56:18</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>es-ES</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="es-ES/opds.xml"/>
@@ -104,7 +104,7 @@
<entry>
<title>فارسی</title>
<id>fa-IR/opds.xml</id>
- <updated>2011-09-16T14:56:19</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fa-IR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="fa-IR/opds.xml"/>
@@ -112,7 +112,7 @@
<entry>
<title>Suomi</title>
<id>fi-FI/opds.xml</id>
- <updated>2011-09-16T14:56:20</updated>
+ <updated>2011-09-16T17:58:23</updated>
<dc:language>fi-FI</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="fi-FI/opds.xml"/>
@@ -120,7 +120,7 @@
<entry>
<title>Français</title>
<id>fr-FR/opds.xml</id>
- <updated>2011-09-16T14:56:21</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>fr-FR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="fr-FR/opds.xml"/>
@@ -128,7 +128,7 @@
<entry>
<title>ગુજરાતી</title>
<id>gu-IN/opds.xml</id>
- <updated>2011-09-16T14:56:22</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>gu-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="gu-IN/opds.xml"/>
@@ -136,7 +136,7 @@
<entry>
<title>עברית</title>
<id>he-IL/opds.xml</id>
- <updated>2011-09-16T14:56:23</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>he-IL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="he-IL/opds.xml"/>
@@ -144,7 +144,7 @@
<entry>
<title>हिन्दी</title>
<id>hi-IN/opds.xml</id>
- <updated>2011-09-16T14:56:24</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hi-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="hi-IN/opds.xml"/>
@@ -152,7 +152,7 @@
<entry>
<title>Magyar</title>
<id>hu-HU/opds.xml</id>
- <updated>2011-09-16T14:56:25</updated>
+ <updated>2011-09-16T17:58:24</updated>
<dc:language>hu-HU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="hu-HU/opds.xml"/>
@@ -160,7 +160,7 @@
<entry>
<title>Indonesia</title>
<id>id-ID/opds.xml</id>
- <updated>2011-09-16T14:56:26</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>id-ID</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="id-ID/opds.xml"/>
@@ -168,7 +168,7 @@
<entry>
<title>Italiano</title>
<id>it-IT/opds.xml</id>
- <updated>2011-09-16T14:56:28</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>it-IT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="it-IT/opds.xml"/>
@@ -176,7 +176,7 @@
<entry>
<title>日本語</title>
<id>ja-JP/opds.xml</id>
- <updated>2011-09-16T14:56:29</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja-JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ja-JP/opds.xml"/>
@@ -184,7 +184,7 @@
<entry>
<title>Japanese</title>
<id>ja_JP/opds.xml</id>
- <updated>2011-09-16T14:56:30</updated>
+ <updated>2011-09-16T17:58:25</updated>
<dc:language>ja_JP</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ja_JP/opds.xml"/>
@@ -192,7 +192,7 @@
<entry>
<title>ಕನ್ನಡ</title>
<id>kn-IN/opds.xml</id>
- <updated>2011-09-16T14:56:31</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>kn-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="kn-IN/opds.xml"/>
@@ -200,7 +200,7 @@
<entry>
<title>한국어</title>
<id>ko-KR/opds.xml</id>
- <updated>2011-09-16T14:56:32</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ko-KR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ko-KR/opds.xml"/>
@@ -208,7 +208,7 @@
<entry>
<title>മലയാളം</title>
<id>ml-IN/opds.xml</id>
- <updated>2011-09-16T14:56:33</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>ml-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ml-IN/opds.xml"/>
@@ -216,7 +216,7 @@
<entry>
<title>मराठी</title>
<id>mr-IN/opds.xml</id>
- <updated>2011-09-16T14:56:34</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>mr-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="mr-IN/opds.xml"/>
@@ -224,7 +224,7 @@
<entry>
<title>Norsk (bokmål)</title>
<id>nb-NO/opds.xml</id>
- <updated>2011-09-16T14:56:35</updated>
+ <updated>2011-09-16T17:58:26</updated>
<dc:language>nb-NO</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="nb-NO/opds.xml"/>
@@ -232,7 +232,7 @@
<entry>
<title>Nederlands</title>
<id>nl-NL/opds.xml</id>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>nl-NL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="nl-NL/opds.xml"/>
@@ -240,7 +240,7 @@
<entry>
<title>ଓଡ଼ିଆ</title>
<id>or-IN/opds.xml</id>
- <updated>2011-09-16T14:56:38</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>or-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="or-IN/opds.xml"/>
@@ -248,7 +248,7 @@
<entry>
<title>ਪੰਜਾਬੀ</title>
<id>pa-IN/opds.xml</id>
- <updated>2011-09-16T14:56:39</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pa-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="pa-IN/opds.xml"/>
@@ -256,7 +256,7 @@
<entry>
<title>Polski</title>
<id>pl-PL/opds.xml</id>
- <updated>2011-09-16T14:56:41</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pl-PL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="pl-PL/opds.xml"/>
@@ -264,7 +264,7 @@
<entry>
<title>Português Brasileiro</title>
<id>pt-BR/opds.xml</id>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>pt-BR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="pt-BR/opds.xml"/>
@@ -272,7 +272,7 @@
<entry>
<title>Português</title>
<id>pt-PT/opds.xml</id>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>pt-PT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="pt-PT/opds.xml"/>
@@ -280,7 +280,7 @@
<entry>
<title>Romanian</title>
<id>ro/opds.xml</id>
- <updated>2011-09-16T14:56:45</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ro</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ro/opds.xml"/>
@@ -288,7 +288,7 @@
<entry>
<title>Русский</title>
<id>ru-RU/opds.xml</id>
- <updated>2011-09-16T14:56:47</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ru-RU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ru-RU/opds.xml"/>
@@ -296,7 +296,7 @@
<entry>
<title>Slovenščina</title>
<id>sk-SK/opds.xml</id>
- <updated>2011-09-16T14:56:48</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sk-SK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="sk-SK/opds.xml"/>
@@ -304,7 +304,7 @@
<entry>
<title>Srpski (latinica)</title>
<id>sr-Latn-RS/opds.xml</id>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-Latn-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="sr-Latn-RS/opds.xml"/>
@@ -312,7 +312,7 @@
<entry>
<title>Српски</title>
<id>sr-RS/opds.xml</id>
- <updated>2011-09-16T14:56:51</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="sr-RS/opds.xml"/>
@@ -320,7 +320,7 @@
<entry>
<title>Svenska</title>
<id>sv-SE/opds.xml</id>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sv-SE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="sv-SE/opds.xml"/>
@@ -328,7 +328,7 @@
<entry>
<title>தமிழ்</title>
<id>ta-IN/opds.xml</id>
- <updated>2011-09-16T14:56:54</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>ta-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="ta-IN/opds.xml"/>
@@ -336,7 +336,7 @@
<entry>
<title>తెలుగు</title>
<id>te-IN/opds.xml</id>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>te-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="te-IN/opds.xml"/>
@@ -344,7 +344,7 @@
<entry>
<title>Українська</title>
<id>uk-UA/opds.xml</id>
- <updated>2011-09-16T14:56:57</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>uk-UA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="uk-UA/opds.xml"/>
@@ -352,7 +352,7 @@
<entry>
<title>简体中文</title>
<id>zh-CN/opds.xml</id>
- <updated>2011-09-16T14:56:59</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-CN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="zh-CN/opds.xml"/>
@@ -360,7 +360,7 @@
<entry>
<title>繁體中文</title>
<id>zh-TW/opds.xml</id>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-TW</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="zh-TW/opds.xml"/>
diff --git a/public_html/or-IN/opds-Fedora.xml b/public_html/or-IN/opds-Fedora.xml
index 65b67a7..2616d23 100644
--- a/public_html/or-IN/opds-Fedora.xml
+++ b/public_html/or-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/or-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>or-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/or-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/or-IN/opds-Fedora_Contributor_Documentation.xml
index 6a805b3..b0bd7c6 100644
--- a/public_html/or-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/or-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/or-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/or-IN/opds-Fedora_Core.xml b/public_html/or-IN/opds-Fedora_Core.xml
index 4d81913..0a25a9d 100644
--- a/public_html/or-IN/opds-Fedora_Core.xml
+++ b/public_html/or-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/or-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/or-IN/opds-Fedora_Draft_Documentation.xml b/public_html/or-IN/opds-Fedora_Draft_Documentation.xml
index 0fa7922..b988556 100644
--- a/public_html/or-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/or-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/or-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/or-IN/opds.xml b/public_html/or-IN/opds.xml
index 1517205..147a90b 100644
--- a/public_html/or-IN/opds.xml
+++ b/public_html/or-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/or-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:38</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/or-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>or-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/or-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>or-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/or-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>or-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/or-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:37</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>or-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/or-IN/toc.html b/public_html/or-IN/toc.html
index ae455e7..fdddf88 100644
--- a/public_html/or-IN/toc.html
+++ b/public_html/or-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/pa-IN/opds-Fedora.xml b/public_html/pa-IN/opds-Fedora.xml
index 5bfae75..de5718d 100644
--- a/public_html/pa-IN/opds-Fedora.xml
+++ b/public_html/pa-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pa-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:38</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>pa-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/pa-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/pa-IN/opds-Fedora_Contributor_Documentation.xml
index ed02c07..554711f 100644
--- a/public_html/pa-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/pa-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pa-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:38</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pa-IN/opds-Fedora_Core.xml b/public_html/pa-IN/opds-Fedora_Core.xml
index fd2687e..11eac0e 100644
--- a/public_html/pa-IN/opds-Fedora_Core.xml
+++ b/public_html/pa-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pa-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:39</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pa-IN/opds-Fedora_Draft_Documentation.xml b/public_html/pa-IN/opds-Fedora_Draft_Documentation.xml
index 64c3457..754cc39 100644
--- a/public_html/pa-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/pa-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pa-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:39</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pa-IN/opds.xml b/public_html/pa-IN/opds.xml
index 2cee47a..330a9d0 100644
--- a/public_html/pa-IN/opds.xml
+++ b/public_html/pa-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/pa-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:39</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/pa-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:38</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pa-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/pa-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:38</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pa-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/pa-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:39</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pa-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/pa-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:39</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pa-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/pa-IN/toc.html b/public_html/pa-IN/toc.html
index c4c583c..ea199bd 100644
--- a/public_html/pa-IN/toc.html
+++ b/public_html/pa-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/pl-PL/opds-Fedora.xml b/public_html/pl-PL/opds-Fedora.xml
index c03c025..93f110d 100644
--- a/public_html/pl-PL/opds-Fedora.xml
+++ b/public_html/pl-PL/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pl-PL/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>pl-PL</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/pl-PL/opds-Fedora_Contributor_Documentation.xml b/public_html/pl-PL/opds-Fedora_Contributor_Documentation.xml
index 3c12ddf..ecb204d 100644
--- a/public_html/pl-PL/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/pl-PL/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pl-PL/opds-Fedora_Contributor_Documentation.xml</id>
<title>Dokumentacja dla współtwórców Fedory</title>
<subtitle>Dokumentacja dla współtwórców Fedory</subtitle>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pl-PL/opds-Fedora_Core.xml b/public_html/pl-PL/opds-Fedora_Core.xml
index 87871f3..2029eb3 100644
--- a/public_html/pl-PL/opds-Fedora_Core.xml
+++ b/public_html/pl-PL/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pl-PL/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pl-PL/opds-Fedora_Draft_Documentation.xml b/public_html/pl-PL/opds-Fedora_Draft_Documentation.xml
index 1a69b2e..847c11d 100644
--- a/public_html/pl-PL/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/pl-PL/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pl-PL/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pl-PL/opds.xml b/public_html/pl-PL/opds.xml
index 278df82..698eb6c 100644
--- a/public_html/pl-PL/opds.xml
+++ b/public_html/pl-PL/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/pl-PL/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:41</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/pl-PL/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pl-PL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Dokumentacja dla współtwórców Fedory</title>
<id>http://docs.fedoraproject.org/pl-PL/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pl-PL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/pl-PL/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pl-PL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/pl-PL/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:40</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pl-PL</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/pl-PL/toc.html b/public_html/pl-PL/toc.html
index 041deba..711c4de 100644
--- a/public_html/pl-PL/toc.html
+++ b/public_html/pl-PL/toc.html
@@ -922,7 +922,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -938,10 +938,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -981,7 +981,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1244,7 +1244,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/pt-BR/opds-Fedora.xml b/public_html/pt-BR/opds-Fedora.xml
index a61cf73..b28259f 100644
--- a/public_html/pt-BR/opds-Fedora.xml
+++ b/public_html/pt-BR/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-BR/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>pt-BR</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/pt-BR/opds-Fedora_Contributor_Documentation.xml b/public_html/pt-BR/opds-Fedora_Contributor_Documentation.xml
index 9795171..2cc59cc 100644
--- a/public_html/pt-BR/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/pt-BR/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-BR/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pt-BR/opds-Fedora_Core.xml b/public_html/pt-BR/opds-Fedora_Core.xml
index 66e3e4c..b4aea01 100644
--- a/public_html/pt-BR/opds-Fedora_Core.xml
+++ b/public_html/pt-BR/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-BR/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pt-BR/opds-Fedora_Draft_Documentation.xml b/public_html/pt-BR/opds-Fedora_Draft_Documentation.xml
index 76028bf..5c958f2 100644
--- a/public_html/pt-BR/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/pt-BR/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-BR/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pt-BR/opds.xml b/public_html/pt-BR/opds.xml
index 26717d5..00dc649 100644
--- a/public_html/pt-BR/opds.xml
+++ b/public_html/pt-BR/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/pt-BR/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/pt-BR/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pt-BR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/pt-BR/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pt-BR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/pt-BR/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pt-BR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/pt-BR/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:42</updated>
+ <updated>2011-09-16T17:58:27</updated>
<dc:language>pt-BR</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/pt-BR/toc.html b/public_html/pt-BR/toc.html
index ae6727e..610be4c 100644
--- a/public_html/pt-BR/toc.html
+++ b/public_html/pt-BR/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -859,7 +859,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -875,10 +875,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -918,7 +918,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1181,7 +1181,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/pt-PT/opds-Fedora.xml b/public_html/pt-PT/opds-Fedora.xml
index c7d2202..7bb9222 100644
--- a/public_html/pt-PT/opds-Fedora.xml
+++ b/public_html/pt-PT/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-PT/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:43</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>pt-PT</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/pt-PT/opds-Fedora_Contributor_Documentation.xml b/public_html/pt-PT/opds-Fedora_Contributor_Documentation.xml
index 7e9ecd4..863e56f 100644
--- a/public_html/pt-PT/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/pt-PT/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-PT/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:43</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pt-PT/opds-Fedora_Core.xml b/public_html/pt-PT/opds-Fedora_Core.xml
index 94872e8..10988c8 100644
--- a/public_html/pt-PT/opds-Fedora_Core.xml
+++ b/public_html/pt-PT/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-PT/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pt-PT/opds-Fedora_Draft_Documentation.xml b/public_html/pt-PT/opds-Fedora_Draft_Documentation.xml
index 9064ae6..e9fe528 100644
--- a/public_html/pt-PT/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/pt-PT/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/pt-PT/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/pt-PT/opds.xml b/public_html/pt-PT/opds.xml
index b676e33..e2cff11 100644
--- a/public_html/pt-PT/opds.xml
+++ b/public_html/pt-PT/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/pt-PT/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/pt-PT/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:43</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>pt-PT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/pt-PT/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:43</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>pt-PT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/pt-PT/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>pt-PT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/pt-PT/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>pt-PT</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/pt-PT/toc.html b/public_html/pt-PT/toc.html
index efb2925..7429057 100644
--- a/public_html/pt-PT/toc.html
+++ b/public_html/pt-PT/toc.html
@@ -320,7 +320,7 @@
<a class="type" href="./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-pt-PT.epub" >epub</a>
<a class="type" href="./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-pt-PT.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-pt-PT.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-pt-PT.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-pt-PT.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed">
@@ -859,7 +859,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -875,10 +875,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -918,7 +918,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1171,7 +1171,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ro/opds-Fedora.xml b/public_html/ro/opds-Fedora.xml
index 3fac5bc..bc4e2d6 100644
--- a/public_html/ro/opds-Fedora.xml
+++ b/public_html/ro/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ro/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ro</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ro/opds-Fedora_Contributor_Documentation.xml b/public_html/ro/opds-Fedora_Contributor_Documentation.xml
index 6ad8978..8cbc10f 100644
--- a/public_html/ro/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ro/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ro/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ro/opds-Fedora_Core.xml b/public_html/ro/opds-Fedora_Core.xml
index bef8ed7..08a41fd 100644
--- a/public_html/ro/opds-Fedora_Core.xml
+++ b/public_html/ro/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ro/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ro/opds-Fedora_Draft_Documentation.xml b/public_html/ro/opds-Fedora_Draft_Documentation.xml
index 9fe6f49..e34599c 100644
--- a/public_html/ro/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ro/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ro/opds-Fedora_Draft_Documentation.xml</id>
<title>Schiță Documentație Fedora</title>
<subtitle>Schiță Documentație Fedora</subtitle>
- <updated>2011-09-16T14:56:45</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ro/opds.xml b/public_html/ro/opds.xml
index 7d7d4d1..6fc6622 100644
--- a/public_html/ro/opds.xml
+++ b/public_html/ro/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ro/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:45</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ro/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ro</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/ro/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ro</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ro/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:44</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ro</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Schiță Documentație Fedora</title>
<id>http://docs.fedoraproject.org/ro/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:45</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ro</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ro/toc.html b/public_html/ro/toc.html
index fe98aa6..97cf40d 100644
--- a/public_html/ro/toc.html
+++ b/public_html/ro/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ru-RU/opds-Fedora.xml b/public_html/ru-RU/opds-Fedora.xml
index 0ed8bea..a48d74e 100644
--- a/public_html/ru-RU/opds-Fedora.xml
+++ b/public_html/ru-RU/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ru-RU/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ru-RU</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ru-RU/opds-Fedora_Contributor_Documentation.xml b/public_html/ru-RU/opds-Fedora_Contributor_Documentation.xml
index 031edf9..28dccc8 100644
--- a/public_html/ru-RU/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ru-RU/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ru-RU/opds-Fedora_Contributor_Documentation.xml</id>
<title>Документация участника Fedora</title>
<subtitle>Документация участника Fedora</subtitle>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ru-RU/opds-Fedora_Core.xml b/public_html/ru-RU/opds-Fedora_Core.xml
index 9f37600..9be5fbc 100644
--- a/public_html/ru-RU/opds-Fedora_Core.xml
+++ b/public_html/ru-RU/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ru-RU/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ru-RU/opds-Fedora_Draft_Documentation.xml b/public_html/ru-RU/opds-Fedora_Draft_Documentation.xml
index b9929f8..1664f7e 100644
--- a/public_html/ru-RU/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ru-RU/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ru-RU/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ru-RU/opds.xml b/public_html/ru-RU/opds.xml
index ff4dee3..51d0c16 100644
--- a/public_html/ru-RU/opds.xml
+++ b/public_html/ru-RU/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ru-RU/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:47</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ru-RU/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ru-RU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Документация участника Fedora</title>
<id>http://docs.fedoraproject.org/ru-RU/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ru-RU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ru-RU/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ru-RU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/ru-RU/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:46</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>ru-RU</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ru-RU/toc.html b/public_html/ru-RU/toc.html
index 0a81684..f65d0e0 100644
--- a/public_html/ru-RU/toc.html
+++ b/public_html/ru-RU/toc.html
@@ -106,7 +106,7 @@
<a class="type" href="./Fedora/15/epub/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ru-RU.epub" >epub</a>
<a class="type" href="./Fedora/15/html/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html/Burning_ISO_images_to_disc/index.html';return false;">html</a>
<a class="type" href="./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html" onclick="window.top.location='./Fedora/15/html-single/Burning_ISO_images_to_disc/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ru-RU.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ru-RU.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ru-RU.pdf" onclick="window.top.location='./Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ru-RU.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.15.Fedora_Live_Images' class="book collapsed">
@@ -320,7 +320,7 @@
<a class="type" href="./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-ru-RU.epub" >epub</a>
<a class="type" href="./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-ru-RU.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-ru-RU.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-ru-RU.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-ru-RU.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/sk-SK/opds-Fedora.xml b/public_html/sk-SK/opds-Fedora.xml
index af522f0..f16ea19 100644
--- a/public_html/sk-SK/opds-Fedora.xml
+++ b/public_html/sk-SK/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sk-SK/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:47</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>sk-SK</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/sk-SK/opds-Fedora_Contributor_Documentation.xml b/public_html/sk-SK/opds-Fedora_Contributor_Documentation.xml
index 97048f9..4ae81d6 100644
--- a/public_html/sk-SK/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/sk-SK/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sk-SK/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:47</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sk-SK/opds-Fedora_Core.xml b/public_html/sk-SK/opds-Fedora_Core.xml
index 17e3d96..10b6eaa 100644
--- a/public_html/sk-SK/opds-Fedora_Core.xml
+++ b/public_html/sk-SK/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sk-SK/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:48</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sk-SK/opds-Fedora_Draft_Documentation.xml b/public_html/sk-SK/opds-Fedora_Draft_Documentation.xml
index 444b36e..dfd3573 100644
--- a/public_html/sk-SK/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/sk-SK/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sk-SK/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:48</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sk-SK/opds.xml b/public_html/sk-SK/opds.xml
index 60ed01d..90cf579 100644
--- a/public_html/sk-SK/opds.xml
+++ b/public_html/sk-SK/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/sk-SK/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:48</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/sk-SK/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:47</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sk-SK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/sk-SK/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:47</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sk-SK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/sk-SK/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:48</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sk-SK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/sk-SK/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:48</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sk-SK</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/sk-SK/toc.html b/public_html/sk-SK/toc.html
index 1926e47..ce80415 100644
--- a/public_html/sk-SK/toc.html
+++ b/public_html/sk-SK/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/sr-Latn-RS/opds-Fedora.xml b/public_html/sr-Latn-RS/opds-Fedora.xml
index f8cbdcc..b0b438f 100644
--- a/public_html/sr-Latn-RS/opds-Fedora.xml
+++ b/public_html/sr-Latn-RS/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-Latn-RS/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>sr-Latn-RS</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/sr-Latn-RS/opds-Fedora_Contributor_Documentation.xml b/public_html/sr-Latn-RS/opds-Fedora_Contributor_Documentation.xml
index 8090b3a..d57201f 100644
--- a/public_html/sr-Latn-RS/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/sr-Latn-RS/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-Latn-RS/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:28</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sr-Latn-RS/opds-Fedora_Core.xml b/public_html/sr-Latn-RS/opds-Fedora_Core.xml
index 7fa81ed..9189892 100644
--- a/public_html/sr-Latn-RS/opds-Fedora_Core.xml
+++ b/public_html/sr-Latn-RS/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-Latn-RS/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sr-Latn-RS/opds-Fedora_Draft_Documentation.xml b/public_html/sr-Latn-RS/opds-Fedora_Draft_Documentation.xml
index 85fe3d4..0ede0b0 100644
--- a/public_html/sr-Latn-RS/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/sr-Latn-RS/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-Latn-RS/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sr-Latn-RS/opds.xml b/public_html/sr-Latn-RS/opds.xml
index 1709dd9..8e431e9 100644
--- a/public_html/sr-Latn-RS/opds.xml
+++ b/public_html/sr-Latn-RS/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/sr-Latn-RS/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/sr-Latn-RS/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sr-Latn-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/sr-Latn-RS/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:28</updated>
<dc:language>sr-Latn-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/sr-Latn-RS/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-Latn-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/sr-Latn-RS/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:49</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-Latn-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/sr-Latn-RS/toc.html b/public_html/sr-Latn-RS/toc.html
index 47d7d1a..534eed9 100644
--- a/public_html/sr-Latn-RS/toc.html
+++ b/public_html/sr-Latn-RS/toc.html
@@ -350,7 +350,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Installation_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.13.Installation_Guide.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/sr-RS/opds-Fedora.xml b/public_html/sr-RS/opds-Fedora.xml
index e8783d2..446760a 100644
--- a/public_html/sr-RS/opds-Fedora.xml
+++ b/public_html/sr-RS/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-RS/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:50</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>sr-RS</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/sr-RS/opds-Fedora_Contributor_Documentation.xml b/public_html/sr-RS/opds-Fedora_Contributor_Documentation.xml
index aefd1f0..72e67e2 100644
--- a/public_html/sr-RS/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/sr-RS/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-RS/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:50</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sr-RS/opds-Fedora_Core.xml b/public_html/sr-RS/opds-Fedora_Core.xml
index b45287c..34a4406 100644
--- a/public_html/sr-RS/opds-Fedora_Core.xml
+++ b/public_html/sr-RS/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-RS/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:51</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sr-RS/opds-Fedora_Draft_Documentation.xml b/public_html/sr-RS/opds-Fedora_Draft_Documentation.xml
index 6e5de0d..c069eb7 100644
--- a/public_html/sr-RS/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/sr-RS/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sr-RS/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:51</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sr-RS/opds.xml b/public_html/sr-RS/opds.xml
index 868e3f4..52b50a8 100644
--- a/public_html/sr-RS/opds.xml
+++ b/public_html/sr-RS/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/sr-RS/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:51</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/sr-RS/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:50</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/sr-RS/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:50</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/sr-RS/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:51</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/sr-RS/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:51</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sr-RS</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/sr-RS/toc.html b/public_html/sr-RS/toc.html
index 3cc4b23..8cc14c6 100644
--- a/public_html/sr-RS/toc.html
+++ b/public_html/sr-RS/toc.html
@@ -350,7 +350,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Installation_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.13.Installation_Guide.types');">
@@ -859,7 +859,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -875,10 +875,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -918,7 +918,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1181,7 +1181,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/sv-SE/opds-Fedora.xml b/public_html/sv-SE/opds-Fedora.xml
index f9eeda4..661d614 100644
--- a/public_html/sv-SE/opds-Fedora.xml
+++ b/public_html/sv-SE/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sv-SE/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>sv-SE</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/sv-SE/opds-Fedora_Contributor_Documentation.xml b/public_html/sv-SE/opds-Fedora_Contributor_Documentation.xml
index 39853ba..03389ce 100644
--- a/public_html/sv-SE/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/sv-SE/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sv-SE/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sv-SE/opds-Fedora_Core.xml b/public_html/sv-SE/opds-Fedora_Core.xml
index 8fc0008..44f06f6 100644
--- a/public_html/sv-SE/opds-Fedora_Core.xml
+++ b/public_html/sv-SE/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sv-SE/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sv-SE/opds-Fedora_Draft_Documentation.xml b/public_html/sv-SE/opds-Fedora_Draft_Documentation.xml
index 68c87e2..f34cb8a 100644
--- a/public_html/sv-SE/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/sv-SE/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/sv-SE/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/sv-SE/opds.xml b/public_html/sv-SE/opds.xml
index afbbab0..d705420 100644
--- a/public_html/sv-SE/opds.xml
+++ b/public_html/sv-SE/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/sv-SE/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/sv-SE/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sv-SE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/sv-SE/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sv-SE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/sv-SE/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sv-SE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/sv-SE/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:52</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>sv-SE</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/sv-SE/toc.html b/public_html/sv-SE/toc.html
index 7ad9800..8cf2e4e 100644
--- a/public_html/sv-SE/toc.html
+++ b/public_html/sv-SE/toc.html
@@ -359,7 +359,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Installation_Guide' class="book collapsed" onclick="toggle(event, 'Fedora.13.Installation_Guide.types');">
@@ -895,7 +895,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -911,10 +911,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -954,7 +954,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1217,7 +1217,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/ta-IN/opds-Fedora.xml b/public_html/ta-IN/opds-Fedora.xml
index 687b6de..eb9eae0 100644
--- a/public_html/ta-IN/opds-Fedora.xml
+++ b/public_html/ta-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ta-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>ta-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/ta-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/ta-IN/opds-Fedora_Contributor_Documentation.xml
index 0736702..03979b5 100644
--- a/public_html/ta-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/ta-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ta-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ta-IN/opds-Fedora_Core.xml b/public_html/ta-IN/opds-Fedora_Core.xml
index 3ca39ae..e4d5d6e 100644
--- a/public_html/ta-IN/opds-Fedora_Core.xml
+++ b/public_html/ta-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ta-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ta-IN/opds-Fedora_Draft_Documentation.xml b/public_html/ta-IN/opds-Fedora_Draft_Documentation.xml
index f443781..9e46bae 100644
--- a/public_html/ta-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/ta-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/ta-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/ta-IN/opds.xml b/public_html/ta-IN/opds.xml
index 2389fd8..28f00e2 100644
--- a/public_html/ta-IN/opds.xml
+++ b/public_html/ta-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/ta-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:54</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/ta-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>ta-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/ta-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>ta-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/ta-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>ta-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/ta-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:53</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>ta-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/ta-IN/toc.html b/public_html/ta-IN/toc.html
index ff65eda..ee0284e 100644
--- a/public_html/ta-IN/toc.html
+++ b/public_html/ta-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/te-IN/opds-Fedora.xml b/public_html/te-IN/opds-Fedora.xml
index 9eb4449..cf14dce 100644
--- a/public_html/te-IN/opds-Fedora.xml
+++ b/public_html/te-IN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/te-IN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>te-IN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/te-IN/opds-Fedora_Contributor_Documentation.xml b/public_html/te-IN/opds-Fedora_Contributor_Documentation.xml
index 560b9df..738cf45 100644
--- a/public_html/te-IN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/te-IN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/te-IN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/te-IN/opds-Fedora_Core.xml b/public_html/te-IN/opds-Fedora_Core.xml
index ca287c9..2b24976 100644
--- a/public_html/te-IN/opds-Fedora_Core.xml
+++ b/public_html/te-IN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/te-IN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/te-IN/opds-Fedora_Draft_Documentation.xml b/public_html/te-IN/opds-Fedora_Draft_Documentation.xml
index 9560fba..146d30d 100644
--- a/public_html/te-IN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/te-IN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/te-IN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/te-IN/opds.xml b/public_html/te-IN/opds.xml
index 6a66541..e890fc5 100644
--- a/public_html/te-IN/opds.xml
+++ b/public_html/te-IN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/te-IN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/te-IN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>te-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/te-IN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>te-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/te-IN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>te-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/te-IN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:55</updated>
+ <updated>2011-09-16T17:58:29</updated>
<dc:language>te-IN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/te-IN/toc.html b/public_html/te-IN/toc.html
index 973ce10..3c2dd64 100644
--- a/public_html/te-IN/toc.html
+++ b/public_html/te-IN/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/toc.html b/public_html/toc.html
index 403cc1f..8953971 100644
--- a/public_html/toc.html
+++ b/public_html/toc.html
@@ -318,7 +318,7 @@
<a class="type" href="./ca-ES/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./ca-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ca-ES.pdf">pdf</a>
+ <a class="type" href="./ca-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ca-ES.pdf">pdf</a>
</div>
</div>
@@ -442,7 +442,7 @@
<a class="type" href="./cs-CZ/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./cs-CZ/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-cs-CZ.pdf">pdf</a>
+ <a class="type" href="./cs-CZ/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-cs-CZ.pdf">pdf</a>
</div>
</div>
@@ -684,7 +684,7 @@
<a class="type" href="./de-DE/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./de-DE/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-de-DE.pdf">pdf</a>
+ <a class="type" href="./de-DE/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-de-DE.pdf">pdf</a>
</div>
</div>
@@ -1684,7 +1684,7 @@
<a class="type" href="./en-US/Fedora/13/html-single/Accessibility_Guide/index.html">html-single</a>
- <a class="type" href="./en-US/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf">pdf</a>
+ <a class="type" href="./en-US/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf">pdf</a>
</div>
</div>
@@ -2469,7 +2469,7 @@
<a class="type" href="./en-US/Fedora/0.1/html-single/Amateur_Radio_Guide/index.html">html-single</a>
- <a class="type" href="./en-US/Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf">pdf</a>
+ <a class="type" href="./en-US/Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf">pdf</a>
</div>
</div>
@@ -2481,13 +2481,13 @@
<span id="Security_Guide" class="book">Security Guide</span>
<div class="types">
- <a class="type" href="./en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">epub</a>
+ <a class="type" href="./en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">epub</a>
<a class="type" href="./en-US/Fedora//html/Security_Guide/index.html">html</a>
<a class="type" href="./en-US/Fedora//html-single/Security_Guide/index.html">html-single</a>
- <a class="type" href="./en-US/Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf">pdf</a>
+ <a class="type" href="./en-US/Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf">pdf</a>
</div>
</div>
@@ -2541,7 +2541,7 @@
<a class="type" href="./en-US/Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html">html-single</a>
- <a class="type" href="./en-US/Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf">pdf</a>
+ <a class="type" href="./en-US/Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf">pdf</a>
</div>
</div>
@@ -2865,7 +2865,7 @@
<a class="type" href="./en-US/Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html">html-single</a>
- <a class="type" href="./en-US/Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf">pdf</a>
+ <a class="type" href="./en-US/Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf">pdf</a>
</div>
</div>
@@ -3002,7 +3002,7 @@
<a class="type" href="./es-ES/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./es-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-es-ES.pdf">pdf</a>
+ <a class="type" href="./es-ES/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-es-ES.pdf">pdf</a>
</div>
</div>
@@ -3134,7 +3134,7 @@
<a class="type" href="./es-ES/Fedora/14/html-single/Software_Management_Guide/index.html">html-single</a>
- <a class="type" href="./es-ES/Fedora/14/pdf/Software_Management_Guide/Fedora-0.1-Software_Management_Guide-es-ES.pdf">pdf</a>
+ <a class="type" href="./es-ES/Fedora/14/pdf/Software_Management_Guide/Fedora-14-Software_Management_Guide-es-ES.pdf">pdf</a>
</div>
</div>
@@ -3167,7 +3167,7 @@
<a class="type" href="./es-ES/Fedora/13/html-single/Accessibility_Guide/index.html">html-single</a>
- <a class="type" href="./es-ES/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-es-ES.pdf">pdf</a>
+ <a class="type" href="./es-ES/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-es-ES.pdf">pdf</a>
</div>
</div>
@@ -4007,7 +4007,7 @@
<a class="type" href="./fi-FI/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./fi-FI/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-fi-FI.pdf">pdf</a>
+ <a class="type" href="./fi-FI/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-fi-FI.pdf">pdf</a>
</div>
</div>
@@ -4170,7 +4170,7 @@
<a class="type" href="./fi-FI/Fedora/10/html-single/Fedora_Live_Images/index.html">html-single</a>
- <a class="type" href="./fi-FI/Fedora/10/pdf/Fedora_Live_Images/Fedora-13-Fedora_Live_Images-fi-FI.pdf">pdf</a>
+ <a class="type" href="./fi-FI/Fedora/10/pdf/Fedora_Live_Images/Fedora-10-Fedora_Live_Images-fi-FI.pdf">pdf</a>
</div>
</div>
@@ -4963,7 +4963,7 @@
<a class="type" href="./id-ID/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./id-ID/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-id-ID.pdf">pdf</a>
+ <a class="type" href="./id-ID/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-id-ID.pdf">pdf</a>
</div>
</div>
@@ -5720,7 +5720,7 @@
<a class="type" href="./ja-JP/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./ja-JP/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ja-JP.pdf">pdf</a>
+ <a class="type" href="./ja-JP/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ja-JP.pdf">pdf</a>
</div>
</div>
@@ -8582,7 +8582,7 @@
<a class="type" href="./pt-PT/Fedora/13/html-single/Accessibility_Guide/index.html">html-single</a>
- <a class="type" href="./pt-PT/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-pt-PT.pdf">pdf</a>
+ <a class="type" href="./pt-PT/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-pt-PT.pdf">pdf</a>
</div>
</div>
@@ -9107,7 +9107,7 @@
<a class="type" href="./ru-RU/Fedora/15/html-single/Burning_ISO_images_to_disc/index.html">html-single</a>
- <a class="type" href="./ru-RU/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15-Burning_ISO_images_to_disc-ru-RU.pdf">pdf</a>
+ <a class="type" href="./ru-RU/Fedora/15/pdf/Burning_ISO_images_to_disc/Fedora-15.0-Burning_ISO_images_to_disc-ru-RU.pdf">pdf</a>
</div>
</div>
@@ -9171,7 +9171,7 @@
<a class="type" href="./ru-RU/Fedora/13/html-single/Accessibility_Guide/index.html">html-single</a>
- <a class="type" href="./ru-RU/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-ru-RU.pdf">pdf</a>
+ <a class="type" href="./ru-RU/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-ru-RU.pdf">pdf</a>
</div>
</div>
@@ -10901,7 +10901,7 @@
<a class="type" href="./uk-UA/Fedora/13/html-single/Accessibility_Guide/index.html">html-single</a>
- <a class="type" href="./uk-UA/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-uk-UA.pdf">pdf</a>
+ <a class="type" href="./uk-UA/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-uk-UA.pdf">pdf</a>
</div>
</div>
@@ -11328,7 +11328,7 @@
<a class="type" href="./zh-CN/Fedora/13/html-single/Accessibility_Guide/index.html">html-single</a>
- <a class="type" href="./zh-CN/Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-zh-CN.pdf">pdf</a>
+ <a class="type" href="./zh-CN/Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-zh-CN.pdf">pdf</a>
</div>
</div>
diff --git a/public_html/uk-UA/opds-Fedora.xml b/public_html/uk-UA/opds-Fedora.xml
index ecbe4cc..8fc22bd 100644
--- a/public_html/uk-UA/opds-Fedora.xml
+++ b/public_html/uk-UA/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/uk-UA/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:56</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>uk-UA</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/uk-UA/opds-Fedora_Contributor_Documentation.xml b/public_html/uk-UA/opds-Fedora_Contributor_Documentation.xml
index f49eebe..9ab8682 100644
--- a/public_html/uk-UA/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/uk-UA/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/uk-UA/opds-Fedora_Contributor_Documentation.xml</id>
<title>Документація для учасника розробки Fedora</title>
<subtitle>Документація для учасника розробки Fedora</subtitle>
- <updated>2011-09-16T14:56:56</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/uk-UA/opds-Fedora_Core.xml b/public_html/uk-UA/opds-Fedora_Core.xml
index 2337093..f8e36ca 100644
--- a/public_html/uk-UA/opds-Fedora_Core.xml
+++ b/public_html/uk-UA/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/uk-UA/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:57</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/uk-UA/opds-Fedora_Draft_Documentation.xml b/public_html/uk-UA/opds-Fedora_Draft_Documentation.xml
index 90b8b07..06bbd19 100644
--- a/public_html/uk-UA/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/uk-UA/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/uk-UA/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:57</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/uk-UA/opds.xml b/public_html/uk-UA/opds.xml
index 195c1d9..6fc9f88 100644
--- a/public_html/uk-UA/opds.xml
+++ b/public_html/uk-UA/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/uk-UA/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:57</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/uk-UA/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:56</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>uk-UA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Документація для учасника розробки Fedora</title>
<id>http://docs.fedoraproject.org/uk-UA/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:56</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>uk-UA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/uk-UA/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:57</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>uk-UA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/uk-UA/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:57</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>uk-UA</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/uk-UA/toc.html b/public_html/uk-UA/toc.html
index 93efba5..205c080 100644
--- a/public_html/uk-UA/toc.html
+++ b/public_html/uk-UA/toc.html
@@ -320,7 +320,7 @@
<a class="type" href="./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-uk-UA.epub" >epub</a>
<a class="type" href="./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-uk-UA.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-uk-UA.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-uk-UA.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-uk-UA.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/zh-CN/opds-Fedora.xml b/public_html/zh-CN/opds-Fedora.xml
index f0a554c..c3e2d90 100644
--- a/public_html/zh-CN/opds-Fedora.xml
+++ b/public_html/zh-CN/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-CN/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>zh-CN</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1294,7 +1294,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1306,7 +1306,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/zh-CN/opds-Fedora_Contributor_Documentation.xml b/public_html/zh-CN/opds-Fedora_Contributor_Documentation.xml
index 96768e4..0c23554 100644
--- a/public_html/zh-CN/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/zh-CN/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-CN/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/zh-CN/opds-Fedora_Core.xml b/public_html/zh-CN/opds-Fedora_Core.xml
index f472d12..9702844 100644
--- a/public_html/zh-CN/opds-Fedora_Core.xml
+++ b/public_html/zh-CN/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-CN/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/zh-CN/opds-Fedora_Draft_Documentation.xml b/public_html/zh-CN/opds-Fedora_Draft_Documentation.xml
index 7583295..24546f5 100644
--- a/public_html/zh-CN/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/zh-CN/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-CN/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/zh-CN/opds.xml b/public_html/zh-CN/opds.xml
index 600b04a..ed27a99 100644
--- a/public_html/zh-CN/opds.xml
+++ b/public_html/zh-CN/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/zh-CN/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:56:59</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/zh-CN/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-CN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/zh-CN/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-CN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/zh-CN/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-CN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/zh-CN/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:56:58</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-CN</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/zh-CN/toc.html b/public_html/zh-CN/toc.html
index 27c834e..0084cda 100644
--- a/public_html/zh-CN/toc.html
+++ b/public_html/zh-CN/toc.html
@@ -318,7 +318,7 @@
<a class="type" href="./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-zh-CN.epub" >epub</a>
<a class="type" href="./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-zh-CN.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-zh-CN.pdf';return false;">pdf</a>
+ <a class="type" href="./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-zh-CN.pdf" onclick="window.top.location='./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-zh-CN.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed">
@@ -920,7 +920,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -936,10 +936,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -979,7 +979,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1242,7 +1242,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
diff --git a/public_html/zh-TW/opds-Fedora.xml b/public_html/zh-TW/opds-Fedora.xml
index 92c9789..1b911e1 100644
--- a/public_html/zh-TW/opds-Fedora.xml
+++ b/public_html/zh-TW/opds-Fedora.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-TW/opds-Fedora.xml</id>
<title>Fedora</title>
<subtitle>Fedora</subtitle>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
@@ -76,7 +76,7 @@
<name></name>
<uri></uri>
</author-->
- <updated>2011-08-31</updated>
+ <updated>2011-09-16</updated>
<dc:language>zh-TW</dc:language>
<category label="" scheme="http://lexcycle.com/stanza/header" term="free"/>
<!--dc:issued></dc:issued-->
@@ -1313,7 +1313,7 @@
</entry>
<entry>
<title>Security Guide</title>
- <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub</id>
+ <id>http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub</id>
<!--author>
<name></name>
<uri></uri>
@@ -1325,7 +1325,7 @@
<summary>A Guide to Securing Fedora Linux
</summary>
<content type="text">The Fedora Security Guide is designed to assist users of Fedora in learning the processes and practices of securing workstations and servers against local and remote intrusion, exploitation, and malicious activity. Focused on Fedora Linux but detailing concepts and techniques valid for all Linux systems, the Fedora Security Guide details the planning and the tools involved in creating a secured computing environment for the data center, workplace, and home. With proper administrative knowledge, vigilance, and tools, systems running Linux can be both fully functional and secured from most common intrusion and exploit methods.</content>
- <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub">
+ <link type="application/epub+zip" rel="http://opds-spec.org/acquisition" href="http://docs.fedoraproject.org/en-US/Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub">
<dc:format>application/epub+zip</dc:format>
</link>
<!--link type="application/atom+xml;type=entry" href="" rel="alternate" title="Full entry"/-->
diff --git a/public_html/zh-TW/opds-Fedora_Contributor_Documentation.xml b/public_html/zh-TW/opds-Fedora_Contributor_Documentation.xml
index 147e00f..1947cea 100644
--- a/public_html/zh-TW/opds-Fedora_Contributor_Documentation.xml
+++ b/public_html/zh-TW/opds-Fedora_Contributor_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-TW/opds-Fedora_Contributor_Documentation.xml</id>
<title>Fedora Contributor Documentation</title>
<subtitle>Fedora Contributor Documentation</subtitle>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/zh-TW/opds-Fedora_Core.xml b/public_html/zh-TW/opds-Fedora_Core.xml
index 08274da..5553c74 100644
--- a/public_html/zh-TW/opds-Fedora_Core.xml
+++ b/public_html/zh-TW/opds-Fedora_Core.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-TW/opds-Fedora_Core.xml</id>
<title>Fedora Core</title>
<subtitle>Fedora Core</subtitle>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/zh-TW/opds-Fedora_Draft_Documentation.xml b/public_html/zh-TW/opds-Fedora_Draft_Documentation.xml
index f1b38e8..bf732c8 100644
--- a/public_html/zh-TW/opds-Fedora_Draft_Documentation.xml
+++ b/public_html/zh-TW/opds-Fedora_Draft_Documentation.xml
@@ -6,7 +6,7 @@
<id>http://docs.fedoraproject.org/zh-TW/opds-Fedora_Draft_Documentation.xml</id>
<title>Fedora Draft Documentation</title>
<subtitle>Fedora Draft Documentation</subtitle>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
diff --git a/public_html/zh-TW/opds.xml b/public_html/zh-TW/opds.xml
index ebf12c6..9589a39 100644
--- a/public_html/zh-TW/opds.xml
+++ b/public_html/zh-TW/opds.xml
@@ -6,7 +6,7 @@
<link rel="http://opds-spec.org/crawlable" type="application/atom+xml" href="http://bookserver.archive.org/catalog/crawlable" title="Crawlable feed"/>
<id>http://docs.fedoraproject.org/zh-TW/opds.xml</id>
<title>Product List</title>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<!--author>
<name></name>
<uri></uri>
@@ -15,7 +15,7 @@
<entry>
<title>Fedora</title>
<id>http://docs.fedoraproject.org/zh-TW/Fedora/opds-Fedora.xml</id>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-TW</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora.xml"/>
@@ -23,7 +23,7 @@
<entry>
<title>Fedora Contributor Documentation</title>
<id>http://docs.fedoraproject.org/zh-TW/Fedora_Contributor_Documentation/opds-Fedora_Contributor_Documentation.xml</id>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-TW</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Contributor_Documentation.xml"/>
@@ -31,7 +31,7 @@
<entry>
<title>Fedora Core</title>
<id>http://docs.fedoraproject.org/zh-TW/Fedora_Core/opds-Fedora_Core.xml</id>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-TW</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Core.xml"/>
@@ -39,7 +39,7 @@
<entry>
<title>Fedora Draft Documentation</title>
<id>http://docs.fedoraproject.org/zh-TW/Fedora_Draft_Documentation/opds-Fedora_Draft_Documentation.xml</id>
- <updated>2011-09-16T14:57:00</updated>
+ <updated>2011-09-16T17:58:30</updated>
<dc:language>zh-TW</dc:language>
<content type="text"></content>
<link type="application/atom+xml" href="opds-Fedora_Draft_Documentation.xml"/>
diff --git a/public_html/zh-TW/toc.html b/public_html/zh-TW/toc.html
index e488ce7..c8486f2 100644
--- a/public_html/zh-TW/toc.html
+++ b/public_html/zh-TW/toc.html
@@ -323,7 +323,7 @@
<a class="type" href="../en-US/./Fedora/13/epub/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/13/html/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html/Accessibility_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/13/html-single/Accessibility_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/13/pdf/Accessibility_Guide/Fedora-13-Accessibility_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
<div id='Fedora.13.Burning_ISO_images_to_disc' class="book collapsed" onclick="toggle(event, 'Fedora.13.Burning_ISO_images_to_disc.types');">
@@ -850,7 +850,7 @@
<a class="type" href="../en-US/./Fedora/0.1/epub/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html/Amateur_Radio_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html" onclick="window.top.location='../en-US/./Fedora/0.1/html-single/Amateur_Radio_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora_Draft_Documentation-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora/0.1/pdf/Amateur_Radio_Guide/Fedora-0.1-Amateur_Radio_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -866,10 +866,10 @@
<div id='Fedora..Security_Guide' class="book collapsed" onclick="toggle(event, 'Fedora..Security_Guide.types');">
<a class="type" href="../en-US/Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/Fedora//html/Security_Guide/index.html'"><span class="book">Security Guide</span></a>
<div id='Fedora..Security_Guide.types' class="types hidden" onclick="work=0;">
- <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora_Documentation--Security_Guide-en-US.epub" >epub</a>
+ <a class="type" href="../en-US/./Fedora//epub/Security_Guide/Fedora--Security_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora//html/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html/Security_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora//html-single/Security_Guide/index.html" onclick="window.top.location='../en-US/./Fedora//html-single/Security_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora--Security_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora//pdf/Security_Guide/Fedora_Documentation--Security_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -909,7 +909,7 @@
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/epub/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html/Users_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/html-single/Users_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1.6-Users_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Contributor_Documentation/1/pdf/Users_Guide/Fedora_Contributor_Documentation-1-Users_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
@@ -1172,7 +1172,7 @@
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/epub/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.epub" >epub</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html/OpenSSH_Guide/index.html';return false;">html</a>
<a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/html-single/OpenSSH_Guide/index.html';return false;">html-single</a>
- <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.2-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
+ <a class="type" href="../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf" onclick="window.top.location='../en-US/./Fedora_Draft_Documentation/0.2/pdf/OpenSSH_Guide/Fedora_Draft_Documentation-0.1-OpenSSH_Guide-en-US.pdf';return false;">pdf</a>
</div>
</div>
</div>
More information about the docs-commits
mailing list